SaaS Security
Take Action on Risky Meeting Bots
Table of Contents
Expand All
|
Collapse All
SaaS Security Docs
Take Action on Risky Meeting Bots
If you think a meeting bot represents a threat to your organization, you can revoke
its access to calendar applications or open a ticket to investigate further.
After you assess the risks posed by meeting bots, you might determine
that you don't want to allow a particular meeting bot in your organization. You can
take one of the following actions:
- You can revoke the bot's access to calendar applications. Revoking calendar
access prevents the bot from joining meetings automatically. Revoking a bot
does not prevent a user from adding the bot to their calendar again.
Although you can’t prevent a user from subsequently adding a revoked bot,
you can configure SSPM to automatically revoke the bot as soon as a scan
detects that a user added it.When you revoke a bot's access to user calendars, you only prevent the bot from joining meetings automatically. Meeting participants can still add a bot to a live meeting.
- If you linked SSPM to an issue tracking system, you can create a ticket to resolve the issue. For example, you might create a ticket to investigate the bot further, or to communicate that the bot isn’t sanctioned and instruct a bot user to stop using it.
- Log in to Strata Cloud Manager.Select ManageConfigurationSaaS SecurityPosture SecurityMeetings.(Optional) If you want to prevent a bot from joining meetings automatically, revoke the bot.Revoking a bot removes the bot from the calendars of all users who added the bot.
- In the table that lists the bots, locate the bot that you want to revoke.In the Actions column for the bot, select Revoke Access.Revoking a bot's access to user calendars does not prevent a user from adding the bot to their calendar later. To configure SSPM to automatically revoke the bot as soon as a scan detects that a user added it, complete the following steps:
- In the Bot Name column, click the name of the meeting bot.
- In the flyout window for the meeting bot, position the Auto Revoke toggle to the on position.
(Optional) Create a ticket in an issue tracking system.To create a ticket in an issue tracking system, you must first link SSPM to a Jira or ServiceNow instance for ticketing. You can then create tickets directly from SSPM to take action on risky bots in any way you want.- In the table that lists the bots, locate the bot that you want to create a ticket for.In the Actions column for the bot, select Manage Tickets.Fill in the information in the Ticketing area of the flyout window, and Create Ticket.