The Cyber Coordination Centre under the Union Ministry of Home Affairs has issued advisory on 16 April, 2020 for secure use of ZOOM meeting Platform by private individuals. Various issues related to Zoom has been highlighted.
This advisory states that the platform is not for use by Government officers/officials for official purposes.
The guidelines have been issued to safeguard private individuals who would still like to use the platform for private purposes. Main objective of this advisory is to prevent any unauthorized entry into a Zoom Conference Room and to stop unauthorized participant to carry out malicious attacks on the terminals of other users in the conference.
The protective measures are as follows:
1) Objective of these guidelines is to enable/disable certain settings which are as follows:
- Prevent unauthorised entry in the conference room
- Prevent malicious activity on app
- To avoid DOS attack by restricting users through passwords and access grant
2) These settings can be done by logging into users zoom account and certain settings can be done when the meeting has started such as Lock meeting.
3) Kindly find detailed document attached to follow these steps :
- Setting new user ID and password for each meeting
- Enabling waiting room, so that every users can enter only when host conducting meeting admits him
- Disabling join before host
- Allowing Screen Sharing by host only
- Disabling “allow removed participants to re-join”
- Restricting/disabling file transfer option (if not required)
- Locking meeting, once all attendees have joined
- Restricting the recording feature
- To end meeting (and not just leave, if you are administrator)