John Gruszczyk, Product Manager for Microsoft Teams, used his Ignite 2020 session to give a solid breakdown of some of the new and upcoming security and compliance features available for Teams.
John began his session by outlining Microsoft’s approach to data security in Microsoft 365 and used the graphics below to illustrate his point. Suffice it to say, Microsoft’s data security strategy is deeper than just securing information in Microsoft 365.
Microsoft breaks down integrated security and compliance in Microsoft 365 into six categories:
Getting Into the Details
John then outlined the different kinds of security features and how they apply to Microsoft Teams.
By integrating privacy features into the services available, Microsoft is always making sure the customer comes first. For instance, meeting and video conferencing controls help IT and meeting organizers be empowered to keep meetings safe and inclusive.
ID and Account Protection prevent unauthorized logins to devices and accounts, while powerful data protection ensures that your data is safe regardless of the application or device you use.
Admin Controls Available and Coming Soon to Teams
John explained that there are admin controls to foster safe and inclusive meetings, like management settings for the lobby experience that allows users to control who can bypass the lobby. Admins can apply user roles (which control who can present and record meetings), and there are meeting controls to ensure interruptions or disruptive attendees do not disturb meetings.
Data Security Features in Microsoft Teams
John did a great job outlining that further built-in labeling and protection will come to Teams and other services in Microsoft 365. It will also be possible to train classifiers for more exact data matches. There will be a single admin console to configure and manage policies as well as view analytics, and there will also be more options available via APIs (MIP SDK) for popular apps and services.
In addition to these features, Teams is also receiving further Data Loss Prevention (DLP) capabilities to strengthen controls for the prevention of sensitive information leaks through Teams chats. Soon you will also be able to educate end users about these policies via tool tips that will explain how and why information was blocked.
When it comes to compliance, sensitive data may not be the only concern; thankfully, Teams also provides tools to help prevent or block harassing language to keep meetings safe and inclusive for everyone.
Additional Compliance Features in Microsoft Teams
Native integration with Insider Risk Management to securely coordinate
Automated private Team created with relevant stakeholders to share, store, and review relevant information
Use channel conversations to coordinate and track review/response activities
Advanced eDiscovery support for live documents and links shared in Teams
Automatically collects documents from a storage location to pull the content into an eDiscovery case
Attachments are collected, reviewed, and exported along with the Teams conversations
Retention policies for Microsoft Teams meeting recording
Retain and delete recordings with in-place governance
Retention policies apply wherever the recordings are saved without the need to export elsewhere
Teams-specific actions in Compliance Manager
Guidance around improvements and implementations for better protection
Align with regulatory and compliance standards
For more on security in Office 365, check out the resources below:
Hunter Willis has been in web development, SEO and Social Media marketing for over a decade, and entered the SharePoint space in 2016. Throughout his career he has developed internal collaboration sites, provided technical and strategic advice, and managed solutions for small to large organizations. In addition, Hunter has served as a strategy consultant for many companies and non-profits in the Richmond area.