Microsoft 365 admin center: Optional Public CDN Support in Brand Center Setup

🚨 The Signal: Administrators can now set up Microsoft 365 Brand Center without automatically enabling the Public Content Delivery Network (CDN). This change allows organizations to control when and if public CDN is used for branding assets, reducing potential external exposure.

The Impact

Security teams and M365 administrators are affected, as this change reduces the default external exposure of organizational branding assets.

  • Security Teams: Reduced default external exposure of branding assets.
  • M365 Administrators: More control over public CDN usage for branding.
  • Compliance Officers: Easier alignment with data exposure policies.

The Action

  1. Review existing Brand Center configurations for Public CDN usage.
  2. When setting up new Brand Center instances, explicitly choose whether to enable Public CDN based on organizational policy.
  3. If Public CDN is not required, ensure it remains disabled during Brand Center setup.

Domain: Other · Impact: low · Workload: Other