Take Action on Risky Meeting Bots
Focus
Focus
SaaS Security

Take Action on Risky Meeting Bots

Table of Contents
If you think a meeting bot represents a threat to your organization, you can revoke its access to calendar applications or open a ticket to investigate further.
After you assess the risks posed by meeting bots, you might determine that you don't want to allow a particular meeting bot in your organization. You can take one of the following actions:
  • You can revoke the bot's access to calendar applications. Revoking calendar access prevents the bot from joining meetings automatically. Revoking a bot does not prevent a user from adding the bot to their calendar again. Although you can’t prevent a user from subsequently adding a revoked bot, you can configure SSPM to automatically revoke the bot as soon as a scan detects that a user added it.
    When you revoke a bot's access to user calendars, you only prevent the bot from joining meetings automatically. Meeting participants can still add a bot to a live meeting.
  • If you linked SSPM to an issue tracking system, you can create a ticket to resolve the issue. For example, you might create a ticket to investigate the bot further, or to communicate that the bot isn’t sanctioned and instruct a bot user to stop using it.
  1. Log in to Strata Cloud Manager.
  2. Select ManageConfigurationSaaS SecurityPosture SecurityMeetings.
  3. (Optional) If you want to prevent a bot from joining meetings automatically, revoke the bot.
    Revoking a bot removes the bot from the calendars of all users who added the bot.
    1. In the table that lists the bots, locate the bot that you want to revoke.
    2. In the Actions column for the bot, select Revoke Access.
      Revoking a bot's access to user calendars does not prevent a user from adding the bot to their calendar later. To configure SSPM to automatically revoke the bot as soon as a scan detects that a user added it, complete the following steps:
      1. In the Bot Name column, click the name of the meeting bot.
      2. In the flyout window for the meeting bot, position the Auto Revoke toggle to the on position.
  4. (Optional) Create a ticket in an issue tracking system.
    To create a ticket in an issue tracking system, you must first link SSPM to a Jira or ServiceNow instance for ticketing. You can then create tickets directly from SSPM to take action on risky bots in any way you want.
    1. In the table that lists the bots, locate the bot that you want to create a ticket for.
    2. In the Actions column for the bot, select Manage Tickets.
    3. Fill in the information in the Ticketing area of the flyout window, and Create Ticket.