Microsoft Teams: Search for images

🚨 The Signal: Microsoft Teams now allows users to search for images within chats by content, sender, or sharing location. This enhances data discoverability, potentially increasing the risk of sensitive image exposure if not properly governed.

The Impact

All Teams users are affected, with a moderate risk of increased exposure of sensitive images due to enhanced search capabilities.

• End Users: Increased risk of inadvertently sharing sensitive images if content is not properly classified.
• Security Team: Potential for increased data exfiltration risk if sensitive images are easily discoverable.
• Compliance Team: Greater challenge in demonstrating controlled dissemination of information.
• Data Owners: Enhanced discoverability means greater responsibility for image content.

The Action

1. Review and enforce Microsoft Purview Data Loss Prevention (DLP) policies for Teams to identify and restrict sharing of sensitive images.
2. Educate users on best practices for sharing images in Teams, emphasising the discoverability of content.
3. Implement or refine Microsoft Purview Communication Compliance policies to detect inappropriate image sharing.
4. Regularly audit Teams content for sensitive information, including images, using Purview Content Search.

Domain: Teams · Impact: medium · Workload: Teams