Cloud Access Security Broker Lets Enterprises Enforce Security and Compliance in Office 365 Partner Logo “Skyhigh helps us securely enable high-impact cloud services like Office 365 while ensuring data security and compliance with HIPAA and HITECH.” – Mark Dunkerley, manager of messaging, mobile and video services, Adventist Health SITUATION As Adventist Health rolled out Microsoft Office 365 across its 45 campuses, it was looking to gain visibility into shadow cloud storage usage, especially file-sharing services, so it could get its employees to use Office 365. Adventist Health wanted to ensure that it remained compliant with Health Insurance Portability and Accountability Act regulations to protect patients’ sensitive personal health information from unauthorized access and sharing. COMPANY: Skyhigh Networks WEB SITE: www.skyhighnetworks.com LOCATION: Campbell, CA, USA ORG SIZE: 300 employees COMPANY PROFILE: Skyhigh Networks allows enterprises to safely adopt cloud services while meeting their security, compliance, and governance requirements. More than 500 enterprises including Aetna, DIRECTV, General Mills, HP, and Western Union use Skyhigh to gain visibility, manage threats, ensure compliance, and protect corporate data across shadow and sanctioned cloud services. SOLUTION With early access to Microsoft Office 365 APIs, Skyhigh built its Office 365 solution. Adventist Health migrated its on-premises Microsoft Exchange system to Exchange Online and deployed OneDrive across its 45 campuses because it offered massive productivity benefits. Adventist used Skyhigh for Shadow IT to discover all the shadow cloud services used by employees. It found more than 2,000 services, which included 90 file-sharing providers. Adventist Health used Skyhigh for Office 365 to enforce data loss prevention policies to scan documents uploaded to OneDrive. BENEFITS Adventist Health reduced data loss risk by adopting Microsoft OneDrive and coaching employees away from risky cloud services. Skyhigh for Office 365 enables on-premises and mobile access control policies based on parameters such as user, network, device.