# data[].attributes.attachment_link.title
How to join a Microsoft Teams meeting, a demo tutorial

# data[].attributes.attachment_link.title
Drag and Drop Outlook Attachments to a Teams Folder

# data[].attributes.attachment_link.title
How to Collaborate on Documents in Microsoft Teams

# data[].attributes.attachment_link.readable_text
Try it!

In Microsoft Teams, you can show your desktop, a specific app, a whiteboard, or a presentation in a meeting.

1. Select Share content and choose if you want to share your computer audio.

2. Select what you want to share:

Screen lets you show everything on your screen.

PowerPoint Live lets you share a PowerPoint presentation.

Microsoft Whiteboard and Freehand by Invision lets you share a whiteboard where participants can sketch together.

Window lets you share an open window like a specific app you have open.

3. After you select what you want to show, a red border surrounds what you're sharing.

Meeting participants won't see any notifications that might come in.

4. Select Stop sharing to stop showing your screen.

Note: Linux users won't see the red border surrounding what they are sharing. Also, window sharing isn't available for Linux users.

Want more?

Share your desktop in a meeting in Teams

Microsoft Teams help

Learn more about Screen Sharing

# data[].attributes.attachment_link.description
Training: Show your screen in a Microsoft Teams meeting. Watch this video to learn how.

# data[].attributes.attachment_link.title
How to blur and change your background in Microsoft Teams

# data[].attributes.attachment_link.title
How to turn on dark mode in Microsoft Teams

# data[].attributes.attachment_link.title
How to save and delete messages in Microsoft Teams

# data[].attributes.attachment_link.title
Microsoft Teams - Share and Collaborate with Files

# data[].attributes.attachment_link.readable_text
Try it!

Working in Microsoft Teams lets you work on files together at the same time. Also, messages about the document stay with it and will show up in your team conversations.

1. In a team conversation or in the Files tab, select More options next to the file.

2. Choose if you want to edit the file in Teams, on your desktop, or online.

3. Edit the file. Colored flags show who else is working on it with you.

4. Select Start conversation to add a message about the file.

5. Type your message or @mention someone and select Send.

Note: Linux users won't be able to open files in the Office desktop app.

Want more?

Collaborate on Files with your Team

Microsoft Teams help

Microsoft Teams Quick Start

# data[].attributes.attachment_link.description
Working in Microsoft Teams lets you work on files together at the same time. Also, messages about the document stay with it and will show up in your team conversations. In a team conversation or in the Files tab, select More options next to the file.

# data[].attributes.attachment_link.title
How to host a meeting and invite others in Microsoft Teams

# data[].attributes.attachment_link.readable_text
As your team works together you'll undoubtedly have files that you'll want to share and collaborate on. Teams makes it easy to share files and work on them together. If working in Word, Excel, PowerPoint, or Visio files your colleagues can even view, edit, and collaborate on them, right within Teams ( editing in Visio requires a license).

Note: If the file isn't one of the types mentioned above, it must be viewed in either SharePoint or its corresponding app.

Your files library

Within each team there are channels. Think of these channels as a place for your entire team to discuss a specific topic, like upcoming training, or project updates. Each channel has its own file folder where you can share files for that specific channel. To access that folder go to the channel and select the Files tab above the conversation window.

Note: Make sure to use the Files tab at the top of the channel conversation window instead of the Files button on the left side of the app. That button gives you access to ALL of your cloud files, rather than just the files for a specific channel.

In the library you can upload existing files or create new ones. When you upload a file, it creates a copy in Teams.

Upload existing files

There are two primary ways to upload existing files into your library. Both methods start by going to the files folder for your channel and both methods, by default, upload copies of your files to the channel file folder.

Drag and drop - Using your mouse, drag the file from where it's currently located and drop it on the Teams window among the files.

Upload - Select Upload,then select the file (or files) you'd like to upload, and select Open.

Any files you upload will be accessible by any member of your team. And just like in SharePoint, you can pin specific files to the top of your list for easy access.

Create a file

To create a Word, PowerPoint, or Excel document in Teams, select New, then select the kind of file you'd like to create. The new file will open in Teams so you can begin editing it, and if you'd prefer to work in the desktop version of the app, select Open in Desktop App at the top of the app, in the middle of the ribbon.

As soon as it's created your new file will be available for your team members to edit as well.

Note: Linux users won't be able to open files with the desktop Office app.

Co-edit a file

Files uploaded and shared to a team are accessible to every member of the Team. In Microsoft 365 for the web, Office for Android or iOS, or the latest applications from Microsoft 365, you and your team members can co-edit Word, PowerPoint, or Excel documents, or comment on Visio files. No need to check files out or worry about if one of your colleagues has the document open. Just open the file you need to edit and if other team members are editing it too your changes will be seamlessly merged as you work.

# data[].attributes.attachment_link.description
As your team works together you'll undoubtedly have files that you'll want to share and collaborate on. Teams makes it easy to share files and work on them together. If working in Word, Excel, PowerPoint, or Visio files your colleagues can even view, edit, and collaborate on them, right within Teams ( editing in Visio requires a license).

# data[].attributes.attachment_link.title
Microsoft Teams - Tabs in Channels | Tips and Tricks

# data[].attributes.attachment_link.title
How to work in channels in Microsoft Teams

# data[].attributes.attachment_link.readable_text
Microsoft Teams is a collaboration app that helps your team stay organized and have conversations-all in one place. Here's a quick look at the left hand side of Teams.

Teams - Find channels to belong to or create your own. Inside channels you can hold on-the-spot meetings, have conversations, and share files.

Meetings - See everything you've got lined up for the day or week. Or, schedule a meeting. This calendar syncs with your Outlook calendar.

Calls - In some cases, if your organization has it set up, you can call anyone from Teams, even if they're not using Teams.

Activity - Catch up on all your unread messages, @mentions, replies, and more.

Use the command box at the top to search for specific items or people, take quick actions, and launch apps.

Get the app you want

Want more?

Microsoft Teams help

Microsoft Teams Quick Start

# data[].attributes.attachment_link.description
Microsoft Teams is a collaboration app that helps your team stay organized and have conversations-all in one place. Here's a quick look at the left hand side of Teams. Teams - Find channels to belong to or create your own. Inside channels you can hold on-the-spot meetings, have conversations, and share files.

# data[].attributes.attachment_link.title
How to create teams and channels in Microsoft Teams

# data[].attributes.attachment_link.title
Microsoft Teams Rooms Setup | Step-by-Step

# data[].attributes.attachment_link.title
How to add third-party cloud services to Microsoft Teams

# data[].attributes.attachment_link.readable_text
When you need quick access to apps, documents, and files, Microsoft Teams helps you stay focused and organized in one central place. Add tabs for favorite tools and important files, collaborate real-time on documents, and store or share them easily with SharePoint integration into Teams.

Add tools with tabs

1. Select the plus sign next to the tabs.

2. Select the type of tab you want.

3. Type a name and choose a workspace.

Want more?

Settings and options

Work on a file together

1. In a team conversation or in the Files tab, select More options next to the file.

2. Choose if you want to edit the file in Teams, on your desktop, or online.

Want more?

Collaborate on Files with your Team

Connect with SharePoint

When you create a team in Teams, you get a SharePoint site automatically.

SharePoint integration into Teams makes file sharing, storage, and collaboration easy.

Use Teams for collaboration on in-progress content, and SharePoint to review content and files.

Want more?

Microsoft Teams help

Use Microsoft Teams on the Surface Hub

Check out these three ways to use Microsoft Teams to collaborate on a Surface Hub:

Select Call on the welcome screen to start an ad hoc meeting.

Book a Surface Hub as an attendee in a meeting when you schedule the meeting.

Add a Surface Hub to an existing meeting.

How you meet is up to you-you can dive right into Microsoft Whiteboard and start drawing out your ideas, open up your recent files to see them on the big screen and get real-time feedback from your team

Want more?

Surface Hub help

Meet with others with Surface Hub 2S

# data[].attributes.attachment_link.description
When you need quick access to apps, documents, and files, Microsoft Teams helps you stay focused and organized in one central place. Add tabs for favorite tools and important files, collaborate real-time on documents, and store or share them easily with SharePoint integration into Teams. Select the plus sign next to the tabs.

# data[].attributes.attachment_link.readable_text
When a guest is invited to join a team, they receive a welcome email message. This message includes some information about the team and what to expect now that they're a member. The guest must accept the invitation by selecting Open Microsoft Teams in the email message before they can access the team and its channels.

All team members see a message in the channel thread announcing that the team owner has added a guest and providing the guest's name. Everyone on the team can identify easily who is a guest. A tag in the upper-right corner of the channel thread indicates the number of guests on the team and a (Guest) label appears next to each guest's name.

Check out these videos about the guest experience in Teams:

Comparison of team member and guest capabilities

The following table compares the Teams functionality available for an organization's team members and its guests. Teams admins control the features available to guests.

Capability in Teams

Teams user in the organization

Guest

Create a channel
Team owners control this setting.

✓

✓

Invite a user outside the Microsoft 365 or Office 365 organization's domain
Team owners control this setting.

✓

The following table shows the calling and meeting features available to guests, compared to other types of users.

Calling feature

Guest

E1 and E3 user

E5 and Enterprise Voice user

Missed calls can go to voicemail

No

No ¹

Yes

Can change voicemail greeting

No

No ¹

Yes

¹ This feature will be available soon.

Note

The Guest user access restrictions policy in Azure Active Directory (Azure AD) determines permissions for guests in your directory. There are three policy options.

The Guest users have the same access as members (most inclusive) setting means guests have the same access to directory data as regular users in your directory.

The Guest users have limited access to properties and membership of directory objects settings means that guests don't have permissions for certain directory tasks, such as enumerating users, groups, or other directory resources using Microsoft Graph.

The Guest user access is restricted to properties and memberships of their own directory objects (most restrictive) setting means guests can only access their own directory objects.

To learn more, see What are the default user permissions in Azure Active Directory?

Leave an organization as a guest

# data[].attributes.attachment_link.title
Guest experience in Microsoft Teams - Microsoft Teams

# data[].attributes.attachment_link.description
When a guest is invited to join a team, they receive a welcome email message. This message includes some information about the team and what to expect now that they're a member. The guest must accept the invitation by selecting Open Microsoft Teams in the email message before they can access the team and its channels.

# data[].attributes.attachment_link.readable_text
This article describes some of the limits, specifications, and other requirements that apply to Teams.

Teams and channels

Number of teams a user can create

Subject to a 250 object limit¹

Number of teams a user can be a member of

1,000²

Number of owners per team

100

Number of org-wide teams allowed in a tenant

5²

Number of members in an org-wide team

10,000

Number of teams a global admin can create

500,000

Number of teams a Microsoft 365 or Office 365 organization can have

500,000³

Number of members in a Private channel

250

Maximum size of distribution list, security group or Microsoft 365 group that can be imported in to a team

3,500

¹ Any directory object in Azure Active Directory counts towards this limit. Global admins are exempt from this limit, as are apps calling Microsoft Graph using application permissions.

² This limit includes archived teams.

³ To further increase the number of teams, you must contact Microsoft support and request further increase to the number of Azure Active Directory objects in your tenant. Increase is only made for real-life production scenarios.

⁴ Deleted channels can be restored within 30 days. During these 30 days, a deleted channel continues to be counted towards the 200 channel or 30 private channel per team limit. After 30 days, a deleted channel and its content are permanently deleted and the channel no longer counts towards the per team limit.

⁵ 28 KB is an approximate limit because it includes the message itself (text, image links, etc.), @-mentions, number of connectors, and reactions.

⁶ Shared channels members from outside the team count toward this limit. Further note that teams/channel mentions are blocked in teams with over 10,000 members.

The following table describes the maximum number of channels and members.

The following limitations also apply:

Only Azure AD work or school accounts are supported for external participants.

Shared channels support tabs except for Stream, Planner, and Forms.

Bots, connectors, and message extensions are not supported.

Org-wide teams are not supported to be added as members of a shared channel.

When you create a team from an existing team, any shared channels in the existing team won't be copied over.

Notifications from shared channels are not included in missed activity emails.

Shared channels are not supported in class teams.

Messaging

Chat

Users who participate in conversations that are part of the chat list in Teams must have an Exchange Online (cloud-based) mailbox for an admin to search chat conversations. That's because conversations that are part of the chat list are stored in the cloud-based mailboxes of the chat participants. If a chat participant doesn't have an Exchange Online mailbox, the admin won't be able to search or place a hold on chat conversations. For example, in an Exchange hybrid deployment, users with on-premises mailboxes might be able to participate in conversations that are part of the chat list in Teams. However, in this case, content from these conversations isn't searchable and can't be placed on hold because the users don't have cloud-based mailboxes. (For more, see How Exchange and Microsoft Teams interact.)

¹ If you have more than 20 people in a chat, the following chat features are turned off: Outlook automatic replies and Teams status messages; typing indicator; video and audio calling; sharing; read receipts. The "Set Delivery Options" button (!) is also removed when private group chats contain more than 20 members.

² Only 200 members at a time can be added to a group chat. See this article for more information.

³ If the number of attachments exceeds this limit, you'll see an error message.

⁴ 28 KB is an approximate limit because it includes the message itself (text, image links, etc.), @-mentions, and reactions.

Emailing a channel

If users want to send an email to a channel in Teams, they use the channel email address. When an email is part of a channel, anyone can reply to it to start a conversation. Here are some of the applicable limits for sending email to a channel.

Note

There is a throttling limit on how many emails you can send to a channel. The limit is six emails per ten seconds per channel per user and eight emails per ten seconds per tenant per user. ¹ If the message exceeds this limit, a preview message is generated and the user is asked to download and view the original email from the link provided.

² If the number of attachments or images exceeds this limit, you'll see an error message.

For more information, see Exchange Online limits.

Note

Message size, file attachments, and inline images limits are the same across all Microsoft 365 and Office 365 licenses. Emailing a channel is not available in Teams for Office GCC/GCCH/DOD organizations.

Channel names

Channel names can't contain the following characters or words:

Characters in these ranges

0 to 1F
80 to 9F

Words

forms, CON, CONIN$, CONOUT$, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, desktop.ini, _vti_

Channel names also can't start with an underscore (_) or period (.), or end with a period (.).

Meetings and calls

Number of people in a meeting (can chat and call in)

1000, includes GCC, GCCH, and DoD, but not A1 (300).

Number of people in a video or audio call from chat

20

Max PowerPoint File Size

2 GB

Teams keeps meeting recordings that don't get uploaded to Microsoft Stream, available for local download

20 days

Meeting recording maximum length

4 hours or 1.5 GB. When this limit is reached, the recording will end and automatically restart.

For more information, see Meetings, webinars, and live events.

Note

Breakout rooms can only be created in meetings that have fewer than 300 attendees. In addition, creating breakout rooms in a meeting automatically limits the number of meeting attendees to 300. Advise your end-users to not initiate breakout rooms in meetings where they expect more than 300 participants. For more information on large Team meetings, share the guidance Best practices for a large Teams meeting with your end-users.

Meeting expiration

Note

A meeting URL will never stop working. The expiry only relates to any PSTN dial-in numbers, CVI coordinates, and/or underlying meeting policies and settings.

Meeting type

Meeting expires after this much time

Each time you start or update a meeting, expiration extends by this much time

Note

Microsoft Teams meetings have a time limit of 30 hours.

Live Events

Live events are structured meetings that enable your organization to schedule and produce events that stream to large online audiences-up to 20,000 people. With live events, the audience interaction is a managed Q&A experience.

Duration of event

4 hours

Concurrent Live Events running in a Microsoft 365 or Office 365 organization ²

15

¹ The usual 10,000 is increased to 20,000 through June 30, 2023. You can schedule even greater numbers with live events in Yammer and/or Microsoft Stream. For more information, see Live events across Microsoft 365. Note that events over 20,000 attendees require the Live Events Assistance Program.

² You can schedule as many Live Events as you want, but you can only run 15 at a time. As soon as the producer joins a live event, it's considered to be running. The producer who attempts to join the 16th live event gets an error.

For more information about live events, go to Teams live events. See also Schedule a Teams live event.

Important
Microsoft 365 live event limit increases To continue supporting our customers' needs, we will extend temporary limit increases for live events through June 30, 2023, including:

Event support for up to 20,000 attendees

50 events can be hosted simultaneously across a tenant

Event duration of 16 hours per broadcast

Additionally, Live Events with up to 100,000 attendees can be planned through the Microsoft 365 assistance program. The team will assess each request and work with you to determine options that may be available. Learn more.

Presence in Outlook

Teams presence in Outlook is supported on the Outlook 2013 desktop app and later. To learn more about presence in Teams, see User presence in Teams.

Storage

Each team in Microsoft Teams has a team site in SharePoint Online, and each channel in a team gets a folder within the default team site document library. Files shared within a conversation are automatically added to the document library, and permissions and file security options set in SharePoint are automatically reflected within Teams.

Note

Each private channel has its own SharePoint site (previously called "site collection").

If you don't have SharePoint Online enabled in your tenant, Microsoft Teams users cannot always share files in teams. Users in private chat also cannot share files because OneDrive for Business (which is tied to the SharePoint license) is required for that functionality.

By storing the files in the SharePoint Online document library and OneDrive for Business, all compliance rules configured at the tenant level will be followed. (For more, see How SharePoint Online and OneDrive for Business interact with Microsoft Teams.)

Because Teams runs on a SharePoint Online backend for file sharing, SharePoint limitations apply to the Files section within a Team. Here are the applicable storage limits for SharePoint Online.

Feature

Microsoft 365 Business Basic

Microsoft 365 Business Standard

Office 365 Enterprise E1

Office 365 Enterprise E3

Office 365 Enterprise E5

Office 365 Enterprise F1

Storage

1 TB per organization plus 10 GB per license purchased

1 TB per organization plus 10 GB per license purchased

1 TB per organization plus 10 GB per license purchased

1 TB per organization plus 10 GB per license purchased

1 TB per organization plus 10 GB per license purchased

1 TB per organization

Storage for Teams Files

Up to 25 TB per site or group

Up to 25 TB per site or group

Up to 25 TB per site or group

Up to 25 TB per site or group

Up to 25 TB per site or group

Up to 25 TB per site or group

Channels are backed by folders within the SharePoint Online site (previously called "site collection") created for the team, so file tabs within Channels share the storage limits of the team they belong to.

For more information, see SharePoint Online limits.

Class teams

Microsoft Teams for Education provides templates designed for unique education scenarios, such as classroom teaching. More information about team types, including class teams, is available in Choose a team type to collaborate in Microsoft Teams.

A class team is a template type with additional apps included, and with limits separate to the number of team members.

Limits for class teams are listed in the following table:

Number of members in a team

See the Teams and channels section of this article

Number of members to use Assignments in a class team

300

Number of members to use a OneNote Class Notebook in a class team

300

A class team can support more than 300 members. However, if you plan to use either the Assignments app or Class Notebook app within your team, you will need to keep the number of members below the maximum limits above.

Number of tags per team

100

Number of suggested default tags per team

25

Number of team members assigned to a tag

200

Number of tags assigned to a user per team

25

Teams uses these contacts:

Contacts in your organization's Active Directory

Contacts added to the user's Outlook default folder

Teams users can communicate with anyone in your organization's Active Directory and can add anyone in your organization's Active Directory as a contact and to their contact lists by going to Chat > Contacts or Calls > Contacts.

Teams users can also add a person who isn't in your organization's Active Directory as a contact by going to Calls > Contacts.

Browsers

Teams fully supports the following Internet browsers, with noted exceptions for calling and meetings. This table applies to operating systems running on desktop computers.

Browser

Calling - audio, video, and sharing

Meetings - audio, video, and sharing¹ ²

Internet Explorer 11

Not supported

Meetings are supported only if the meeting includes PSTN coordinates. To attend a meeting on IE11 without PSTN coordinates, users must download the Teams desktop client.

Video: Not supported

Sharing: Incoming sharing only (no outgoing)

Microsoft 365 apps and services will not support Internet Explorer 11 starting August 17, 2021 (Microsoft Teams will not support Internet Explorer 11 earlier, starting November 30, 2020). Learn more. Please note that Internet Explorer 11 will remain a supported browser. Internet Explorer 11 is a component of the Windows operating system and follows the Lifecycle Policy for the product on which it is installed.

Microsoft Edge, RS2 or later

Fully supported, except no outgoing sharing ³

Fully supported, except no outgoing sharing

Google Chrome, the latest version plus two previous versions

Fully supported

Fully supported

Sharing is supported without any plug-ins or extensions on Chrome version 72 or later.

Safari 14+

1:1 calls not supported. Group calls fully supported.

Video: Fully supported

Sharing: Fully supported

Meetings: Fully supported

Video: Fully supported

Sharing: Fully supported

Safari 13.1+

1:1 calls not supported. Group calls supported with full audio support.

Video: Incoming only

Sharing: Fully supported

Meetings are supported with full audio support.

Video: Incoming only

Sharing: Fully supported

Firefox, the latest version plus two previous versions

Not supported

Meetings are supported only if the meeting includes PSTN coordinates. To attend a meeting on Firefox without PSTN coordinates, users must download the Teams desktop client.

Video: Not supported

Sharing: Incoming sharing only (no outgoing)

Note that users are required to have the OpenH264 plugin in Firefox for full support. Browsers without this plugin may see disruptions in the meeting, including in screen sharing activity. Learn more at Mozilla Firefox Support.

Safari versions before 13

Not supported

Meetings are supported only if the meeting includes PSTN coordinates. To attend a meeting on Safari without PSTN coordinates, users must download the Teams desktop client.

Video: Not supported

Sharing: Incoming sharing only (no outgoing)

Safari is enabled on versions higher than 11.1 in preview. While in preview, there are known issues with Safari's Intelligent Tracking Prevention.

¹ To give and take control of shared content during sharing, both parties must be using the Teams desktop client. Control isn't supported when either party is running Teams in a browser. This is due to a technical limitation that we're planning to fix.

² Teams meetings on browsers are limited to a single stream; either incoming video feed of the current speaker or screen sharing.

³ Edge RS2 or later doesn't support sending real-time audio and video traffic through HTTP proxies.

Note

Running Teams in a browser is supported on PCs and Macs that meet the minimum Hardware requirements for Microsoft Teams. For example, running Firefox on the Linux operating system is an option for using Teams.

On mobile devices we recommend that you use the Teams app. The Teams app is available from the Android and iOS stores.

Operating systems

For information about operating system requirements, see Get clients for Microsoft Teams.

# data[].attributes.attachment_link.title
Limits and specifications for Microsoft Teams - Microsoft Teams

# data[].attributes.attachment_link.description
This article describes some of the limits, specifications, and other requirements that apply to Teams. Number of teams a user can create Subject to a 250 object limit¹ Number of teams a user can be a member of 1,000² Number of owners per team 100 Number of org-wide teams allowed

# data[].attributes.attachment_link.readable_text
The Information Security Registered Assessor Program (IRAP) provides a comprehensive process for the independent assessment of a system's security against Australian government policies and guidelines. The IRAP goal is to maximize the security of Australian federal, state, and local government data by focusing on the information and communications technology infrastructure that stores, processes, and communicates it.

IRAP overview

The Information Security Registered Assessors Program (IRAP) is governed and administered by the Australian Cyber Security Centre (ACSC). IRAP provides the framework to endorse individuals from the private and public sectors to provide cyber security assessment services to the Australian government. Endorsed IRAP assessors can provide an independent assessment of ICT security, suggest mitigations and highlight residual risks. IRAP provides a comprehensive process for the independent assessment of a system's security against Australian government policies and guidelines. The IRAP goal is to maximize the security of Australian federal, state, and local government data by focusing on the information and communications technology infrastructure that stores, processes, and communicates it.

In 2014, Azure was launched as the first IRAP-assessed cloud service in Australia, hosted from datacenters in Melbourne and Sydney. These two datacenters give Australian customers control over where their customer data is stored, while also providing enhanced data durability in there are disasters through backups at both locations.

In early 2015, Office 365 became the first cloud productivity service to complete this assessment.

In April 2015, the ASD announced the CCSL certification of both Azure and Office 365, and in November 2015, of Dynamics 365.

In June 2017, ASD announced the recertification of Microsoft Azure and Office 365 for a greatly expanded set of services.

In April 2018, the ACSC announced the certification of Azure and Office 365 at the PROTECTED classification. Microsoft is the first and only public cloud provider to achieve this level of certification.

In September 2019, Microsoft's updated IRAP assessment scope expanded to include 113 services at the PROTECTED classification.

In December 2020, Microsoft released two incremental IRAP assessments for Azure and Office 365. These reports utilized the new guidance post the cessation of the Certified Cloud Services List (CCSL). The reports contain both an assessment of Microsoft as a Cloud Service Provider (CSP) and other services that are incremental to the 2019 reports across Azure, Dynamics, and Office 365.

Microsoft and IRAP

In December 2020, Microsoft completed two incremental Azure & Dynamics and Office 365 assessments. These assessments added more services assessed to the classification level of PROTECTED. Moreover, these assessments were conducted under the new, post CCSL Cloud Security Guidance as outlined in the Anatomy of a Cloud Assessment and Authorisation guidance from the ACSC.

For each assessment, Microsoft engaged an ACSC-accredited IRAP assessor who examined the security controls and processes used by Microsoft's IT operations team, physical datacenters, intrusion detection, cryptography, cross-domain and network security, access control, and information security risk management of in-scope services. The IRAP assessments found that the Microsoft system architecture is based on sound security principles, and that the applicable Australian Government Information Security Manual (ISM) controls are in place and fully effective within our assessed services.

The risk management framework used by the ISM draws from National Institute of Standards and Technology (NIST) Special Publication (SP) 800-37 Rev. 2, 'Risk Management Framework for Information Systems and Organizations: A System Life-Cycle Approach for Security and Privacy.' Within this risk management framework, the identification of risks and selection of security controls can be undertaken using various risk management standards, such as International Organization for Standardization (ISO) 31000:2018, Risk management - Guidelines. Broadly, the risk management framework used by the ISM has six steps:

Define the system

Select security controls

Implement security controls

Assess security controls

Authorize the system

Monitor the system

As always, additional compensating controls can be implemented on a risk-managed basis by individual agencies prior to agency authorization and subsequent use of these cloud services.

The IRAP assessment of Microsoft's services and cloud operations helps provide assurance to public sector customers in government and their partners that Microsoft has appropriate and effective security controls in place for the processing, storage, and transmission of data classified up to and including the level of PROTECTED. This assessment includes most government, healthcare, and education data in Australia.

Microsoft in-scope cloud services

Frequently asked questions
To whom does the IRAP apply?
IRAP applies to all Australian federal, state, and local government agencies that use cloud services. New Zealand government agencies require compliance with a standard similar to the Australian Government ISM, so they may also use the IRAP assessments.
Can I use Microsoft's compliance in my organization's risk assessment and approval process?
Yes. If your organization requires or is seeking an approval to operate in line with the ISM, you can use the IRAP security assessments of Azure, Dynamics 365, Microsoft Managed Desktop, and Office 365 in your risk assessment. You are; however, responsible for engaging an assessor to evaluate your implementation as deployed on Microsoft's platforms, and for the controls and processes within your own organization.
Where do I start with my organization's own risk assessment and approval to operate?
It is recommended that you read the Cloud Security Assessments guidance from the ACSC.

Use Microsoft Compliance Manager to assess your risk

Microsoft Compliance Manager is a feature in the Microsoft 365 compliance center to help you understand your organization's compliance posture and take actions to help reduce risks. Compliance Manager offers a premium template for building an assessment for this regulation. Find the template in the assessment templates page in Compliance Manager. Learn how to build assessments in Compliance Manager.

Resources

# data[].attributes.attachment_link.title
Australian Government Information Security Registered Assessor Program (IRAP) - Microsoft Compliance

# data[].attributes.attachment_link.description
The Information Security Registered Assessor Program (IRAP) provides a comprehensive process for the independent assessment of a system's security against Australian government policies and guidelines. The IRAP goal is to maximize the security of Australian federal, state, and local government data by focusing on the information and communications technology infrastructure that stores, processes, and communicates it.

# data[].attributes.attachment_link.title
How to customize the app bar in Microsoft Teams