Microsoft Teams: Onboarding workflow for new team members

🚨 The Signal: Microsoft Teams will automatically connect new team members to relevant channels. This feature aims to improve engagement but could inadvertently expose sensitive information to new users if channel access is not tightly controlled.

The Impact

Team owners and security teams are affected by increased risk of inadvertent data exposure to new members.

• Team Owners: Risk of over-sharing sensitive information to new members.
• Security Teams: Increased audit burden to verify appropriate channel access.
• New Team Members: May gain access to channels beyond their need-to-know.
• Compliance Officers: Potential for non-compliance with data access policies.

The Action

1. Review existing Microsoft Teams channel access policies for all teams.
2. Implement or refine sensitivity labels for channels containing sensitive data.
3. Educate team owners on the implications of automatic channel connections.
4. Regularly audit channel membership and access permissions for all teams.

Domain: Teams · Impact: medium · Workload: Teams