| MS.TEAMS.1.1v1 - External meeting participants SHOULD NOT be enabled to request control of shared desktops or windows. | ACCESS CONTROL |
| MS.TEAMS.1.2v2 - Anonymous users SHALL NOT be enabled to start meetings. | SYSTEM AND COMMUNICATIONS PROTECTION |
| MS.TEAMS.1.3v1 - Anonymous users and dial-in callers SHOULD NOT be admitted automatically. | SYSTEM AND COMMUNICATIONS PROTECTION |
| MS.TEAMS.1.4v1 - Internal users SHOULD be admitted automatically. | ACCESS CONTROL |
| MS.TEAMS.1.5v1 - Dial-in users SHOULD NOT be enabled to bypass the lobby. | SYSTEM AND COMMUNICATIONS PROTECTION |
| MS.TEAMS.1.6v1 - Meeting recording SHOULD be disabled. | CONFIGURATION MANAGEMENT |
| MS.TEAMS.1.7v2 - Record an event SHOULD NOT be set to Always record. | ACCESS CONTROL |
| MS.TEAMS.2.1v2 - External access for users SHALL only be enabled on a per-domain basis. | ACCESS CONTROL |
| MS.TEAMS.2.2v2 - Unmanaged users SHALL NOT be enabled to initiate contact with internal users. | CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY |
| MS.TEAMS.2.3v2 - Internal users SHOULD NOT be enabled to initiate contact with unmanaged users. | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| MS.TEAMS.4.1v1 - Teams email integration SHALL be disabled. | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY |
| MS.TEAMS.5.1v2 - Agencies SHOULD only allow installation of Microsoft apps approved by the agency. | CONFIGURATION MANAGEMENT |
| MS.TEAMS.5.2v2 - Agencies SHOULD only allow installation of third-party apps approved by the agency. | CONFIGURATION MANAGEMENT |
| MS.TEAMS.5.3v2 - Agencies SHOULD only allow installation of custom apps approved by the agency. | CONFIGURATION MANAGEMENT |
| MS.TEAMS.6.1v1 - A DLP solution SHALL be enabled and SHOULD offer services comparable to the native DLP solution offered by Microsoft. | SYSTEM AND COMMUNICATIONS PROTECTION |
| MS.TEAMS.6.2v1 - The DLP solution SHALL protect personally identifiable information (PII) | SYSTEM AND COMMUNICATIONS PROTECTION |
| MS.TEAMS.7.1v1 - Attachments included with Teams messages SHOULD be scanned for malware. | SYSTEM AND INFORMATION INTEGRITY |
| MS.TEAMS.7.2v1 - Users SHOULD be prevented from opening or downloading files detected as malware. | SYSTEM AND INFORMATION INTEGRITY |
| MS.TEAMS.8.1v1 - URL comparison with a blocklist SHOULD be enabled. | SYSTEM AND INFORMATION INTEGRITY |
| MS.TEAMS.8.2v1 - User click tracking SHOULD be enabled. | AUDIT AND ACCOUNTABILITY |
