Managing Content: You Need To Think About More Than Office 365 Erica Toelle Product Evangelist

Thank you to our sponsors!

Sponsor Raffle!!! Each sponsor stamp will opt you into sponsor raffle prize and mailings Collect 7 or more sponsor stamps on your Badge to be eligible for the Xbox One X Hand entire Badge/ ribbon back into registration desk at end of day to enter the prize draw Badges drawn at 5.15pm in Trinobantes (if you are drawn and do not have the pre-requisite stamp/s….. You’ll lose!)

Social Tweet on #spscambridge OR #sqlsatcambridge We have Giant Jenga, Giant Connect 4, Giant Kerplunk and Sack races! Post event, join us for a SharePint/ SQLPint from our bar Don’t forget to thank Sponsors, Volunteers and Speakers! The event doors will close at 6.30pm

Today’s Agenda Define Our Content Problems Solutions To These Problems Office 365 Custom Solutions Third Party Tools Today’s Agenda

A Typical Organization On-Premises The Cloud Hybrid

What We Are Trying To Do With Content PREVENT BAD STUFF INCREASE VALUE Compliance Findability Records Sensitive Data Reusability Security Provide Context

Prevent Bad Stuff

Prevent Bad Stuff PREVENT BAD STUFF Access all organizational content Scan all content Identify certain types of data: sensitive, PII, records Ensure it is stored in the correct location Automatically apply a policy: retention, security, etc. Compliance Records Sensitive Data Security

Source: Microsoft Trust Center

Core Compliance Scenarios Allow people to access and delete their data, ensure data integrity Have documented processes in place to protect data Train employees to follow policies and processes Perform good records management practices

Microsoft Compliance Landscape Ensure Files in Correct Location Access All Content Cloud App Security DLP Azure Information Protection Azure Rights Management IRM Advanced Data Governance Retention Scan Content, Identify Sensitive Data Automatically Apply Policy Automatically Apply Policy

What is Cloud App Security? Microsoft Cloud App Security provides a comprehensive, intelligent security solution that brings visibility, real-time control, and security to your cloud applications. Microsoft Cloud App Security is a CASB (Cloud Access Security Broker) that can help you bring the protection you have on-premises to your cloud apps, gaining comprehensive visibility, auditing capabilities, and granular controls to help ensure your sensitive data stays safe.

What is a Cloud Access Security Broker?

Summary of What Data is Available Per App Account information: Visibility into users, accounts, profile information, status (suspended, active, disabled) groups, and privileges. Audit trail: Visibility into user activities, admin activities, log on activity. Data scan: Scanning of unstructured data using two processes -periodically (every 12 hours) and in real-time scan (triggered each time a change is detected). App permissions: Visibility into issued tokens and their permissions. Account governance: Ability to suspend users, revoke passwords, etc. Data Governance: Ability to quarantine files, including files in trash, and overwrite files. App permission governance: Ability to remove tokens.

What Apps Are Supported?

Demo: Cloud App Security

Prevent Bad Stuff: Cloud App Security Access all organizational content Scan all content Identify certain types of data: sensitive, PII, records Ensure it is stored in the correct location Automatically apply a policy: retention, security, etc. Compliance Records Sensitive Data Security

Cloud App Security Pros and Cons Can see all apps used in your organization Can’t scan files in all cloud apps Can scan content in 8 cloud apps Can’t apply policy to all cloud apps Partners could develop more cloud connectors No integration with ADG policies (yet) Can apply policy to 8 cloud apps Can’t move content between applications Integration with AIP policies

Microsoft Compliance Landscape Ensure Files in Correct Location Access All Content Cloud App Security DLP Azure Information Protection Azure Rights Management IRM Advanced Data Governance Retention Scan Content, Identify Sensitive Data Automatically Apply Policy Automatically Apply Policy

What is Azure Information Protection? Classify Label Protect Identify sensitive content Suggested labels based on sensitive data type Categorize based on confidentiality Provide visual indications of the label Define granular rights to content Stays with the document or email Uses Azure Rights Management

Classify

Azure Rights Management

Azure Rights Management – What Doesn’t Work If an ARM protected document saved to SharePoint or OneDrive will not support the following features for protected files: Co-authoring Office Online Search document preview Thumbnail eDiscovery data loss prevention (DLP)

Retention Policies Attached to a label. Can do the following: Trigger a disposition review at the end of the retention period, so that SharePoint and OneDrive documents must be reviewed before they can be deleted. Start the retention period from when the content was labeled, instead of the age of the content or when it was last modified.

Office 365 Labels Location Deployment Can be deployed to specific locations or the entire organization. All Locations SharePoint OneDrive for Business Groups Exchange Email Sites (up to 100 sites) Accounts (up to 1000) (up to 100) Entire Locations Recipients (up to 1000) Include or Exclude

Automatic Classification (Labels) Except when… Auto-applied based on sensitive information types The label is a record Auto-applied based on a search query A user has manually applied a label Auto-applied based on a location Another label is older

Prevent Bad Stuff: Cloud App Security Access all organizational content Scan all content Identify certain types of data: sensitive, PII, records Ensure it is stored in the correct location Automatically apply a policy: retention, security, etc. Compliance Records Sensitive Data Security

API and ADG Pros and Cons Can classify Office 365, SharePoint, and Azure content, can apply policies to these locations AIP and ADG labels don’t sync (yet) Azure Rights Management protects the security of documents Retention doesn’t meet records management standards Azure Rights Management majorly reduces SharePoint and OneDrive functionality

Ensure Documents are in the correct location Migrate or sync files between cloud applications

Increase Value INCREASE VALUE Access all organizational content Scan all content Add additional metadata or properties Use machine learning to add additional context Display in context with other data Findability Reusability Provide Context

Twitter: @EricaToelle Thank you!! Erica Toelle RecordPoint Product Evangelist Erica.Toelle@RecordPoint.com Twitter: @EricaToelle