Outlook: Improved SharePoint file experience in file picker in Outlook mobile apps

🚨 The Signal: Outlook mobile apps now allow direct saving of email attachments to SharePoint and searching SharePoint sites from the file picker. This streamlines file management but increases potential for data sprawl if not governed.

The Impact

End-users gain convenience, but security teams face increased risk of data sprawl and potential exfiltration if SharePoint access is not tightly controlled.

• End-users: Easier file saving, but risk of saving sensitive data to inappropriate locations.
• Security teams: Increased data sprawl risk, making data governance and eDiscovery more complex.
• Compliance officers: New pathways for data storage may complicate compliance with data residency and classification policies.

The Action

1. Review and enforce SharePoint site permissions and access policies to restrict sensitive data storage.
2. Implement or refine Microsoft Purview Data Loss Prevention (DLP) policies for SharePoint and Exchange to prevent inappropriate sharing.
3. Educate users on appropriate data storage locations and classification for sensitive information.
4. Monitor SharePoint audit logs for unusual file saving or sharing activities from mobile devices.

Domain: SharePoint · Impact: medium · Workload: SharePoint