One of today's biggest cloud trends is enterprise adoption of the Microsoft Office 365 suite. There is one wrinkle, though. Your business wants to move quickly to get immediate value, while your security team needs to proceed a little more cautiously to ensure they can govern usage and protect sensitive data. Can organizations move quickly and instrument the proper controls? Join Adrian Sanabria, Senior Security Analyst from 451 Research, Shamiana Soderberg, Senior Business Development Manager Cloud Productivity from Microsoft, and Jamie Barnett, CMO of Netskope for a look at safe enablement best practices for Office 365, and the role Cloud Access Security Brokers play in this effort. Attendees will come away with the ten real-world requirements that every organization should consider when adopting a sanctioned cloud productivity suite like Office 365. These requirements will address areas like: - Granular administrative and user controls across the Office 365 suite - DLP for content “at rest” within and “en route” to or from the suite - Usage and data governance within the suite and its ecosystem

2. © 2015 Netskope. All Rights Reserved.
Presenters
2
Insert pic of
Shamiana
Adrian Sanabria
Senior Analyst
451 Research
Shamiana Soderberg
Senior Business
Development Manager,
Cloud Productivity,
Microsoft
Jamie Barnett
Chief Marketing Officer,
Netskope

3. © 2015 Netskope. All Rights Reserved.
Brief Introduction of Netskope
3
• Leader in safe cloud enablement
• Founded in 2012
• Architects from Palo Alto Networks,
Juniper, Cisco, McAfee, VMware
• Microsoft Premier Solutions Partner,
member of OneAPI advisory board, and
invite-only Microsoft O365 TAP program
+

5. Professional Tools &
Capabilities
“Our Ability to quickly expand
and open new franchises would
not be possible without the
turnkey capabilities enabled by
office 365.”
Ted Vu -
Cofounder, Tastea
Learn More
Low Total Cost of
Ownership
“Thanks to the high level of
security and reliability of Office
365, HSS avoids the need to
hire staff to manage security
that would be required with
using exchange server.“
Marina Johnson -
Chief Information Officer, HSS
Learn More
Secure Future
“We could see that the
Microsoft solution was very
robust and complete, and we
liked their strategy for
integration between on-
premises systems and cloud
service.“
Leandro Balbinot -
Chief Information Officer, Lojas
Renner Learn More
Low/No Switching
Costs
“Microsoft Office 365 works with
Active Directory, so we have
more control in administering
our environment - while
delivering benefits like a single
sign-on experience to
employees.”
Muttia Alkhayyat -
Chief Information Officer,
UrbaCon Learn More
Security, Compliance
& Privacy
“WITH office 365, Microsoft
could meet all of our security
requirements in addition to our
needs for regulatory and legal
compliance.”
Charles Wardrip -
Vice President of Information
Technology and Infrastructure
Services, Kindred Healthcare
Learn More
All possible with Office 365 -
online, on-premises, or hybrid.
5 Things Customers Want…

6. © 2015 Netskope. All Rights Reserved.
Observed in Netskope Cloud
6
• Massive adoption of Office 365,
monetizing Live and gaining share
• 37% and 124% QoQ growth in O365
Outlook and OneDrive, respectively
• “For business” versions in top 20 for
first time
Source: Netskope Cloud Report, Summer 2015

7. © 2015 Netskope. All Rights Reserved.
Helped by CIOs’ Shadow IT Consolidation Efforts
7
Source: Wall Street Journal

8. © 2015 Netskope. All Rights Reserved. 8
Security teams are
moving more cautiously
Lines of business have big
plans and are moving fast

9. © 2015 Netskope. All Rights Reserved.
Office 365 a Leader in Enterprise-Readiness and Security
9

10. © 2015 Netskope. All Rights Reserved.
The Cloud Requires a Shared Responsibility Model
10
App Vendors’ Responsibility:
Make Apps Secure
Users’ Responsibility:
Be Good Stewards of Policy
and Sensitive Data

11. © 2015 Netskope. All Rights Reserved.
Your Data Are in the Cloud Like Never Before
(Ponemon: 30% of Business Information in the Cloud)
11
30%
70%
Source: Data Breach: The Cloud Multiplier Effect, Ponemon, 2014

12. © 2015 Netskope. All Rights Reserved.
Netskope Cloud Report: 17.9% of Files Violate DLP Policy
12
30%
70%
Source: Netskope Cloud Report, Summer 2015

13. © 2015 Netskope. All Rights Reserved. 13
Source: Netskope Cloud Report, Summer 2015

14. © 2015 Netskope. All Rights Reserved.
Ecosystems – The Way of the World
14
• Two dozen apps, on average, per “anchor tenant”
• Share data, complete workflows
• IT only aware of 10% of all apps
• Not all apps created equal
Source: Cloud App Ecosystems: Why They Should Matter to You, Netskope, 2015

15. Advice for Security Teams
© 2015 Netskope. All Rights Reserved. 15

16. Understand the LOB’s plans for deploying Office 365. Apps?
Timelines? Solutions & workflows involving ecosystem apps?

17. Articulate your policies. Let them know how this
applies to the cloud apps they’re using.

18. Put a plan in place to encourage consumption
of Office 365 through user coaching.

19. Allow is the new block (allow is new block green light slide)
19
Without getting in the way of business process.

20. Security Brass Tacks
© 2015 Netskope. All Rights Reserved. 20

21. © 2015 Netskope. All Rights Reserved.
Key Security Requirements for a Shared Responsibility Model
21
Policy and Access
Control
Risk
Anomalies
Forensics
Data Governance

22. © 2015 Netskope. All Rights Reserved.
Policy and Access Control Across the Suite and its Ecosystem
22
Create
Delete
Download
Edit
Login Attempt
Login Failed
Login Successful
Logout
Post
Share
Upload
View
View All
Office 365 users
(on-campus, mobile, remote)

23. © 2015 Netskope. All Rights Reserved. 23
First, admins. Separate admin privileges across apps, e.g.,
Exchange and SharePoint privileges. “Least privilege.”

24. © 2015 Netskope. All Rights Reserved.
Three Must-Haves for Shared Responsibility in Office 365
24
Policy and Access
Control
Risk
Anomalies
Forensics
Data Governance
for
Next, users: Grant granular access policies, e.g., web-only
email for BYOD; full suite for corporate-issued.

25. © 2015 Netskope. All Rights Reserved.
Don’t Forget the Ecosystem!
(Azure AD can bring ecosystem apps into your identity fold)
25
★
★
★
★
★
★

26. © 2015 Netskope. All Rights Reserved.
Then, Discover and Govern Sensitive Data
26
API-based DLP
In-line DLP
Find and control content
already in Office 365
Monitor and control
content en route
to and from Office 365
and its ecosystem

27. © 2015 Netskope. All Rights Reserved. 27

28. © 2014 Netskope. All Rights Reserved.
Finally, Detect Risks and Anomalies in O365 and its Ecosystem
28
• Detect non-compliant behavior
and security threats
• Behaviors like excessive
downloads or failed logins
• Same user logins from two
separate devices or locations

29. © 2015 Netskope. All Rights Reserved.
And Keep Robust Audit Trails
29
• Conduct forensic analysis
across all cloud apps
• Confirm and report on
suspicious activity
• Don’t guess; prove it so
you can take action
WHO?
WHAT?
WHEN?
WITH WHOM?
FROM WHERE?
TO WHERE?
ON WHAT DEVICE?
OS? BROWSER?
…EVERYTHING!

30. © 2015 Netskope. All Rights Reserved. 30

31. Examples from the Front Lines
© 2015 Netskope. All Rights Reserved. 31

32. © 2015 Netskope. All Rights Reserved.
GLOBAL RETAILER
32
Solution:
• Netskope for Office 365
• Netskope Active
• Netskope Active DLP
Challenges:
• New roll-out of Office 365
• Granular admin controls, user auditing,
and by-device access control
• Data visibility within/en route to suite,
including doc fingerprinting
Benefits:
• Secure content in Office 365 by discovering content against PCI and PII profiles
• Visibility and usage control for 20,000 knowledge workers and lightweight control for
Yammer for 160,000 hourly employees
+

33. © 2015 Netskope. All Rights Reserved. 33
Solution:
• Netskope for Office 365
• Netskope Active
• Netskope Active DLP
Challenges:
• Security audit revealed cloud risk
• Migration from alternative to Office 365
• Visibility into PCI and PII in cloud for
200,000+ global employees
Benefits:
• Discover DLP violations (PCI and PII) in Google Apps and prioritize migration to Office
365
• Legal hold for content related to legal and regulatory investigation
• Visibility and control for all apps; identify and coach users of alternatives to Office 365
GLOBAL HOSPITALITY CO.
+

34. Thank You, and Q&A
Adrian Sanabria
adrian.sanabria@451research.com
Shamiana Soderberg
shamians@microsoft.com
Jamie Barnett
jamie@netskope.com