MS.TEAMS.4.1v1 - Teams email integration SHALL be disabled.

Information

Microsoft Teams email integration associates a Microsoft, not tenant domain, email address with a Teams channel. Channel emails are addressed using the Microsoft-owned domain <code>&lt;teams.ms&gt;</code>. By disabling Teams email integration, an agency prevents potentially sensitive Teams messages from being sent through external email gateways.

Solution

1. Sign in to the Microsoft Teams admin center.

2. Select Teams > Teams Settings.

3. Under the Email integration section, set Users can send emails to a channel email address to Off.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.5.0/

Item Details

Category: ACCESS CONTROL, SECURITY ASSESSMENT AND AUTHORIZATION, CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|AC-4, 800-53|CA-7, 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|SC-7, 800-53|SC-44, 800-53|SI-2, 800-53|SI-3, 800-53|SI-4, 800-53|SI-7, 800-53|SI-8, 800-53|SI-10

Plugin: microsoft_azure

Control ID: 20771dab6826883576db7a182edbf9ecfa06150b936ea3ae54b1669fadbf6ec9