Regulatory and Compliance Headaches?
Are regulatory and compliance requirements a source of frustration, stress, or uncertainty in your organization? Did you know that Microsoft has a product called Microsoft Compliance Manager (MSCM) that can help alleviate the stress, uncertainty and most importantly risk to your organization? The wait is over! Be a part of the movement that is MSCM and help guide its evolution. Your direct input and feedback is valuable to our teams here at Microsoft. A simple 10-minute survey, click here, can get you started down the road to better regulatory and compliance preparedness! It’s free for 90 days to all E3 and E5 customers, so what are you waiting for! Should you have any questions please reach out to mipcompcxe@microsoft.com. Also don’t forget to tell your teams about the recently published Microsoft Compliance Manager Ninja Training and the free 90 day trial for all customers!Watch: 20 On Demand Sessions on Cloud & Enterprise Security
Watch these On Demand sessions from Microsoft Ignite and join the conversation in the community! 1. Secure and manage your digital transformation Security in a cloud-first, mobile-first world calls for a new approach. Data is accessed, used, and shared on-prem and in the cloud – erasing the traditional security boundaries. 2. Assess security posture of your datacenter in 1 hour using Operations Management Suite Security doesn’t have to be complex, even when your environment is, and securing your organization doesn’t have to take months. 3. Get control over your datacenter with security monitoring using Operations Management Suite Leverage the capabilities of Microsoft Operations Management Suite to provide a comprehensive security solution for on-premises and cloud environments. 4. Use Azure Security Center to prevent, detect, and respond to threats Microsoft Azure Security Center helps organizations prevent, detect, and respond to threats by providing increased visibility into the security of cloud workloads and advanced analytics to identify attacks that might otherwise go undetected. 5. Get ahead of cyber attacks with Enterprise Mobility + Security The transition to mobility and the cloud has made employee interactions with other users, devices, apps, and data increasingly more complex. 6. Manage and troubleshoot infrastructure and application issues using Operations Management Suite Learn how Microsoft Operations Management suite – through advanced log analytics – can help you collect any type of machine data, correlate and visualize data in rich dashboards. 7. Meet Azure Information Protection customers and learn about their success stories With the goal of better securing company data, these companies started using Microsoft Azure Information Protection to achieve a comprehensive yet simple solution for Information Protection. 8. Mitigate datacenter security threats with guided investigation using Operations Management Suite A demo of the security capabilities in Microsoft Operations Management Suite that enable you to identify security threats and attacks. 9. Favor the bold: deploying and managing rock-solid Microsoft Azure Security Solutions You’ve finally taken the leap to the Microsoft cloud, so what’s next? 10. Win the IT security battle: automate password changes, privileged access & Minimize Cyber Losses Having second thoughts about the effectiveness of firewalls and manually changing passwords on your servers to lock out intruders? 11. Collaborate securely using Azure Information Protection You need to collaborate with people within and outside of your organization but you need to do that in a secure manner. 12. Adopt a comprehensive identity-driven solution for protecting and sharing data securely Microsoft Azure Information Protection helps you safeguard your data throughout the complete data lifecycle. 13. Ensure comprehensive protection of your data with Azure Information Protection Microsoft Azure Information Protection helps protect your data at every stage of data lifecycle. 14. Learn how classification, labeling, and protection delivers persistent data protection In order to implement an information protection solution, you first need to understand what kind of information you need to protect; identifying your most critical assets is the first step in the data protection journey. 15. Send secure email to anyone with the power of Microsoft Office 365 and Azure Information Protection Just about every organization has the need to communicate sensitive information through email within your org, with your business partners or with your customers. 16. Learn how to deploy and manage Microsoft Cloud App Security Microsoft Cloud App Security is our new cloud-delivered service providing deeper visibility, stronger controls and enhanced protection for your cloud apps. 17. Witness cloud attacks illustrated: insights from Operations Management Suite and Security With the shift toward cloud computing, attackers have been fast to respond - adapting their modus operandi to target enterprise data, applications, and infrastructure in the cloud. 18. Get visibility, data control and threat protection with Microsoft Cloud App Security Learn how Microsoft Cloud App Security takes the visibility, control and protection you have come to expect on-premises and extends them to your cloud apps. 19. Learn from experience: Hear first-hand how Maersk is securing their Azure migration Are you a CISO in cloud or security operations and architecture? The decisions you make when migrating and securing workloads at scale in Azure have a large impact on your business. 20. Gain customer trust through transparency with Service Assurance Want to perform risk assessment / due diligence on Microsoft Office 365, Microsoft Azure, and Microsoft Dynamics CRM?Watch: 20 On Demand Sessions on Office 365 Security
Watch these On Demand sessions from Microsoft Ignite and join the conversation in the community! 1. Protect your sensitive information with Office 365 Data Loss Prevention Microsoft Office 365 Data Loss Prevention (DLP) enables you to detect, protect and monitor sensitive information in your organization. 2. Implement Microsoft Exchange Online Protection Microsoft Exchange Online Protection (EOP) is the mail filtering component for Microsoft Office 365 mailboxes, but can also be used to protect on-premises mailboxes. 3. Secure Office 365 like a cybersecurity pro—assessing risk and implementing controls Based on proven experience, our top Office 365 cybersecurity consultants provide coaching on how to assess risk and implement the rich set of security, compliance, and information protection controls. 4. Get an edge over attackers – what you need to know about email threats Organizations are being targeted with increasingly sophisticated attacks. Learn about the advancements in threat protection for customers. 5. Keep calm and automate: How we secure the Office 365 service Moving to Microsoft Office 365 means moving to a service that invests heavily in infrastructure security and data privacy, but how? 6. Learn about Office 365 Secure Score: actionable security analytics Microsoft Office 365 Secure Score is a new data service that Microsoft is building to help our tenants understand the extent to which they have adopted robust security configurations, behaviors, and best practices. 7. Protect your sensitive information with Office 365 Data Loss Prevention Microsoft Office 365 Data Loss Prevention (DLP) enables you to detect, protect and monitor sensitive information in your organization. 8. Take control of your security and compliance with Office 365 We discuss current customer challenges and needs managing security and compliance policies across their organization and how we are tackling those head on. 9. Challenge cloud encryption myths and learn about Office 365 BYOK plans Encryption and the term "BYOK" have surged to the forefront of cloud service evaluations. Microsoft Office 365 provides several encryption options to meet customer needs for information protection and compliance. 10. Address your CXO's top five cloud security concerns You've moved your data to the cloud. Now your leadership wants to know what the risks are and what you are going to do to keep it safe. 11. Gain visibility and control with Office 365 Advanced Security Management Learn how Microsoft Office 365 Advanced Security Management helps you gain enhanced visibility and control into your Office 365. 12. Learn about advancements in Office 365 Advanced Threat Protection Amid continuous growth of security attacks on organizations Microsoft delivered the most advanced capabilities empowering security teams of large organizations and IT generalists to defend against Advanced Threats. 13. Understand how Microsoft protects you against Spoof, Phish, Malware, and Spam emails Get actionable insights for InfoSec as well as Mail Admins - into How to harden your protection against undesirable emails by setting up the right configurations and email routing. 14. Building security and compliance solutions with the O365 Activity API - a Microsoft IT case study Learn about using the Office 365 security and compliance APIs to integrate with or build solutions that provide security and compliance monitoring, alerting, and reporting. 15. Own your data with next generation access control technology in Office 365 In a true SAAS cloud there is always a concern about how your data is secured in the cloud. 16. Customize and tune Microsoft Office 365 Data Loss Prevention Learn how to better secure your sensitive information by tuning DLP for your organization’s needs as we show you how to create custom policies and reports. 17. Gain visibility and control with Office 365 Advanced Security Management Learn how Microsoft Office 365 Advanced Security Management can help you gain enhanced visibility and control into your Office 365. 18. Learn how Office 365 security and compliance leverages intelligence in a cloud first world As compliance requirements and security exposure continues to increase, we see a big role for insights from cloud intelligence assisting our customers. 19. Reduce costs and challenges with Office 365 eDiscovery and Analytics In today's high volume data environment, the eDiscovery process could involve sorting through millions of pieces of data. 20. Take control of your data with intelligent data governance in Office 365 With the volume of electronic data exponentially increasing, discipline in the data lifecycle, including intelligent Data Governance, is critical.
Configure Bitlocker on TCG Opal 2 SSD
Is it possible to configure Windows 10 Pro BitLocker to use the hardware encryption built into a TCG Opal 2.0 SSD and a startup PIN? I have previously setup software BitLocker with a startup PIN and hardware BitLocker without a PIN. To configure the two together I installed a new 870 Evo SSD in a separate computer, used Samsung Magician to set SSD security to "security ready to be enabled", moved the SSD to the target computer and performed a fresh Windows 10 pro installation. I then enabled the local computer policy BitLocker setting "Configure use of hardware-based encryption for operating system drives" to prevent software-based encryption and enabled the setting "Require additional authentication at startup" to allow TPM + PIN. However, on beginning BitLocker, an error message appeared stating software encryption is not available because of the registry setting. After reversing the BitLocker hardware setting, software BitLocker with TPM and PIN proceeded as usual. Is it possible to have BitLocker hardware encryption with a PIN?
Using/ Installing ATP with local Active Directory
Hey guys, I would like to use ATP from the Office 365 Business License but the company is using a local AD. Is there a way to use ATP with a local active directory? Found this but I am not quite sure if this would solve the problem. https://docs.microsoft.com/mt-mt/windows/security/threat-protection/microsoft-defender-atp/onboard-offline-machines Some Online sources also suggested to include /sync the local AD with the Azure AD, but it is just one user who would use the ATP. I Also found ATA and Windows Defender but as ATP is included i would prefere that. I am also not quite sure how all the Products stand in connection whith each other. Did anybody did this before or has a clue what the best solution would be?
Unified Audit Log is not masking user ids
Hello Everyone, I see that Unified Audit Logs are not masking the User IDs in the reports that i am generating even though i have configured to "Display anonymous identifiers instead of user, group or site names in all reports" in Services And AddIns section of O365 Admin Center. May i know if this setting is applicable for reports that we see in the Unified Audit Logs or not? https://protection.office.com/unifiedauditlog Because, I see masked user ids only in the below AdminPortal reports - https://admin.microsoft.com/AdminPortal/Home#/reportsUsage/SharePointActivityV1 Thanks & Regards, Bhanu
Application access / permissions trends and best practices
Hi, Have a question around trends/best practices and application access. Back in the "old" days application access was controlled from within the app, whereby roles may have been defined within the application, individual accounts were created within the app, and people could use the app accordingly. Then came Directory Services, and if the application was, for example, AD integrated, then that is how access to the app was controlled - use AD accounts / AD Groups. Now we have the Cloud. So is the new trend to use, for example, Azure Groups to control access to "modern" apps - with all the benefits of Azure Groups (e.g. dynamic membership, centralized admin, easier auditing, etc etc etc). While writing this question out, I think I have answered myself (somewhat) - but keen to hear people views on the matter. Thank you, SKMIP and Compliance list of resources
Hello all, Here's a list of resources to help you navigate through information as it flows. We use all these resources to announce new product features as well as upcoming webinars and the latest news. Complete the MIP&C engagement questionnaire Be familiar with the official MIP&C documentation Review the posts available on the MIP&C blog Start a conversation with us on Tech Community Sign up as a member of the Tech Community Sign up to our forum on Yammer (product announcements and community support) Product feedback via UserVoice Check out the sample files and documents on GitHub Follow us on Twitter @MipNewsHappy to announce General Availability of our new Insider Risk and Communication Compliance solution
Read ALL about it here: Insider Risk Management GA Communication Compliance GA Learn more about what’s new with Insider Risk Management and how to get started and configure policies in your tenant in this supporting documentation. Also learn more about what’s new with Communication Compliance and how to configure policies in your tenant in this supporting documentation. We look forward to hearing your feedback.
