CIS.M365.8.5.9 - (L2) Ensure meeting recording is off by default
Overview
Meeting recordings can capture confidential discussion, shared screens and personal information. While recording is allowed, anyone with recording permission can start one, and the recording is then stored and shared under the organization's retention rules.
Turning meeting recording off in the Global policy means nobody who has that policy can record a meeting. Users who need to record are assigned a separate meeting policy that allows it, so the permission is given on purpose instead of to everyone by default.
Remediation action
- Sign in to the Microsoft Teams admin center.
- Go to Meetings > Meeting policies.
- Open the Global (Org-wide default) policy.
- Under Recording, turn off Meeting recording.
- Select Save.
PowerShell
- Connect to Teams PowerShell using
Connect-MicrosoftTeams. - Run the following command:
Set-CsTeamsMeetingPolicy -Identity Global -AllowCloudRecording $false
Related links
- Microsoft Teams admin center
- Manage meeting policies in Microsoft Teams
- Set-CsTeamsMeetingPolicy
- CIS Microsoft 365 Foundations Benchmark v7.0.0 - 8.5.9
Test Metadata
| Field | Value |
|---|---|
| Test ID | CIS.M365.8.5.9 |
| Severity | Low |
| Suite | CIS |
| Product | Teams |
| Feature | Meetings |
| Area | Data protection |
| Resource type | Tenant |
| User impact | Medium |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| Supports benchmark | CIS Microsoft 365 Foundations Benchmark (version 7.0.0), requirement 8.5.9 |
| Benchmark level | L2 |
| Benchmark profiles | E3 Level 2 |
| Supports controls | cis-m365:8.5.9, nist-800-53-r5:CM-7 |
| PowerShell test | Test-MtCisTeamsMeetingRecording |
| Services | Teams |
Source
- Test:
tests/cis/Test.CIS.M365.8.5.9.ps1 - Documentation:
tests/cis/Test.CIS.M365.8.5.9.md