Microsoft Teams: Collect information with list form in Workflows

🚨 The Signal: Microsoft Teams now allows users to create forms within workflows to collect information. This introduces new data collection vectors and potential for unmanaged data sprawl within the Teams environment, impacting data governance and compliance.

The Impact

All users are affected by new data collection capabilities, increasing the risk of unmanaged sensitive information within Teams.

• End Users: Increased risk of inadvertently sharing sensitive data via new forms.
• Admins: New data sources to monitor for compliance and data loss prevention.
• Security Team: Expanded attack surface for data exfiltration and compliance violations.
• Compliance Officers: Greater challenge in identifying and classifying sensitive data across Teams.

The Action

1. Review existing Microsoft Purview Data Loss Prevention (DLP) policies for Teams to ensure coverage of new form data.
2. Educate users on appropriate data handling practices and the risks of collecting sensitive information via unapproved forms.
3. Implement or refine Microsoft Purview Information Protection (MIP) sensitivity labels for data collected in Teams.
4. Monitor Microsoft 365 audit logs for new workflow and form creation activities within Teams.
5. Consider implementing Microsoft Purview Communication Compliance policies to detect sensitive data sharing via Teams forms.

Domain: Teams · Impact: medium · Workload: Teams