Office 365: Modern Workplace - Peters & Associates...Office 365: Modern Workplace November 8, 2018...

Helping you grow your business with

scalable IT services & solutionsfor today’s challenges & tomorrow’s vision.

© 2018 Peters & Associates, Inc. All rights reserved.

Office 365: Modern Workplace

November 8, 2018

Bruce Ward, VP of Business Strategy

+EMS E5

Azure AD Basic:

• Single sign-on (SSO) for O365

• Basic multi-factor authentication (MFA) for O365

• SSO for Cloud Apps

MDM for O365

• Device settings management

• Selective wipe

• Built into O365 management console

RMS for O365

• Protection for content stored in Office (on-premises or O365)

• Access to RMS SDK

Activity Logs

Azure Active Directory P2

• Risk based conditional access

• Identity Protection Portal

Identity and access management


• Single sign-on (SSO) for all apps

• Conditional MFA, Password Self Service, Dynamic Groups

Cloud App Security - ALL

• Visibility and control for all cloud apps

Identity-driven security

Advanced Threat Analytics

• Identify advanced threats in on premises identities

Azure Information Protection Plan 2

• Automated intelligent classification and labeling of data + AIP Scanner

Information protection

Managed mobile productivity

Intune

• App management (MAM)

• Device management (MDM)

• PC management


• Tracking and notifications for shared documents

Office 365 ATP – email links, attachments, phishing

Skype/Teams Extension

• Voice

• Conferencing

Power BI

Advanced eDiscovery–search

Compliance

• Customer Lockbox, Customer Key, Privileged Access

Cloud App Security - O365

Portal with anomalous activity

+EMS E3

Features: Office ProPlus, Exchange (eDiscovery, DLP), Skype/Teams, SharePoint, Office Online, OneDrive, Video, Yammer, Delve, MyAnalytics, Planner, Stream, Flow, StaffHub, and more…


IT SecuritySolutionsNIST’s CyberSecurity Framework (CSF)


O365 – Functionality and Features

+EMS E5

Azure AD Basic:




MDM for O365


• Selective wipe


RMS for O365



Activity Logs

















Intune



• PC management





• Voice

• Conferencing

Power BI


Compliance




+EMS E3



IT SecuritySolutionsWhiteboard

Conditions

Actions

Exceptions

8


CollaborationSolutionsPowerApps


O365 – E3 Features / Security

+EMS E5

Azure AD Basic:




MDM for O365


• Selective wipe


RMS for O365



Activity Logs

















Intune



• PC management





• Voice

• Conferencing

Power BI


Compliance




+EMS E3


— Identity and access management for employees, partners, and customers —

Conditional

Access

Multi-Factor

Authentication

Addition of

custom cloud

apps

Remote Access

to on-premises

apps

Privileged

Identity

Management

Dynamic GroupsIdentity

Protection

Azure AD DSOffice 365 App

Launcher

Group-Based

Licensing

Access

Panel/MyApps

Azure AD

Connect

Connect Health

Provisioning-

Deprovisioning

Azure AD Join

Self-Service

capabilities

MDM-auto

enrollment /

Enterprise State

Roaming

Security

Reporting

Access ReviewsHR App

Integration

B2B

collaboration

Azure AD

B2C

SSO to SaaS

Microsoft

Authenticator -

Password-less

Access

John Doe

lllllll

Azure AD

Connect

On-premises /Private cloud

Microsoft Azure Active Directory

I want to provide my employees

access to every app from any

location and any device

Hybrid made easy

1 Identity

Thousands of apps

Require MFA

Allow access

Deny access

Force password reset******

Limit access

Controls

On-premises apps

Web apps

Users

Devices

Location

Apps

Conditions

Machine

learning

Policies

Real timeEvaluationEngine

SessionRisk

3

10TB

Effectivepolicy

Azure AD MFA

Require MFA

Allow access

Deny access

Force password reset******

Limit access

Controls

Users

Devices

Location

Apps

Conditions

Machine

learning

Policies

Real timeEvaluationEngine

SessionRisk

3

10TB

Effectivepolicy


IT SecuritySolutionsAudit Walk-Thru

Category Feature Exchange ActiveSync

MDM for Office 365

Microsoft Intune(cloud only)

Intune + ConfigMgr (hybrid)

Devi

ce

config

ura

tio

n Inventory mobile devices that access corporate applications ● ● ● ●

Remote factory reset (full device wipe) ● ● ● ●

Mobile device configuration settings (PIN length, PIN required, lock time, etc.) ● ● ● ●

Self-service password reset (Office 365 cloud only users) ● ● ● ●

Off

ice 3

65

Provides reporting on devices that do not meet IT policy ● ● ●

Group-based policies and reporting (ability to use groups for targeted device configuration) ● ● ●

Root and jailbreak detection ● ● ●Remove Office 365 app data from mobile devices while leaving personal data and apps intact (selective

wipe) ● ● ●

Prevent access to corporate email and documents based upon device enrollment and compliance

policies ● ● ●

Pre

miu

m

m

ob

ile d

evi

ce &

ap

p m

anag

em

ent

Self-service Company Portal for users to enroll their own devices and install corporate apps ● ●

App deployment (Windows Phone, iOS, Android) ● ●

Deploy certificates, VPN profiles (including app-specific profiles), email profiles, and Wi-Fi profiles ● ●Prevent cut/copy/paste/save as of data from corporate apps to personal apps (mobile application

management) ● ●

Secure content viewing via Managed Browser, PDF Viewer, Image Viewer, and AV Player apps for Intune ● ●

Remote device lock via self-service Company Portal and via admin console ● ●

PC

m

anag

em

ent

Client PC management (e.g. Windows 8.1, inventory, antimalware, patch, policies, etc.) ● ●

PC software management ● ●Comprehensive PC management (e.g. Group Policy, login scripts, BitLocker management, virtual desktop

and power management, custom reporting, etc.) ●

Windows Server/Linux/UNIX/Mac OS X support ●

OS deployment and imaging ●


IT SecuritySolutionsMDM for Office 365

User

Policy EnforcementSelective Wipe


IT SecuritySolutionsRights Management Services (RMS)

Data protection at rest



Data Protection in motion Data Protection in motion

Information can be protected with RMS at rest or in motion



O365 – E5 Features / Security

+EMS E5

Azure AD Basic:




MDM for O365


• Selective wipe


RMS for O365



Activity Logs

















Intune



• PC management





• Voice

• Conferencing

Power BI


Compliance




+EMS E3



Anti-Malware:• SafeLinks

• SafeAttachments

Anti-Phishing:• Anti-Impersonation - Personal

• Anti-Impersonation - Domain

4) ATP IT SecuritySolutions

Safe

Exchange Online Protection

Links

RecipientSafe Links rewrite

Unsafe

Attachment

Safe Attachments detonation chamber (sandbox)

Sender


IT SecuritySolutionsTechnology - Limit Impersonators! IT SecuritySolutions


Overall Posture

Recommendations

One-time Enable Advanced Security Management Console

One-time Enable MFA for all global admins

One-time Enable mailbox auditing for all users

Weekly Review signs-ins after multiple failures reports

Weekly Review sign-ins from unknown sources report

Weekly Review signs-ins from multiple geographies report

Weekly Review role changes

Weekly Review mailbox forwarding rules

Weekly Review mailbox access by non-owners report

Weekly Review malware detections report

Weekly Review sign-in devices report

Weekly O365 Security Check

❑ Mailbox Auditing❑ Inbox Forwarding❑ Mailbox Retention

❑ Office 365 Domains❑ Office 365 Settings❑ MFA Phone Numbers

❑ Foreign Mailbox Logons❑ Old / Unused Mailboxes❑ Roles assigned


IT SecuritySolutions

Compliance Walk-Thru

https://ServiceTrust.Microsoft.com

https://servicetrust.microsoft.com/



Offers:

https://www.peters.com/phishing-test-free-trial/

https://www.peters.com/security-audit-free-trial/

https://www.peters.com/phishing-test-free-trial/

https://www.peters.com/security-audit-free-trial/



Reminder – Free XBOX Raffle

http://www.peters.com/events http://www.peters.com/blog/

Events, Webinars & Blogs

http://www.peters.com/events

http://www.peters.com/blog/

1801 S. Meyers Road, Suite 120Oakbrook Terrace, IL 60181

(630) 832-0075

Thank you!


Bruce Ward

[email protected]

mailto:[email protected]

Office 365: Modern Workplace - Peters & Associates...Office 365: Modern Workplace November 8, 2018...

Documents

Transcript of Office 365: Modern Workplace - Peters & Associates...Office 365: Modern Workplace November 8, 2018...