20181110 sps leicester connect protecting your data in office 365
•Download as PPTX, PDF•
0 likes•100 views
Office 365 provides security features to protect user data and credentials in the cloud, including: 1. Multi-factor authentication and conditional access policies that control user access based on conditions like device, location, and authentication method. 2. Tools like Azure Active Directory and Microsoft Cloud App Security that detect threats like phishing attacks, password spraying, and anomalous sign-in attempts from untrusted locations or devices. 3. Privileged identity management capabilities to enforce just-in-time administrative access and monitor privileged users and roles.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to 20181110 sps leicester connect protecting your data in office 365
Similar to 20181110 sps leicester connect protecting your data in office 365 (20)
More from Arjan Cornelissen
More from Arjan Cornelissen (8)
Recently uploaded
Recently uploaded (20)
20181110 sps leicester connect protecting your data in office 365
- 1. Protecting your data in Office 365
- 2. Thank You To All Of Our Sponsors! #spsleicester
- 3. Arjan Cornelisssen SharePoint & Office 365 Architect WorkTogether.tech @arjancornelis
- 4. How did we do security?
- 5. Sobering statistics The frequency and sophistication of cybersecurity attacks are escalating $6T annual cost of cybercrime to the global economy $3M average cost of a data breach to a company 140+ median # days attackers reside within a victim’s network before detection network intrusions due to compromised user credentials 81%+
- 8. lllllllll lllllllll Phishing Password Spray Breach Replay 200K password spray attacks blocked in August 2018 23M high risk enterprise sign-in attempts detected in March 2018 4.6Battacker-driven sign-ins detected in May 2018 Top attacks against Azure AD John Doe lllllll
- 9. Corporate Network Geo-location MacOS Android iOS Windows Windows Defender ATP Client apps Browser apps Google ID MSA Azure AD ADFS Employee & Partner Users and Roles Trusted & Compliant Devices Location Client apps & Auth Method Conditions Microsoft Cloud App Security Force password reset Require MFA Allow/block access Terms of Use ****** Limited access Controls Machine learning Policies Real time Evaluation Engine Session Risk 3 40TB Effective policy
- 13. Demo
- 15. Demo
- 17. Access granted to data Microsoft Enterprise Mobility + Security Apps Risk MICROSOFT INTUNE AZURE ACTIVE DIRECTORY MICROSOFT CLOUD APP SECURITY AZURE INFORMATION PROTECTION MICROSOFT ADVANCED THREAT ANALYTICS ! Device ! CONDITIONAL ACCESS Location Classify Audit Protect Label ! !
- 18. Device and Application security
- 19. Privileged Identity Management Enforce on-demand, just-in-time administrative access when needed Ensure policies are met with alerts, audit reports and access reviews Manage admins access in Azure AD and also in Azure RBAC User Administrator Discover, restrict, and monitor privileged identities UserAdministrator privileges expire after a specified interval
- 22. Demo
- 23. Identity Secure Score Visibility into your Identity security position and how to improve it Insights into your Identity security position Guidance to increase your security level Easily compare score against other organizations View trends Set an ideal score. Choose controls to achieve ideal score based on impact. Ignore controls that are not valid for you. 3rd party product support. Checkout your Identity secure score now @ http://aka.ms/MyIdentitySecureScore
- 24. Secure Score Checkout your Identity secure score now @ http://aka.ms/MyIdentitySecureScore
- 25. Password-less with Microsoft Authenticator app aka.ms/gopasswordless Available today In Public preview today
- 26. Our Security mindset needs to be updated
Editor's Notes
- Own datacenter with firewall and everything was protected It was all in own control or by trusted vendorAlles in eigen beheer of door lokale partij uitbesteed
- Now that we are going into the cloud, how about that security We are leaving the fort, who can access my data?
- The user is the central point of protection, not the perimeter anymore
- 8
- Azure AD P1 https://www.trusona.com/docs/azure-ad-integration-guide
- 13
- https://admin.onedrive.com/?v=AccessPolicySettings
- Legacy applications Set-SPOTenant -LegacyAuthProtocolsEnabled $false https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-no-modern-authentication https://github.com/SharePoint/PnP-PowerShell/tree/master/Samples/Graph.ConnectUsingAppPermissions
- https://ypcode.wordpress.com/2017/05/28/register-full-control-tenant-scoped-app-principal-in-sharepoint-online/comment-page-1/ https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/development-experience-tenant-apponly-permissions-in-sharepoint-online https://<tenant>-admin.sharepoint.com/_layouts/15/appinv.aspx
- 18
- Azure AD P2 https://azure.microsoft.com/en-us/pricing/details/active-directory/
- 24
- 25
- Now in preview https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-phone-sign-in