GoKawiilWire survey finds most security teams can't track who has access to shared M365 files
A Wire survey found that 61% of security leaders say access to shared files in Microsoft 365 often stays active far longer than intended, while more than a third struggle to even identify who currently has access to sensitive shared content. The report points to routine sharing habits—like adding freelancers to SharePoint folders or inviting new members into Teams channels—as common ways access quietly persists beyond its original purpose.
GoKawiil's interpretation of the reporting above, not reported fact.
As collaboration tools become the default way employees exchange files, the ease of sharing is outpacing organizations' ability to monitor and revoke access, creating hidden security exposure. Without regular access reviews, stale permissions can accumulate into a significant attack surface, leaving sensitive data reachable by former contractors, ex-employees, or unrelated team members long after their need for access has ended.
- 61% of security leaders say shared file access often remains active longer than necessary
- Over a third of organizations can't reliably identify who has access to sensitive shared files
- Common M365 workflows like SharePoint folder sharing and Teams channel invites often cause access to outlive its purpose
Source: bleepingcomputer.com, 2026-09-18
Published there as: “Secure enterprise sharing with access reviews for Microsoft 365”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.