Kushantha Gunawardana presented on Microsoft 365 security. The presentation covered security concepts like the CIA triad and identity challenges. It discussed evolution of identity technology and zero trust concepts. It also outlined how to protect the Microsoft tenant, including managing user identities, multi-factor authentication, self-service password reset, and Windows Hello for Business. The presentation provided an overview of key security features in Microsoft 365.

1. Microsoft 365
Security
By Kushantha Gunawardana

2. Instructor introduction
• Trainer: Kushantha Gunawardana
• Consultant / Trainer /Lecturer
MSc-IT, MCT, C|EI, E|CSAv9, C|EH, C|HFI,
E|NSA, CCNSP, IRNSS, CISE, MIEEE, MBCS, CSSL, MCP, MCSE,
MCSA +M, HNDIT
• Microsoft 365 Enterprise Administrator Expert
• MCSE: SharePoint
• MCSE: Productivity
• MCSE: Private Cloud
• MCSE: Cloud Platform and Infrastructure
20+ Years of total IT experience with vast exposure
to IT Infrastructure, Security, Compliance and
Management space conducted training and
consultations over 20 countries including Asia,
Africa, Europe and Australia.

3. Agenda
Security concepts
Common threats
Microsoft 365 Security features
How to protect your infrastructure
Conclusion - QnA

4. Security concepts

5. CIA Triad
• Authenticity
• Non- repudiation

6. Identity challenges
81%
Of breaches are caused
by credential theft
73%
Of passwords are
duplicates
80%
Of employees use
non-approved apps
for work

7. Evolution of identity technology
Evolution of IT, threats, and Microsoft Identity security
Microsoft
identity
approach
Windows NT
Domains
+ Enterprise Active Directory
+ Smartcard Authentication
+ Azure Active Directory
+ Passwordless Authentication
+ Hardware Credential Isolation
Identity
and access
trends
Local Identities
Enterprise Single Sign On
+ 2 factor authentication
Hybrid and Federated Cloud
Identity
Information
technology
Mainframes + PCs
+ Datacenters
+ Mobile Devices
+ Cloud
+ Internet of Things (loT)

8. Zero Trust concepts
Security Policy
Enforcement
Real-time
policy evaluation
User/session risk
Multi-factor
authentication
Identities
Device risk state
Device inventory
Devices
Organization
Policy
Threat
Intelligence
Access and
runtime control
Threat
protection
Infrastructure
Network
Adaptive
access
Apps
Classify, label,
encrypt Data
Visibility and Analytics
Automation

9. Authentication for hybrid identity
Cloud-only identity: Hybrid identity:

10. Directory synchronization
Directory synchronization is the
synchronization of directory
identities or objects (users,
groups, contacts, and computers)
between two different
directories, such as your
on-premises Active Directory
environment and Azure AD
which supports online services
like Microsoft 365

11. Identity governance process
Identity lifecycle:
User onboarded
Access lifecycle:
Oversight with
access reviews
Admin rights:
Privileged identity
management
End of lifecycle:
Access rights
automatically
removed

12. Zero Trust networking
Realities of perimeter-based networks:
Perimeter-based networks only trust users inside a network
Single point of attack can threaten the entire network
Security teams and end user IT teams often use separate and disjointed tools
and strategy

13. Protect your tenant

14. Azure AD Connect
Azure Active
Directory
Offices 365
Your Apps SaaS Applications
On-premises Active
Directory
Azure AD Connect
User Devices
Sign-on

15. User identities

16. Manage user accounts and licenses
Managing user accounts involves managing
several account settings, such as
Assigning administrator roles
Setting users’ sign-in status
Specifying user location settings
Assigning licenses
You can use the Microsoft 365 admin center
to edit single or multiple users

17. Multi-factor authentication
Multi-factor authentication (MFA) in Microsoft 365
helps increase security by requesting users to provide a
username and a password while signing in and then
use a second authentication method
The second authentication method might be
acknowledging a phone call, text message, or an app
notification on their smartphone
The tenant administrator enables MFA in the Microsoft
365 admin center

18. Self-service
password reset
Self-service password reset (SSPR)
allows users to reset their own
password without requiring
intervention by an administrator

19. Password alternatives
Windows Hello Microsoft Authenticator FIDO2 Security Keys
1
Send challenge
2
Provide user verification
User Auth Gestures
3
Sign and return challenge
FIDO2 Authenticator
4
Verify signed challenge
RP Server

20. Windows Hello for business
In Windows 10, Windows Hello for Business replaces passwords with
strong two-factor authentication on PCs and mobile devices. This
authentication consists of a new type of user credential that is tied to a
device and uses a biometric or PIN
Windows Hello for Business lets users authenticate to an Active Directory
or Azure Active Directory account

21. Azure AD Smart Lockout

22. © Copyright Microsoft Corporation. All rights reserved.
Kushantha Gunawardana.
MSc-IT CEI MCT ECSA CEH CHFI ENSA CND CSCU CCNSP IRSS CISE MIEEE MBCS MCP MCSA MCSA + M
Consultant / Trainer
M +61 488990231
WhatsApp / Viber +94 715345530
E kushantha@gmail.com
https://www.linkedin.com/in/kushantha/
https://twitter.com/KushanthaB
https://www.youtube.com/c/kushanthag
https://blog.kushantha.com/
https://www.facebook.com/KushanthaTech/
https://www.slideshare.net/KushanthaGunawardana
Thank you !