Microsoft Viva: Campaigns in SharePoint

🚨 The Signal: Viva Amplify campaign management is now native in SharePoint for news distribution and analytics. This streamlines internal communications but consolidates content, increasing the impact of a SharePoint compromise.

The Impact

Corporate communications teams are affected; increased risk if SharePoint access controls are not robust.

  • Communications teams: Centralised news content increases data exposure risk if SharePoint is compromised.
  • Security teams: SharePoint security posture becomes more critical due to consolidated sensitive content.
  • Compliance teams: Enhanced need to verify SharePoint data loss prevention and access policies.

The Action

  1. Review and strengthen SharePoint site permissions for communication sites.
  2. Verify Data Loss Prevention (DLP) policies are applied to SharePoint communication sites.
  3. Ensure audit logging is enabled and reviewed for SharePoint content access and modifications.
  4. Implement sensitivity labels for internal communication content within SharePoint.

Domain: SharePoint · Impact: medium · Workload: SharePoint