Teams holds chats, files and meetings, which makes it an attractive target. With four steps you make Microsoft Teams a lot safer, without users noticing much.
Step 1: secure sign-in
- Turn on MFA for all users. Read what is MFA?
- Use Conditional Access: block legacy sign-in protocols and require a managed or compliant device for Teams.
Step 2: external users and guests
- Decide who users can chat with via external access.
- Set up guest access and limit what guests can do.
- Review guests regularly with access reviews.
Step 3: protect data
- Use sensitivity labels for teams and files.
- Turn on DLP (data loss prevention) for chats and channels. Read DLP in Teams.
- Set retention policies for messages and recordings.
Step 4: apps and meetings
- Allow only approved apps in the Teams admin center.
- Set the lobby so anonymous participants have to wait.
- Use Microsoft Defender for Office 365 to check links and attachments in Teams.
Also see technical governance in Teams and 10 security tips for remote work.
Nederlandstalige versie: Microsoft Teams veiliger maken in vier stappen
Related articles
▸Set up Data Loss Prevention (DLP) in Microsoft Teams with PurviewProtect sensitive data in Teams chats and channels with a DLP policy in Microsoft Purview. Licensing…
▸The ten most important security measures for remote workMFA, Conditional Access, Intune, BitLocker, Defender and more: ten measures for working safely from home with…
▸Microsoft Entra ID P1 in Microsoft 365 Business Premium: what do you get?What Entra ID P1 in Business Premium gives you: Conditional Access, dynamic groups, SSPR with writeback and…
▸Automatically review guests in Microsoft Teams with access reviewsHave team owners regularly review their guests with Microsoft Entra access reviews, and automatically remove…
▸Run your own Microsoft 365 security assessment in 5 stepsMap your security risks with Secure Score, Defender for Identity, Defender for Cloud Apps, Entra ID…