OneDrive: Find your group sites faster with the new My Sites tab in OneDrive for iOS

🚨 The Signal: OneDrive iOS app now lists all group-connected SharePoint sites a user owns or belongs to. This simplifies access to team content, potentially increasing exposure of sensitive data if permissions are not correctly managed.

The Impact

All users with the OneDrive iOS app are affected, increasing the risk of unintended data exposure if SharePoint site permissions are not tightly controlled.

• End Users: Easier access to group sites may lead to inadvertent sharing or viewing of sensitive data.
• Security Teams: Increased visibility of sites on mobile devices requires stricter enforcement of SharePoint permissions.
• Admins: Need to review and confirm SharePoint site access controls are appropriate for mobile consumption.

The Action

1. Review all SharePoint Online site permissions, especially for group-connected sites, to ensure least privilege is enforced.
2. Audit existing SharePoint site sharing policies to prevent oversharing of sensitive information.
3. Educate users on responsible data handling practices when accessing sensitive information on mobile devices.
4. Consider implementing Microsoft Purview Information Protection labels for sensitive SharePoint content.

Domain: SharePoint · Impact: medium · Workload: OneDrive