Detections
Analytics

MS.TEAMS.5.1v2 - Agencies SHOULD only allow installation of Microsoft apps approved by the agency.

Information

Allowing Teams integration with all Microsoft apps can expose the agency to potential vulnerabilities present in those apps. By only allowing specific apps and blocking all others, the agency can better manage app integration and potential exposure points.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

1. Sign in to the Microsoft Teams admin center.

2. Select Teams apps > Manage apps.

3. In the upper right-hand corner select Actions

4. Select Org-wide app settings.

5. Under Microsoft apps > Select On

6. Click Save.

 NOTE: This will make Microsoft apps in the application list available to "Everyone." If adjustments are needed follow the remaining instructions

7. Select Teams apps > Manage apps.

8. Select each individual app.

9. Select Users and groups > Edit availability

10. Change Available to to the appropriate setting for your organization. (Everyone, Specific users or groups, or No one)

11. Repeat steps 7 to 10 for each application

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-11

Plugin: microsoft_azure

Control ID: 2b5c339c832edeca383a22470cabd3bd7a34ac9d80a2fe801170e958215f6727