Microsoft Viva: Storyline & Post Enhancements, Cover Photos, Drafts, AMAs, and More

🚨 The Signal: Viva Engage now supports delegate posting and scheduled content. This introduces new avenues for unauthorized content publication and impersonation, requiring review of existing governance policies.

The Impact

Content creators and delegates are affected, increasing the risk of unauthorized or inappropriate content being published, and potential impersonation.

  • Content creators face risk of unauthorized content if delegates are compromised.
  • Delegates risk misuse of their 'post-on-behalf-of' privileges.
  • Organisations face increased risk of content policy violations.
  • Security teams must manage new content integrity and accountability risks.

The Action

  1. Review and update existing content governance policies for Viva Engage.
  2. Communicate new delegate posting capabilities and responsibilities to users.
  3. Implement or reinforce approval workflows for delegate-posted content.
  4. Monitor Viva Engage audit logs for 'post-on-behalf-of' activities.
  5. Educate users on the risks associated with delegating posting privileges.

Domain: Other · Impact: medium · Workload: Other