Microsoft Teams: Facilitator Can Join Channel Meetings

🚨 The Signal: Microsoft Teams channel meetings now allow a 'Facilitator' role. This role can take notes and manage the agenda, potentially increasing the risk of sensitive information exposure if not properly managed.

The Impact

All users involved in Teams channel meetings are affected, with a low security risk related to potential over-sharing of meeting notes.

• Meeting Organisers: May inadvertently grant facilitator access to sensitive meeting notes.
• Facilitators: Could gain access to information beyond their need-to-know if not properly vetted.
• Organisations: Risk of increased data sprawl if meeting notes are not managed securely.

The Action

1. Review existing Microsoft Teams meeting policies for channel meetings.
2. Communicate best practices for assigning the 'Facilitator' role to meeting organisers.
3. Educate users on the sensitivity of information shared in meeting notes and agendas.

Domain: Teams · Impact: low · Workload: Teams