Microsoft Information Protection: Your Security and Compliance Framework

Editor's Notes

• #9: This is the world that many of our customers are moving to in their digital transformation. And when it comes to being compliant in the intelligent cloud, intelligent edge era, we really have to consider what is our digital estate? How do we think about where our most sensitive data is? How do we protect it? How do we find what’s most relevant? This is a little bit different now than it was 5 or 10 years ago. IT organizations now find themselves responsible for finding and protecting data across a wide spectrum of devices and environments. For example, user-owned mobile devices that access corporate data. It also includes systems and devices that your partners and customers use to access your information. And any one of these situations can be a point of compliance risk for your overall estate. That changes the game when it comes to compliance: You can no longer draw perimeters around your organization. This is the challenge that we all struggle with in compliance. And it's a challenge we at Microsoft think that we can uniquely fix.
• #12: 11
• #13: EMS Overview
• #16: 15
• #19: 18
• #24: This slide is a combination of a framework on thinking about this + some practical advice. You apply this framework when thinking through how to apply policy to each label as part of your overall protection strategy. For example - - The data I am wanting to protect may reside in OneDrive. So there is 1 container. If I am using the sync client it may also exist in the device as 2nd container. You can decide to apply a sensor on the device that flags what type of labeled content exists on it. You may also enforce it to remain work content. In the OneDrive container you may also decide you don’t want certain types of content uploaded there. You can create that gate through DLP policy against the service. If container protections aren’t enough for that content type. Think about automatic encryption of the content with certain labels. Egress points are a great place to leverage label policies.
• #25: Once data is understood, labeled and classified, the benefits unlocked can improve security and compliance outcomes. Services - Block or remove emails and attachments with sensitive labels (egress point) Exchange transport rules for Exchange Online mailboxes MCAS Content Inspection for AIP protected files stored in SPO or OneDrive Office Message Encryption with EXO Devices - Encrypt files with sensitivity labels (egress point) MDATP on Windows 10 endpoints, apply Protection Policy based on documents tagged with sensitivity label Intelligence - Auto-Classify content based on sensitivity SCC ML Classifier model delivered through compliance solutions (such as auto-classification and DLP) Apply policy and enforcement across all major egress points
• #28: Microsoft 365 is uniquely positioned to help you meet your compliance obligations. Our vision is centered around the idea of “built-in” compliance, providing integrated, intelligent tools for our customers to reduce risks. Our capabilities allow you to better assess your risk, govern and protect sensitive and business critical data, and respond to regulatory requests with intelligence and efficiency. Let’s dive into these areas and discuss the various capabilities we have in more detail.
• #33: New Data Subject Request management within Office 365 Security & Compliance Center
• #37: Key Messages: Find the information you need when you need it effectively and efficiently. With more and more information stored in the cloud, ability to drill into, discover, reason over and respond to requests for that data are more important than ever. Microsoft 365 provides a unique approach to address your discovery needs. Microsoft 365 provides provide rich built-in, suite wide search and discovery tools to reduce your risk and exposure of multiple copies of data in multiple places. Identify custodians or shared locations, search based on conditions and keywords, and refine content with advanced analytics to de-duplicate, reduce threads and further minimize the responsive data set. With a new update to Advanced eDiscovery, you can now review and redact content prior to export to ensure that only most relevant data is being shared, and that any business confidential pieces of that data are redacted in advance of any response. This toolset can help reduce the costs of eDiscovery in your organization significantly. In fact, at Microsoft, while average data per custodian has grown 20x, the cost per custodian of eDiscovery has been reduced 85% with the use of the built-in capabilities. And these tools are not only relevant to litigation but to a host of other scenarios as well including components of GDPR such as Data Subject Requests, investigations and internal policies, early case assessments and others. Key capabilities of our solution to mention if appropriate: Granular permissions Case management Put custodial and shared locations on hold and send communications to custodians (Coming soon) Tenant wide Search Refine with conditions and advanced analytics (Equivio capabilities) Search & tag case documents for follow up Export prepared load file Key Messages:
• #41: 40
• #46: 45
• #51: 50