{"id":89536,"date":"2019-06-12T09:00:00","date_gmt":"2019-06-12T16:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/?p=89536"},"modified":"2023-05-15T23:01:17","modified_gmt":"2023-05-16T06:01:17","slug":"ensuring-security-microsoft-teams-apps-microsoft-cloud-app-security","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/12\/ensuring-security-microsoft-teams-apps-microsoft-cloud-app-security\/","title":{"rendered":"Ensuring security of your Microsoft Teams apps with Microsoft Cloud App Security"},"content":{"rendered":"
Apps in Microsoft Teams<\/a> allow you to leverage additional capabilities, enhance your experience, and make Teams work for you by adding your favorite Microsoft and third-party services.<\/p>\n Today, hundreds of ecosystem apps provide a great way to enhance and customize Teams, but to enable applications and services in an organization, they often need to be reviewed across a wide range of security and compliance criteria.<\/p>\n At Microsoft Build 2019, we announced<\/a> the app certification program, which will streamline the process of gathering app information related to security, data handling, and compliance practices from our partners powered by Microsoft\u2019s Cloud Access Security Broker<\/a> and gives customers the ability to review this information in one central location.<\/p>\n The goal of the app certification program is to provide customers with a reliable, unified, and publicly accessible cloud app risk assessment catalog via Microsoft AppSource and within the relevant admin portals. At the same time, we give partners the ability to work directly with Microsoft to provide the most up-to-date information about their apps\u2019 security and compliance and certify these apps for business readiness.<\/p>\n In the first stage of this program, we\u2019ll work closely with solution providers of Teams apps to ensure that the information is up to date, and allow them to self-attest their apps<\/a> against more than 80 risk factors provided by Microsoft Cloud App Security, as well as leverage their security and compliance information submitted in CSA STAR<\/a>.<\/p>\n In the future, we\u2019ll expand this program beyond Teams to include our entire app ecosystem across Microsoft 365. We\u2019ll also look into opportunities that would allow customers to easily identify apps that can enhance their experience in Teams, while meeting certain security and compliance requirements. A central app certification program could provide developers the ability to receive a \u201cbusiness ready\u201d badge for each app and simplify the selection process for organizations.<\/p>\n Public risk assessment information for Teams apps.<\/em><\/p>\n Microsoft Cloud App Security is a multimode Cloud Access Security Broker (CASB). It provides rich visibility, control over data travel, and sophisticated analytics to identify and combat cyberthreats across all your cloud services.<\/p>\n The Microsoft Cloud App Security cloud app catalog<\/a> is the basis for the new certification program. Today, it includes an extensive and continuously growing catalog of more than 16,000 cloud apps that have each been assessed against more than 80 risk factors spanning security, compliance, and legal frameworks.<\/p>\n Risk assessment information for apps inside of Microsoft Cloud App Security.<\/em><\/p>\n Today, the cloud app catalog is kept updated through automated advanced data extraction, continuous analysis by the Microsoft Cloud App Security analyst team, and customer-based revision requests. Going forward, we\u2019ll automatically update the information based on our partners\u2019 self-attestation as they engage in the new app certification program.<\/p>\n The new app certification program provides a transparent way to our customers to review apps and ensure they meet internal security and compliance guidelines before approving them for use in their tenant.<\/p>\n This program is currently in its pilot phase. To assess and manage the risk of using Teams apps, check out the security and compliance content now available via Microsoft Docs<\/a>.<\/p>\nApp certification program<\/h3>\n
<\/a><\/p>\n
Microsoft Cloud App Security<\/h3>\n
<\/a><\/p>\n