Zoom - How to do a Zoom meeting
Microsoft Teams - A Secure Alternative to Zoom
Cambridge University and the Clinical School encourage people to use Microsoft Teams instead of Zoom where possible - it includes more features and is more secure, with robust data govenrnance agreements in place via our Office 365 agreement. Additionally, Teams is licenced for all University staff and students, and UIS and CSCS Service Desks are able to support it.
To assist with this CSCS have put together some user guides on using Teams - including "How to join a meeting" (both with and without a Cambridge University account), "Creating and Joining meetings" and "Recording Meetings" - available on our website here:Â Microsoft Teams Help
Avoiding "Zoombombing" - aka unwanted participants joining a meeting.
This has been reported as happening to several meetings now, and has been reported online significantly. Zoom have now changed the default option for all new meetings so people joining the meeting are now put into a "Waiting Lobby" and have to be admitted by the host. Please be cautious when posting meeting links on public websites, though people can no longer immediately join the meeting directly, having to deal with unwanted people trying to join can be disruptive. We would also urge you to consider if Zoom is the best option, or if the meeting can be done in Microsoft Teams instead.
Zoom Security Tips
- Don't use your Personal Meeting ID for meetings - instead let Zoom allocate a random meeting ID (this is now the default for new meetings).
- Always password protect your meetings (this is now the default for new meetings).
- Use the Waiting Room to control access (this is now the default for new meetings).
- Restrict what participants can do - you can:
- Disable Screen sharing by participants
- Disable private chat between participants
- Don't let people rename themselves
- Disable annotation of shared screens by participants
The UIS also have a page with tips on using Zoom securely:Â https://help.uis.cam.ac.uk/service/security/cyber-security-awareness/wfh-security/zoom-security
Sharing the meeting URL
Warning: The meeting URL created by Zoom allows someone to join the meeting without having to enter a password or the Meeting ID. We recommend this is only shared for private meetings, and only directly sent to participants. We suggest that if you are planning on posting the information publicly, or if there is a risk it may be shared, that you instead share the Meeting ID (the 9-digit number for the meeting) and then, separately and privately share the Meeting Password.
Instructions
Recording Meetings
Zoom offers the option to Record meetings. With a free account you can only record to your local PC - and by default it will record to your "Documents\Zoom" folder, with a new folder being created per meeting. Please be careful when recording meetings, if you are using a shared account on a PC (e.g. one of the Seminar Room logins) then the recording will be visible to anyone else who logs in with that account, unless you move or delete it. The video is not encrypted or password protected.
With a paid account you are offered the option of saving the recording online - either to the Zoom Cloud Servers, or to another server of your choice. Please be extremely careful when using this, as the video is not encrypted or password protected, and as various news & security organisations have found people have been uploading confidential recordings to public or unsecured websites.
Please also note that aside from these technical steps, there are the usual concerns about data and privacy - no Patient Identifiable Data should be used or discussed in the meeting, and the participants should consent to & be informed of the recording before the meeting is recorded, copyright for eventual published recordings and retention policy of recordings:
- Tell participants ahead of time that the meeting will be recorded and the intended purpose of the recording.
- Alert them of any copyright restrictions (e.g. as per the copyright notice on MedEd) over the published recordings.
- Create, action, and inform all participants of the retention policy/process for the recordings.