Planner: Connected Plans

🚨 The Signal: Planner now allows linking related plans, creating a network of interconnected work items. This change increases data sprawl and the potential for sensitive information to be inadvertently exposed across projects.

The Impact

All users are affected, increasing the risk of unintended information disclosure and complicating data access management.

• End users: Increased risk of sharing sensitive data with unintended audiences.
• Admins: New challenge in managing access and permissions across interconnected plans.
• Security Team: Greater complexity in auditing data access and ensuring data segregation.
• Compliance Officers: Difficulty in demonstrating adherence to data classification and access control policies.

The Action

1. Review existing Planner usage policies to address interconnected plans.
2. Communicate best practices for data classification and sharing within Planner.
3. Implement or reinforce data loss prevention (DLP) policies for Planner content.
4. Regularly audit Planner plans for sensitive information and access permissions.

Domain: Other · Impact: medium · Workload: Other