{"id":15552,"date":"2019-06-12T08:00:36","date_gmt":"2019-06-12T16:00:36","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/06\/12\/news-9301\/"},"modified":"2019-06-12T08:00:36","modified_gmt":"2019-06-12T16:00:36","slug":"news-9301","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/06\/12\/news-9301\/","title":{"rendered":"Ensuring security of your Microsoft Teams apps with Microsoft Cloud App Security"},"content":{"rendered":"<p><strong>Credit to Author: Todd VanderArk| Date: Wed, 12 Jun 2019 16:00:00 +0000<\/strong><\/p>\n<p>Apps in <a href=\"https:\/\/products.office.com\/en-us\/microsoft-teams\/group-chat-software\" target=\"_blank\" rel=\"noopener\">Microsoft Teams<\/a> allow you to leverage additional capabilities, enhance your experience, and make Teams work for you by adding your favorite Microsoft and third-party services.<\/p>\n<p>Today, hundreds of ecosystem apps provide a great way to enhance and customize Teams, but to enable applications and services in an organization, they often need to be reviewed across a wide range of security and compliance criteria.<\/p>\n<p>At Microsoft Build 2019, we <a href=\"https:\/\/developer.microsoft.com\/en-us\/microsoft-teams\/blogs\/microsoft-teams-developer-platform-enhancements-build-2019\/\" target=\"_blank\" rel=\"noopener\">announced<\/a> the app certification program, which will streamline the process of gathering app information related to security, data handling, and compliance practices from our partners powered by <a href=\"http:\/\/www.aka.ms\/mcas\" target=\"_blank\" rel=\"noopener\">Microsoft\u2019s Cloud Access Security Broker<\/a> and gives customers the ability to review this information in one central location.<\/p>\n<h3>App certification program<\/h3>\n<p>The goal of the app certification program is to provide customers with a reliable, unified, and publicly accessible cloud app risk assessment catalog via Microsoft AppSource and within the relevant admin portals. At the same time, we give partners the ability to work directly with Microsoft to provide the most up-to-date information about their apps\u2019 security and compliance and certify these apps for business readiness.<\/p>\n<p>In the first stage of this program, we\u2019ll work closely with solution providers of Teams apps to ensure that the information is up to date, and allow them to <a href=\"https:\/\/docs.microsoft.com\/en-us\/cloud-app-security\/attest-your-app\" target=\"_blank\" rel=\"noopener\">self-attest their apps<\/a> against more than 80 risk factors provided by Microsoft Cloud App Security, as well as leverage their security and compliance information submitted in <a href=\"https:\/\/cloudsecurityalliance.org\/star\/#_overview\" target=\"_blank\" rel=\"noopener\">CSA STAR<\/a>.<\/p>\n<p>In the future, we\u2019ll expand this program beyond Teams to include our entire app ecosystem across Microsoft 365. We\u2019ll also look into opportunities that would allow customers to easily identify apps that can enhance their experience in Teams, while meeting certain security and compliance requirements. A central app certification program could provide developers the ability to receive a \u201cbusiness ready\u201d badge for each app and simplify the selection process for organizations.<\/p>\n<p><a href=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-1.png\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-89538 size-full\" src=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-1.png\" alt=\"\" width=\"1568\" height=\"1479\" srcset=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-1.png 1568w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-1-300x283.png 300w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-1-768x724.png 768w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-1-1024x966.png 1024w\" sizes=\"auto, (max-width: 1568px) 100vw, 1568px\" \/><\/a><\/p>\n<p><em>Public risk assessment information for Teams apps.<\/em><\/p>\n<h3>Microsoft Cloud App Security<\/h3>\n<p>Microsoft Cloud App Security is a multimode Cloud Access Security Broker (CASB). It provides rich visibility, control over data travel, and sophisticated analytics to identify and combat cyberthreats across all your cloud services.<\/p>\n<p>The Microsoft Cloud App Security <a href=\"https:\/\/docs.microsoft.com\/en-us\/cloud-app-security\/risk-score\" target=\"_blank\" rel=\"noopener\">cloud app catalog<\/a> is the basis for the new certification program. Today, it includes an extensive and continuously growing catalog of more than 16,000 cloud apps that have each been assessed against more than 80 risk factors spanning security, compliance, and legal frameworks.<\/p>\n<p><a href=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-2b.png\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-89540 size-full\" src=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-2b.png\" alt=\"\" width=\"1500\" height=\"1000\" srcset=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-2b.png 1500w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-2b-300x200.png 300w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-2b-768x512.png 768w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-2b-1024x683.png 1024w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-2b-293x195.png 293w\" sizes=\"auto, (max-width: 1500px) 100vw, 1500px\" \/><\/a><\/p>\n<p><em>Risk assessment information for apps inside of Microsoft Cloud App Security.<\/em><\/p>\n<p>Today, the cloud app catalog is kept updated through automated advanced data extraction, continuous analysis by the Microsoft Cloud App Security analyst team, and customer-based revision requests. Going forward, we\u2019ll automatically update the information based on our partners\u2019 self-attestation as they engage in the new app certification program.<\/p>\n<p>The new app certification program provides a transparent way to our customers to review apps and ensure they meet internal security and compliance guidelines before approving them for use in their tenant.<\/p>\n<p>This program is currently in its pilot phase. To assess and manage the risk of using Teams apps, check out the security and compliance content now available via <a href=\"https:\/\/aka.ms\/AppCertification\" target=\"_blank\" rel=\"noopener\">Microsoft Docs<\/a>.<\/p>\n<p><a href=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-3.png\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-89542 size-full\" src=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-3.png\" alt=\"\" width=\"1069\" height=\"535\" srcset=\"https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-3.png 1069w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-3-300x150.png 300w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-3-768x384.png 768w, https:\/\/www.microsoft.com\/security\/blog\/wp-content\/uploads\/2019\/06\/Ensuring-security-of-your-Microsoft-Teams-3-1024x512.png 1024w\" sizes=\"auto, (max-width: 1069px) 100vw, 1069px\" \/><\/a><\/p>\n<p><em>Selection of the partners currently covered under the app certification program.<\/em><\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/www.microsoft.com\/security\/blog\/2019\/06\/12\/ensuring-security-microsoft-teams-apps-microsoft-cloud-app-security\/\">Ensuring security of your Microsoft Teams apps with Microsoft Cloud App Security<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/www.microsoft.com\/security\/blog\/\">Microsoft Security<a>.<\/p>\n<p><a href=\"https:\/\/www.microsoft.com\/security\/blog\/2019\/06\/12\/ensuring-security-microsoft-teams-apps-microsoft-cloud-app-security\/\" target=\"bwo\" >https:\/\/blogs.technet.microsoft.com\/mmpc\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Todd VanderArk| Date: Wed, 12 Jun 2019 16:00:00 +0000<\/strong><\/p>\n<p>The app certification program provides a public cloud app risk assessment catalog and allows partners to provide the latest information about their apps\u2019 security.<\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/www.microsoft.com\/security\/blog\/2019\/06\/12\/ensuring-security-microsoft-teams-apps-microsoft-cloud-app-security\/\">Ensuring security of your Microsoft Teams apps with Microsoft Cloud App Security<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/www.microsoft.com\/security\/blog\/\">Microsoft Security<a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10759,10378],"tags":[21494],"class_list":["post-15552","post","type-post","status-publish","format-standard","hentry","category-microsoft","category-security","tag-microsoft-cloud-app-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15552","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=15552"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15552\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=15552"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=15552"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=15552"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}