# (L2) Ensure meeting recording is off by default

Meeting recordings can capture confidential discussion, shared screens and personal information.

Source: https://maester.dev/docs/tests/CIS.M365.8.5.9

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/jeremyfinney-lgtm" title="jeremy finney · Original author"><img src="https://github.com/JeremyFinney-lgtm.png" alt="jeremy finney" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/jeremyfinney-lgtm">jeremy finney</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/cis">CIS</a> · Teams · Meetings · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId CIS.M365.8.5.9
```

## Overview

Meeting recordings can capture confidential discussion, shared screens and personal information. While recording is allowed, anyone with recording permission can start one, and the recording is then stored and shared under the organization's retention rules.

Turning meeting recording off in the Global policy means nobody who has that policy can record a meeting. Users who need to record are assigned a separate meeting policy that allows it, so the permission is given on purpose instead of to everyone by default.

#### Remediation action

1. Sign in to the [Microsoft Teams admin center](https://admin.teams.microsoft.com).
2. Go to **Meetings** > **Meeting policies**.
3. Open the **Global (Org-wide default)** policy.
4. Under **Recording**, turn off **Meeting recording**.
5. Select **Save**.

##### PowerShell

1. Connect to Teams PowerShell using `Connect-MicrosoftTeams`.
2. Run the following command:

```powershell
Set-CsTeamsMeetingPolicy -Identity Global -AllowCloudRecording $false
```

#### Related links

* [Microsoft Teams admin center](https://admin.teams.microsoft.com)
* [Manage meeting policies in Microsoft Teams](https://learn.microsoft.com/microsoftteams/meeting-policies-in-teams)
* [Set-CsTeamsMeetingPolicy](https://learn.microsoft.com/powershell/module/teams/set-csteamsmeetingpolicy)
* [CIS Microsoft 365 Foundations Benchmark v7.0.0 - 8.5.9](https://www.cisecurity.org/benchmark/microsoft_365)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | CIS.M365.8.5.9 |
| Severity | Low |
| Suite | CIS |
| Product | Teams |
| Feature | Meetings |
| Area | Data protection |
| Resource type | Tenant |
| User impact | Medium |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| Supports benchmark | CIS Microsoft 365 Foundations Benchmark (version 7.0.0), requirement 8.5.9 |
| Benchmark level | L2 |
| Benchmark profiles | E3 Level 2 |
| Supports controls | cis-m365:8.5.9, nist-800-53-r5:CM-7 |
| PowerShell test | [Test-MtCisTeamsMeetingRecording](https://github.com/maester365/maester/blob/main/tests/cis/Test.CIS.M365.8.5.9.ps1) |
| Services | Teams |

</details>

## Source

- Test: [`tests/cis/Test.CIS.M365.8.5.9.ps1`](https://github.com/maester365/maester/blob/main/tests/cis/Test.CIS.M365.8.5.9.ps1)
- Documentation: [`tests/cis/Test.CIS.M365.8.5.9.md`](https://github.com/maester365/maester/blob/main/tests/cis/Test.CIS.M365.8.5.9.md)