Recommended
More Related Content
What's hot
What's hot (20)
Similar to 5 Effective M365 IT Pro Habits
Similar to 5 Effective M365 IT Pro Habits (20)
Recently uploaded
Recently uploaded (20)
5 Effective M365 IT Pro Habits
- 1. SaaS, Mastered. 5 Effective M365 IT Pro Habits 16 | February | 2021 MORNING COFFEE WITH OUR FOUNDERS
- 2. SaaS, Mastered. GRAB YOUR COFFEE AND ENJOY THE SESSION • This session will be recorded will be shared with everyone after the event • If you have questions, please type them in the questions area and we’ll save time to answer those at the end • If you have technical difficulties, please chat those into the moderator and we’ll do our best to address them CONFIDENTIAL | 2
- 3. The leading global SaaS Management Platform 5,000,000+ user mailboxes managed in over 100 countries Founded 2014 in Italy 4.8 out of 5 stars Hundreds of partners worldwide Gartner Cool Vendor and Microsoft Gold Partner Offices throughout North America and Europe Insight Partners-backed
- 4. SaaS, Mastered. David Mascarella Chief Global Strategist Ivan Fioravanti Chief Technology Officer
- 5. SaaS, Mastered PROTECT YOUR ADMIN ACCOUNTS WORKFLOW APPLY POLICIES LICENSING LEAST PRIVILEGE ACCESS 4 RULES These accounts have the keys of your kingdom, protect them! DEFINE BEST PRACTICES IS NOT GOOD ENOUGH Apply and verify policies is a must! DELEGATED ADMIN Limit visibility and permissions to avoid human errors and breaches AUTOMATION Provisioning & Deprovisioning are just basic processes to automate OPTIMIZE LICENSE USAGE The goal is improving ROI, ensure that licenses are correctly distributed and used across your tenant 5 EFFECTIVE M365 IT PROS HABITS
- 6. SaaS, Mastered Consequences for NOT securing 80% of data Breaches involve a Privileged Identity (Gartner) 85% of reported breaches were due to misconfiguration (IBM) Through 2025, 99% of cloud security failures will be the customer’s fault (Gartner)
- 7. Protect your admin account Question Time
- 8. From 2 to 4 Reduce number of company administrators Dedicated accounts Create dedicated Microsoft 365 global administrator accounts and use them only when necessary Strong Authentication MFA is a must! Avoid Conditional access is possible, MFA ALWAYS! SMS and Calls forbidden if you are under NIST (avoid them if possible) Authorization Implement Least Privilege Access Roles, PIM, PAM, … Protect Your Admin Accounts
- 10. SaaS, Mastered
- 11. SaaS, Mastered Policy monitor and enforcement Track the adherence to your policies and best practices and enforce them. How does CoreView help? • Single pane of glass with all your users’ configuration setting. • Flexibility to validate all your configuration policies • Single customizable dashboard to monitor them • Alerts to be engaged on misconfiguration • Single click to remediate misconfiguration • Exception management • Automation to enforce policies
- 12. SaaS, Mastered A Challenge: What about Risk-Based Password Management? How does CoreView help? • Instead of mandating scheduled password resets, CoreView enables risk-based response with workflow that can log out, disable, and notify IT. https://docs.microsoft.com/en-us/microsoft-365/admin/misc/password-policy-recommendations?view=o365-worldwide
- 13. SaaS, Mastered Security Benchmarking Track your configurations against recommended best practices How does CoreView help? • CoreView monitors and can enforce most of the CIS Benchmark controls for M365 CoreView Automates Customization Required
- 14. Least Privilege Access Model Question Time
- 15. Roles (Too) Many Predefined Roles Are they granular enough? Admin Units Limit visibility, mainly on Azure AD Multi vs Single Tenant Multi tenant gives you total segregation and maximum security but… It will limit productivity and collaboration! PIM/PAM PIM - just-in-time assignment PAM - just-in-time access for task- based activities (Exchange only) Least Privilege Access - Microsoft
- 16. SaaS, Mastered Least Privilege Access Model Single Tenant Virtual Tenants Defined Roles Custom Roles
- 18. SaaS, Mastered. Protect your Admin Accounts #01 - Microsoft dedicate page link - MFA: No Text and Call (NIST) link Microsoft 365 Security for IT Pros #05 This book is great and monthly updated: https://m365securitybook.com/ Useful link to navigate Microsoft 365 security Center for Internet Security #02 - A step-by-step checklist to secure M365 link Least Privilege Access #03 - Admin Units link - PIM link - PAM link All Microsoft Admin Centers #04 - Microsoft Portal Sites: msportals.io
- 19. SaaS, Mastered Don’t fly blind when it comes to M365 security flaws and application use. Least privilege access to M365 and other SaaS Enhanced e-discovery with enriched data Security policies Automated workflows Document classification Mitigate Risk Delegated administration for segregation of duties Visibility and Control with Actionable analytics Automated workflows Improve IT efficiency License management and chargebacks License consumption optimization Workload adoption and proficiency Maximize SaaS ROI Request the free health check https://www.coreview.com/office-365-health-check-report/
Editor's Notes
- CoreView is established and well-respected having become the leading global SaaS management platform, as defined by Gartner and others 5M user mailboxes managed (Microsoft uses this instead of saying user accounts) 4.8 out of 5 stars rating on G2, and 5 star on Gartner Peer Review; 96% Recommended by UserVoice [No need to go thru remainder]
- Things do go wrong if you don’t properly secure yourself as you move to the cloud with M365 and SaaS applications. Whether it’s from Gartner research about access control in breaches, IBM analysis regarding misconfigurations causing problems, or Gartner’s assessment that 99% of failures will be the customer's fault. It's all bad!
- Pool 1: How many M365 company administrators do you have in your tenant? Pool 2: Are you using separate and dedicated accounts for administrative activities?
- Dedicated Account: our statistics said more than 80% of admin account are not dedicated. Why do you think is this happening? (a policy should be verifying and enforce dedicated account) MFA: your point of view about MFA and Conditional access. When Conditional Access should be adopted (service account?) From 2 to 4: we see very few companies into this range. Some time company before to start working with us have dozen (if not hundreds) company administrators or operator with other very high permissions like the exchange administrator right. - Why company are granting so many right to their administrators? Is there a way to limit admin rights? (answer PIM/PAM)
- Pool 3: Do you have complete control and visibility on your tenant configuration? Ci sono i dati ma bisogna accedere a molteplici portali:
- This image is rappresnting what miscrosoft give you to implement the zero trust principle.as we can see Ms have a lot of staff to help you to protect your environment but the KEY fo the success is the Policy enforcement. Have good tool and policy is not good enought. You have to apply, verify and enforce these policy to implemnent a secure environement. Furthermore we talking ab out a every day live environement, that means you can not make a one time check you need something to implement a real time policy evaluation. Here Visibility and Automation are the two key element to reach this goal. Microsoft fornisce tantissimi strumenti ma poi è il cliente che li deve usare in modo corretto. Link . Quando David finisce di parlare, David e Ivan chiedono di leggere la domanda sul CIS
- CoreView enables you to see the metrics and alerts *you* want – against the controls *you* select. This enables ongoing communication, whether security issues regarding a single user, provisioning, use of M365 licenses and adopting those features, or maybe simply communicating specific metrics to management. CALL CIS Question.
- Fine slide: Do you know how your M365 configuration compares to the policies of the Center for Internet Security (CIS) benchmarks for Microsoft 365? And what about the ability to detect security issues, and then react to them automatically? Rather than employees needing to change passwords every so many days, What about using CoreView’s high risk report that could be configured to automatically trigger a workflow that wipes out the user session, disables the user account, and notifies the IT Security Help Desk that the user’s account is being misused or is at high risk, and requires some steps to be completed before the account can be re-enabled – achieving better protection without inconveniencing all employees! So this could automate reaction to risk events, or non-compliant devices, or other events, as desired. It’s near real-time, and because we’re doing it from inside the applications, it's much more powerful than what Microsoft is doing in this area, which would be to send a text message, even though they have recommended such a practice in the link here. Again, CoreView does something that Microsoft simply can't do.
- The CIS framework is very well known within commercial organizations for being explicit instructions for how you should secure O365 environments. So, for example, when we're setting up customers, our Customer Success team uses a checklist and helps customers deploy the recommended M365 configurations. We are at least as good as what the best practices say that customers should have. And these can be reviewed in the KPI Dashboard, operationalizing these reports so you can stay in compliance, not just set it up once and then no longer be compliant when something changes. And, CoreView can enforce these security recommendations, including items such as: Email forwarding Remove external users, with approval Clear inactive users Check on failed logins, and send email if needed or approvals needed Alert on risks detected Reclaim licenses from disabled users On that first one, email forwarding, we found a customer where hundreds of state troopers were forwarding police email to their personal accounts. Uh oh. They had no idea, but were able to fix it right away with CoreView.
- Pool 5: Are you implementing the best Least Privilege Access policies on your admin accounts to comply with industry standards?
- Fine della slide domanda pim and pam
- Parla David
- Aprire link punto 4 – qua dare il link
- Recap. Protect + manage + Optimize + mettere slide health check