Security and Compliance for Microsoft Teams Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Presents Security and Compliance for Microsoft Teams 8/April/2018 Thet Naing Team Lead – Unified Communication. thetnaing@thetnaing.com Microsoft Teams Users Group Singapore Good afternoon everyone © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Office 365 Security and Compliance Center Skype for Business Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Office 365 Security and Compliance Center 11/8/2018 3:10 AM One-stop comprehensive portal for protecting your data in Office 365. Use the Office 365 Security & Compliance Center to manage compliance for all of your organization’s data across Office 365. Manage compliance across Office 365, Exchange Online, and SharePoint Online. This new management interface represents our evolving compliance offering, which will eventually span all Office 365 compliance-related features and help you meet your legal, regulatory, and organizational compliance requirements. Office 365 takes security and compliance to the next level by helping you control data security and lower compliance costs and risks. Easily discover, identify and reproduce relevant data to actionable insights. Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore It’s increasing important to be compliance with ever evolving legal, and regulatory requirements. SCC is a comprehensive platform to preserve, control and discover ESI in Office365 extending from OneDrive to Exchange Online, Group mailboxes to SharePoint online to Microsoft SFB and Teams quickly and easily. © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Office 365 Security and Compliance Center Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Office 365 Security and Compliance Center Data Governance Microsoft Teams Users Group Singapore Electronic data in your organization is exploding and is more complex than ever. As your data increases, so do the demands on you organization to be compliant. You’re required by legal and regulatory requirements to keep and protect what’s important and to quickly find what’s relevant. Data Governance is keeping that’s required and getting rid of them when it’s no longer necessary. Microsoft Teams Users Group Singapore Getting the data compliance © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Office 365 In-place Compliance Solutions Skype for Business Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Office 365 In-place Compliance Solutions Meeting organizational data compliance needs 11/8/2018 3:10 AM Organization needs Preserve vital data Find relevant data Monitor activity Data Governance Import, store, preserve and expire data eDiscovery Quickly identify the most relevant data Auditing Monitor and investigate actions taken on data How Microsoft helps organizational compliance requirements from preserving data, discovering preserved data quickly with relevancy and monitoring key data interests of the company – end to end security and compliance solution. Not only for the data the currently residing in the Office365, it’s a legacy data that you need to preserve and makes compliance with Migrate on-premises and non-Office 365 data The data import service for Office 365 makes it easy to move on-premises email and files into Exchange Online, SharePoint Online, and OneDrive for Business. Intelligent capabilities built into this solution let you filter data so you only import what you need into Office 365. Office 365 Data Governance solutions use connectors from our partners to import from a wide array of data sources. Security & Compliance Center Manage compliance for all your data across Office 365 © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Office 365 eDiscovery Find what’s relevant and reduce risk with intelligent eDiscovery in Office 365 Microsoft Teams Users Group Singapore Streamlined data preservation and legal hold management for each case Simplified eDiscovery Microsoft Teams Users Group Singapore Organize unstructured data with machine learning to reduce volume of data for review and reduce cost Actionable Intelligence eDiscovery Manager   Members of this role group can create and manage eDiscovery cases. They can add and remove members to a case, place content locations on hold, create and edit Content Searches associated with a case, export the results of a Content Search, and prepare search results for analysis A hold on the mailboxes and OneDrive for Business, SharePoint and Groups. Reduce your eDiscovery costs – Advanced eDiscovery streamlines and speeds up the document review process by identifying redundant information with features like Near-duplicates detection and Email Thread analysis. he Relevance feature applies predictive coding technology to identify relevant documents. enables you to focus on key documents, make quick yet informed decisions on case strategy n reduce cost. Case workspace with roles, data permissions, and built in auditing enables collaboration across the organization Efficient Collaboration © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Microsoft Teams Users Group Singapore Overview of the Retention Policy Comply proactively with industry regulations and internal policies that require you to retain content for a minimum period of time – for example, the Sarbanes-Oxley Act might require you to retain certain types of content for seven years. Reduce your risk in the event of litigation or a security breach by permanently deleting old content that you’re no longer required to keep. A retention policy in Office 365 can help you achieve all of these goals. Managing content commonly requires two actions: Retaining content so that it can’t be permanently deleted before the end of the retention period. Deleting content permanently at the end of the retention period. Microsoft Teams Users Group Singapore © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore How Retention Policy is different from Litigation Hold and In-Place Hold Litigation Hold and In-Place Hold When Litigation Hold is enabled, all mailbox items are placed on hold. In contrast, you can use an In-Place Hold to preserve only those items that meet that the criteria of a search query that you define by using the In-Place eDiscovery tool. You can place multiple In-Place Holds on a mailbox, but Litigation Hold is either enabled or disabled for a mailbox Retention A copy of the original item is saved to the Recoverable Items folder before the change is committed. This happens for each subsequent change. Not entire mailbox like Litigation Hold or In-Place Hold through e-Discovery. Retaining content so that it can’t be permanently deleted before the end of the retention period. Deleting content permanently at the end of the retention period. Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore How does a Retention Policy works? When a person attempts to change certain properties of a mailbox item — such as the subject, body, attachments, senders and recipients, or date sent or received for a message — a copy of the original item is saved to the Recoverable Items folder before the change is committed. This happens for each subsequent change. At the end of the retention period, copies in the Recoverable Items folder are permanently deleted. Consideration for Retention Policy The mailbox requires Exchange Online Plan 2 license. If Exchange Online Plan 1 license, have to assign it a separate Exchange Online Archiving license to include it in a retention policy. Can exclude certain type of Exchange items from Retention Policy, for example, voice mail. Retention policy will either protect data or delete unnecessary items residing in "Recover Items Mailbox" but it has a soft quota of 20GB and hard quota of 30 GB and it's deducted by from the primary mailbox quota A retention policy or label cannot permanently delete any content that’s on hold for eDiscovery.  Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Workflow of Teams data to both Exchange and SharePoint It’s important to understand that the Teams chats are also stored in Azure Chat Service forever in additional to Groups and individual mailboxes Use Retention Policy to complete delete the chat messages from Azure Chat Service. Microsoft Teams Users Group Singapore Security and Compliance © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Where Channels Chat Files stored in SharePoint Online? Where a file shared in the Channels is stored ? It is stored in respective Teams Channels’ folders. Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Security and Compliance © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Microsoft Security and Compliance for Teams data Retention 1-to-1 Chat files shared stored in OneDrive Online Microsoft Teams Users Group Singapore Where the files shared 1-to-1 Teams Chat stored? In a folder named “Microsoft Teams Chat Files” of the sender in his OneDrive for Business Microsoft Teams Users Group Singapore Note: The files shared by peer team users will be stored at their OneDrive for Business under Files - not yours – you only see what you sent in this Folder. Security and Compliance © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Microsoft Security and Compliance for Teams data Retention Microsoft Security and Compliance for Teams data Retention Where the items stored when user modifies and deletes contents? OneDrive and SharePoint Site A retention policy is applied at the level of a site. When you include a SharePoint site or OneDrive account in a retention policy, a Preservation Hold library is created. If a person attempts to change or delete content in a site that’s subject to a retention policy, first the policy checks whether the content’s been changed since the policy was applied. If this is the first change since the policy was applied, the retention policy copies the content to the Preservation Hold library, and then allows the person to change or delete the original content. Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Security and Compliance © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention How does the Retention Policy delete after a retention period is reached? Modified and Deleted Content During the Retention period, if there is a change in the content, the original content is copied to the “Reservation Hold Library”. A timer job run periodically and delete the contents once the retention period is ended. Not Modified/Not Deleted Content Once the retention period is expired, it’s moved to First-Stage Recycle Bin or if it was purged, it went to Second-Stage Recycle Bin during 93 days. Important to note that content in Recycle Bin cannot be searched by eDiscovery search as it’s not indexed. Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Where the items stored when use modifies and deletes contents Recoverable Items folder Each user mailbox is divided into two subtrees: the IPM (interpersonal messaging) subtree, which contains the normal, visible folders such as Inbox, Calendar, and Sent Items and Non-IPM subtree, which contains internal data, preferences, and other operational data about the mailbox. The Recoverable Items folder resides in the non-IPM subtree of each mailbox. This subtree isn't visible to users using Outlook, Outlook on the web, or other email clients. Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Microsoft Teams Users Group Singapore Where the individual and channel chats are stored? A hidden folder in a user’s mailbox. Notice that the Sub-Tree is under IPM_SUBTREE – which is visible structure tree Team Chat is under Conversation History folder but it’s hidden and can be unhidden by a MFCMAPI client. Microsoft Teams Users Group Singapore Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Retaining content for a specific period of Time With a retention policy, you can retain content indefinitely or for a specific number of days, months, or years. How long content is retained is calculated from the age of how long content is retained is calculated from the age of the content, not from when the retention policy is applied the content. Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Microsoft Teams Users Group Singapore Data Locations Please note that you can apply a different retention policy for 1:1 chat and channel chats. Note: If you are in Hybrid setup, the Teams Location is Not available for Retention. Only SFB Location. Limitation Note: Teams requires a separate retention policy even you applied for the whole organization-wide policy. Hybrid Tenant Pure Cloud Tenant Microsoft Teams Users Group Singapore Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Microsoft Teams Users Group Singapore Apply Retention based on specific words, for example; Credit Card info, Account number, Date of Birth, etc. Microsoft Teams Users Group Singapore Security and Compliance Limitation Note: Teams currently doesn’t support Advanced Retention Policy yet. es © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Microsoft Teams Users Group Singapore Apply Retention based on industrial standards Microsoft Teams Users Group Singapore Retain content that contains sensitive information You can also apply a retention policy only to content that contains specific types of sensitive information. For example, you can choose to apply unique retention requirements only to content that contains personally identifiable information (PII) such as taxpayer identification numbers, social security numbers, or passport numbers. Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Office Security and Compliance center enables centralized policy management Microsoft Teams Users Group Singapore Non label based (naming, expiration, policy, guest access) Label based policies (retention, deletion) Microsoft Teams Users Group Singapore Azure Active Directory Azure AD is the master for single group identity: Owner, resources URL’s, membership More Published labels on a group appear on all workloads for a group Naming Policy applies to all workloads that support group creation experience Retention Label ----- Automatic and Manual © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Content Search Content Search eDiscovery tool in the Office 365 Security & Compliance Center to search for items such as email, documents, and instant messaging conversations in your Office 365 organization. Exchange Online mailboxes and public folders SharePoint Online and OneDrive for Business sites Skype for Business conversations Microsoft Teams Office 365 Groups Permission Requirement Must be a member of the eDiscovery Manager role group in the Security & Compliance Center. Microsoft Teams Users Group Singapore Microsoft Teams Users Group Singapore Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Microsoft Teams Users Group Singapore Search Contents – IM Conversation, Files Preview Search Results Searching particular Keywords from a user Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Microsoft Teams Users Group Singapore Searching for deleted IM Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Microsoft Teams Users Group Singapore Search Contents – IM Conversation, Files from a guest user and non-office365 mailbox users like Hybrid users. Note: Content search will NOT show the IM/contents from Guests and non-Office365 mailboxes like Hybrid users. Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Where deleted files are stored? Same name “Preservation Hold” but in different paths. Preservation Hold Library path for Team Site and for OneDrive for Business Files deleted from a Team Site’s Shared Documents will be appeared in "Preservation Hold Library" under a specific Teams Site. https://thetnaing.sharepoint.com/sites/SecurityandCompliance/PreservationHoldLibrary/Forms/AllItems.aspx How about the files deleted from OneDrive? The files you deleted from OneDrive will also be appeared under "Preservation Hold Library" but for OneDrive for Business, the path is as follow. https://thetnaing-my.sharepoint.com/personal/thetnaing_radiancecomms_com/PreservationHoldLibrary/Forms/AllItems.aspx Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Demos Searching all contents Search by keywords Search by Doc type (remember, doc stored in sites or ODB) Audit Log search Microsoft Teams Users Group Singapore Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Security and Compliance for Teams data Retention Skype for Business Microsoft Teams Users Group Singapore 11/8/2018 3:10 AM Microsoft Teams Users Group Singapore Microsoft Security and Compliance for Teams data Retention Q&A Microsoft Teams Users Group Singapore Security and Compliance Core Values © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.