Microsoft Viva: Flexible targeting of Storyline Announcements

🚨 The Signal: Viva Engage Storyline Announcements now allow custom audience targeting using M365 groups, attributes, or individuals. This increases the risk of information oversharing or miscommunication if not managed carefully.

The Impact

Leaders and delegates are affected, with a security risk of unintended information disclosure or miscommunication due to flexible targeting.

• Leaders: Risk of oversharing sensitive information to unintended audiences.
• Delegates: Increased responsibility for accurate audience selection, potential for errors.
• End Users: May receive sensitive information not intended for them.
• Security Team: New vector for information leakage requires monitoring and policy updates.

The Action

1. Review and update existing Viva Engage governance policies regarding Storyline Announcement audience targeting.
2. Communicate best practices for audience selection to leaders and delegates using Viva Engage.
3. Monitor Viva Engage usage for adherence to new targeting policies.
4. Consider implementing sensitivity labels for Viva Engage content if not already in place.

Domain: Other · Impact: medium · Workload: Other