Office 365 Security Best Practices
•Download as PPTX, PDF•
3 likes•1,834 views
Community IT CTO Matthew Eshleman reviews security fundamentals in Office 365. Small and medium sized nonprofits are in a great position to take advantage of the native security tools offered in Office 365.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Office 365 Security Best Practices
Similar to Office 365 Security Best Practices (20)
More from Community IT Innovators
More from Community IT Innovators (20)
Recently uploaded
Recently uploaded (20)
Office 365 Security Best Practices
- 1. Office 365 Security Best Practices Webinar Series Sept 2018
- 2. About Community IT Advancing mission through the effective use of technology. 100% Employee Owned
- 5. Agenda • Current Threat Landscape • Office 365 Security Overview • Features & Licensing • Security Checklist with Office 365 • Accessing the Microsoft Security Graph
- 6. The current threat landscape
- 7. Office 365 is a target 30% 63% 58% Email Logins Files
- 8. Why are attacks so successful? 30% 63% 58%
- 9. Why are attacks so successful? 30% 63% 58%It only takes hackers 4 minutes to get in your network, but 99+ days for businesses to discover they’ve been breached.
- 11. Simple One solution Cloud platform simplifies deployment Reduces costs Eliminates costs for multiple third-party vendor solutions Reduces maintenance and management costs Aligns with business goals Security built into your productivity platform Don’t need to make trade-offs to justify security investment Protect business against risk-related costs Microsoft 365 Business Business savvy way to reduce risk
- 12. • Safeguard • Keep credentials safe • Limit use of credentials • Confirm identity with multi-factor authentication (MFA) • Prevent non-compliant devices from accessing system • Monitor • Audit data access • Review login locations • Respond quickly to detected threats Control who has access to business information 81% 75%
- 14. Feature
- 16. Feature Bundle (Subscription) License a la Carte (License)
- 17. Features Feature License Bundle Cloud MFA Included in Office 365 Part of all O365 subscriptions Granular MFA Requires Azure AD P1 Part of EM+S E3 Password Writeback Requires Azure AD P1 Part of EM+S E3 DLP Requires Exchange P2 Part of O365 E3 Azure Identity Protection Requires Azure AD P2 Part of EM+S E5 Email and File Encryption Requires Azure RMS Part of O365 E3 Cloud App Security Requires License Part of EM+S E5 or Cloud App SKU SSO Requires Azure AD P1 Part of EM+S E3 Manage Computers Intune Part of EM+S E3
- 18. Office 365 Licensing Recommended SKU's Per User Cost (charity pricing) Office 365 E3 (or Office 365 E1 + Office ProPlus Add-on) $4.50/mo ($0/mo + $3/mo) EM+S E3 (or EM+S E5) 50 free, $2.25/mo ($6/mo) Azure Sponsorship Subscription $5,000 annual credit Cloud App Security $1.20/mo
- 19. What am I missing? E1 + Office ProPlus + EM+S does not include • Information Protection • DLP for email • Unlimited email storage • Litigation hold https://technet.microsoft.com/en- us/library/office-365-plan-options.aspx
- 21. Security Checklist View Your Secure Score https://securescore.office.com Enable Auditing in https://protection.office.com Message Trace Get Signed up for EM+S https://www.microsoft.com/en- us/nonprofits/enterprise-mobility-security Get Signed up for Azure Sponsorship https://www.microsoft.com/en- us/nonprofits/azure Link Azure AD with PowerBi https://app.powerbi.com
- 22. SecureScore Establish security baseline Continuous monitoring and reporting to reduce risk Integrate data into compliance or cybersecurity apps to improve overall protections
- 24. Admin Security Checklist Have between 2-5 Global Admins Turn on MFA for Staff Complex Passwords for All •Personally Identifiable Information •Financial Information Enable DLP in Office 365 •DMARC, DKIM, SPF Secure Email Require Disk Encryption Review Audit data
- 25. End User Security Checklist Pick a strong password Chose unique passwords for each service •Most recent breaches we've seen are probably email/password combinations reused from previously compromised user account databases Be cautious when clicking •Learn the value of hovering over "friendly" link names •Watch for domain names that look legitimate at first glance, but don't actually match the real domain name of the destination you expect. Report suspicious activity to your IT Team
- 26. MFA Enrollment
- 27. MFA Login
- 28. Advanced Controls • Information Rights Management: Define policies for who can access data • Restrict access to OneDrive and Control Sync • Managed device access to organizational data • Configure Advanced Threat Analytics: Integrate on- prem with the cloud for unified management • Use Defender Advanced Threat Protection
- 29. Advanced Settings • Configure Monitoring in PowerBi • Azure Active Directory Logs
- 32. Links • https://nonprofit.microsoft.com/#/register • https://www.microsoft.com/en- us/nonprofits/enterprise-mobility-security • https://azure.microsoft.com/en- us/pricing/details/active-directory/ • TechSoup Digital Security https://techsoup.course.tc/catalog/track/digital -security
- 33. Upcoming Webinar Security Incident Response Wednesday October 17 4:00 – 5:00 PM EST
- 34. Questions?
Editor's Notes
- - What is your best guidance for balancing security, with reasonable policies that do not unreasonably impede team productivity?