Download to read offline
Uploaded byDaniel Laskewitz
SPS Cambridge - Office 365 Security & Compliance
This document discusses using Microsoft Office 365 securely and compliantly. It provides information on data classification levels in Office 365, recommended tooling for each classification level, and demos of the security and compliance center including data governance, data loss prevention, threat management, and using PowerShell. The event will include sponsor raffles, social activities, and closing at 6:30pm after thanking sponsors, volunteers and speakers.
More Related Content
Similar to SPS Cambridge - Office 365 Security & Compliance
SPS Cambridge - Office 365 Security & Compliance
- 2. SAY THANK YOUTO OUR SPONSORS!
- 3. Sponsor Raffle!!! Each sponsorstamp will opt you into their raffle prize and mailings Collect 9+ sponsor stamps on your Badge to be eligible for the Xbox Hand entire Badge/ ribbon back into registration desk at end of day We will draw Badges for prizes at 5pm in Cromwell (if you are drawn and do not have the pre-requisite stamp/s….. You lose!)
- 4. Social Make sure youtweet on #spscambridge or #sqlsatcambridge During the event we have Giant Jenga, Sack races and Conker Fights! After event, join us for a post event SharePint/ SQLPint from our bar Don’t forget to thank Sponsors, Volunteers and Speakers! The event will close at 6.30pm
- 6. What’s it allabout? Using Office 365 securely Knowing and protecting your content Complying with ISO and GDPR
- 7. Protection levels andOffice 365 – CIA Triad C3 - Confidential C4 - Secret C2 - Internal C1 - Public https://www.checkmarx.com/
- 8. Protection levels andOffice 365 Standard Office 365 protection Additional Office 365 protection Additional Azure and/or EMS protection Data loss prevention Data governance Conditional access Flow environments Azure Information Protection Rights Management Advanced Threat Analysis Risk based conditional access The required tooling depends on the classification level of content. Based on this classification you can have one or more tools or combination of tools. C2 C1 C3 C4 Confidentiality Basic toolset Example tooling Azure/EMS Advanced multifactor authentication Advanced Threat Analysis Audit log search Azure AD identity protection Azure AD privileged account management Azure Information Protection B2B Collaboration Bring your own key Certificate provisioning Cloud App Security Conditional accesss eDiscovery Encrypted e-mail Full MDM (Intune) Risk based conditional access Single sign-in SaaS applications SQL Always encrypted Users self-service management Workstation management Office 365 Advance Data governance Adv. Security management Office 365 Basic Mobile Device Management Basic multifactor authentication Conditional access Customer lock-box Data loss prevention RMS for Office 365 Single sign-on Office 365 Today’s session
- 9. Security & compliancecenter Not included in E1 • Data loss prevention • eDiscovery export • Manual retention/deletion policies Not included in E1 or E3 • Adv. security management • Adv. threat management • Adv. data governance • Adv. eDiscovery Included in E5 • Everything https://technet.microsoft.com/en-us/library/dn933793.aspx
- 10.
- 11.
- 12. To recap Data governance| Retention: location/condition based Classifications | Label policies: content/user based Data governance: behind the scenes Classification labels: in front Publish a label to create a label policy Label policy is published to (one or more) locations New (August 2017): Classification labels, policies Disposition dashboard Supervision
- 13.
- 14. To recap Build-in sensitivitytypes Based on search (takes some time to become visisible) Device management is based on Intune, but only for Office 365
- 15. Small sidestep: ThreatManagement Insights into e-mail threat and protection Spam filtering Malware detection Enable/disable Dkim signing of e-mails Quarantine: all e-mails seen as malware, spam, phish, or bulk
- 16. DEMO Finding sensitive information Searchingthe audit log
- 17. To recap Case management Contentsearch based on sensitive types Audit log search is very powerfull Advanced eDiscovery (E5)
- 18. DEMO Using alerts andrecommendations
- 19.
- 20. DEMO Using PowerShell withthe Security & Compliance center
- 21.
- 22. That’s about it Butthere’s some more info….
- 23. More information Office 365security & compliance center Security & compliance security roles PowerShell cmdlets Find sensitive data Sensitive data queries Data loss prevention
- 24. Thank you foryour time…. Reach out to us on Twitter: Or check out our blogs: https://alberthoitingh.com https://www.O365dude.com @AlbertHoiting h @Laskewit z
Editor's Notes
- #22 $UserCredential = Get-Credential $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.compliance.protection.outlook.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection Import-PSSession $Session Get-DlpCompliancePolicy Get-DlpSensitiveInformationType Get-managementrole Get-compliancesearch
- #24 Albert