Planning CAS Configuration Settings

%3CLINGO-SUB%20id%3D%22lingo-sub-375700%22%20slang%3D%22en-US%22%3EPlanning%20CAS%20Configuration%20Settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-375700%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20anyone%20have%20any%20suggestions%20about%20how%20to%20document%20the%20configuration%20settings%20that%20should%20be%20implemented%20by%20CAS%20admins%3F%20I'm%20thinking%20about%20a%20checklist%20or%20questionnaire%20to%20help%20gather%20requirements%20from%20various%20stakeholders.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlong%20the%20same%20lines%2C%20how%20can%20we%20document%20the%20implemented%20settings%20and%20be%20notified%20about%20any%20changes.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-375700%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-375989%22%20slang%3D%22en-US%22%3ERe%3A%20Planning%20CAS%20Configuration%20Settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-375989%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I%20am%20also%20looking%20for%20requirement%20gathering%20templet%20to%20implement%20MCAS%20for%20my%20customer.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-375821%22%20slang%3D%22en-US%22%3ERe%3A%20Planning%20CAS%20Configuration%20Settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-375821%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F76512%22%20target%3D%22_blank%22%3E%40Dima%20Donhin%3C%2FA%3EI'm%20a%20consultant%20and%20I'm%20thinking%20that%20many%20CAS%20Admins%20may%20not%20be%20the%20ultimate%20decision%20makers%20about%20which%20policies%20should%20be%20implemented%20and%20how%20the%20configuration%20options%20should%20be%20set.%20It%20could%20be%20helpful%20to%20have%20a%20worksheet%20to%20gather%20and%20document%20requirements%20from%20the%20various%20stakeholders%20so%20that%20the%20admins%20who%20are%20configuring%20the%20settings%20have%20something%20to%20refer%20to%20instead%20of%20having%20to%20make%20all%20of%20the%20decisions%20on%20their%20own.%3C%2FP%3E%3CP%3EI've%20done%20this%20type%20of%20thing%20with%20SharePoint%20and%20Teams%2C%20and%20it%20has%20been%20successful.%3C%2FP%3E%3CP%3EI'm%20also%20concerned%20about%20long%20term%20change%20management%20of%20the%20CAS%20configuration.%20If%20certain%20policies%20have%20specific%20requirements%2C%20how%20can%20we%20ensure%20that%20the%20settings%20are%20not%20changed%20by%20new%20admins%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-375761%22%20slang%3D%22en-US%22%3ERe%3A%20Planning%20CAS%20Configuration%20Settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-375761%22%20slang%3D%22en-US%22%3EHi%20Dean%2C%3CBR%20%2F%3ECould%20you%20elaborate%20on%20the%20requirement%20here%3F%3CBR%20%2F%3EWe%20have%20the%20getting%20started%20guide%20in%20our%20docs%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fgetting-started-with-cloud-app-security%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fgetting-started-with-cloud-app-security%3C%2FA%3E%20which%20covers%20the%20initial%20configuration%20that%20should%20be%20done%20for%20a%20new%20tenant.%3CBR%20%2F%3E%3CBR%20%2F%3ERegards%2C%3CBR%20%2F%3EDima%3C%2FLINGO-BODY%3E
Highlighted
Respected Contributor

Does anyone have any suggestions about how to document the configuration settings that should be implemented by CAS admins? I'm thinking about a checklist or questionnaire to help gather requirements from various stakeholders.

 

Along the same lines, how can we document the implemented settings and be notified about any changes.

3 Replies
Highlighted
Hi Dean,
Could you elaborate on the requirement here?
We have the getting started guide in our docs: https://docs.microsoft.com/en-us/cloud-app-security/getting-started-with-cloud-app-security which covers the initial configuration that should be done for a new tenant.

Regards,
Dima
Highlighted

@Dima DonhinI'm a consultant and I'm thinking that many CAS Admins may not be the ultimate decision makers about which policies should be implemented and how the configuration options should be set. It could be helpful to have a worksheet to gather and document requirements from the various stakeholders so that the admins who are configuring the settings have something to refer to instead of having to make all of the decisions on their own.

I've done this type of thing with SharePoint and Teams, and it has been successful.

I'm also concerned about long term change management of the CAS configuration. If certain policies have specific requirements, how can we ensure that the settings are not changed by new admins?

Highlighted

Hi, I am also looking for requirement gathering templet to implement MCAS for my customer.