Detections
Analytics

MS.TEAMS.1.7v2 - Record an event SHOULD NOT be set to Always record.

Information

Limiting recording permissions to only the organizer minimizes the security risk to the organizer's discretion for these Live Events, reducing data leakage and other security risks. Administrators can also disable recording for all live events.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

1. Sign in to the Microsoft Teams admin
 center.

2. Select Meetings > Live events policies.

3. Select Global (Org-wide default) policy.

4. Set Record an event to either Organizer can record or Never record

5. Click Save.

6. If custom policies were created, repeat these steps for each
 policy, selecting the appropriate policy in step 3.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-21a.

Plugin: microsoft_azure

Control ID: 869a8f7bf06ad45411c6fedbc99b019b083999bae509b8ba5f3595d1b699c224