Preventing Microsoft Teams Bombing

Microsoft Teams is one of the most secure conferencing platforms in GW. However, in any scenario where an uninvited participant may gain access to a Teams Meeting (an act sometimes called “bombing”), follow the recommended actions below to take control and minimize disruptions.

What do I do if my Microsoft Teams Meeting has been ‘bombed’?

Depending on the nature and severity of the disruption, as well as your meeting size and ability to quicky respond, assess whether you should end your meeting or remove the disruptive participant(s).

End the meeting.

The easiest and quickest way to respond to an unwanted participant is to end your meeting. Select the drop-down menu to the right of Leave and click End meeting.

Note: It is important to select End meeting and NOT Leave, as opting to leave the meeting will simply remove you, and not close the entire event.

Remove the disruptive participant(s).

Navigate to Participants, hover over the participant you need to remove. Click the 3 dots (. . .) and select Remove Participant.

Note: Only recommended if you can quickly and confidentially identify all disruptive participant(s).

Assess impact on your audience and alert the GW Information Security team.

Start by apologizing for the disruption and giving your participants a chance to raise any concerns they have about the incident.

If time is a factor, invite them to communicate with you offline, at a later time. Regardless of the presumed severity or cause of the incident, it is important to contact the GW Information Security team to disclose the event and connect with additional resources for incident support and recovery.

How can I prevent my Microsoft Teams Meeting from being ‘bombed’?

Keep your meeting information private.

Do not share meeting links widely. Meetings can be joined by anyone who has the link to Join Microsoft Teams Meeting.

Update your Meeting Options to use the meeting lobby.

Open your meeting in your calendar, click Meeting Options.

The default is set to only allow GW members to bypass the lobby.  If you have changed it from the default (pictured below), please reset it back to People in my organization.

Note: If you elect to enable your lobby space, keep in mind that as the host, it is your responsibility to take the time to screen your participants before they are permitted entry into your meeting.