4/9/2019 10:42 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Information Protection with Azure Information Protection 4/9/2019 10:42 PM BRK2085 Information Protection with Azure Information Protection © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What do we mean by “Information Protection”? 4/9/2019 10:42 PM What do we mean by “Information Protection”? © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft’s information protection solutions help you protect sensitive data throughout its lifecycle – inside and outside the organization Microsoft’s information protection solutions

In the past, the firewall was the security perimeter 4/9/2019 10:42 PM In the past, the firewall was the security perimeter users devices apps data On-premises © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Now there’s fewer boundaries, more data, more complexity 4/9/2019 10:42 PM Now there’s fewer boundaries, more data, more complexity OPPORTUNITY On-premises © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What we hear … “Our organization is moving to Office 365; We have to identify & protect data before it leaves to the cloud” “We need to prepare for EU-GDPR (or other) compliance, and need to identify, monitor and protect PII” “We have to educate our information workers to understand and adhere to the business information protection policy” “We share information with external parties. We have to control the way shared data is used”

Azure Information Protection Microsoft’s approach to information protection Identity & access management Threat protection Information protection Security management Protect users’ identities and control access to valuable resources based on user risk level Protect against advanced threats and recover quickly when attacked Ensure documents and emails are seen only by authorized people Gain visibility and control over security tools Azure Information Protection Office 365 Data Loss Prevention Windows Information Protection Microsoft Cloud App Security Office 365 Advanced Security Mgmt. Microsoft Intune Advanced Threat Analytics Windows Defender Advanced Threat Protection Office 365 Advanced Threat Protection Office 365 Threat Intelligence Azure Active Directory Conditional Access Windows Hello Windows Credential Guard Azure Security Center Office 365 Security Center Windows Defender Security Center

How do I protect sensitive information? 4/9/2019 10:42 PM How do I protect sensitive information? INFORMATION PROTECTION LIFECYCLE Detect Classify Protect Monitor Scan & detect sensitive data based on policy Classify data and apply labels based on sensitivity Apply protection actions, including encryption, access restrictions Reporting, alerts, remediation © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Get started today! Two great resources to help you get started: Customer Experience Team (CXP) aka.ms/aipyammer FastTrack fasttrack.microsoft.com Also … Fantastic Docs Quick Start Guides EMS Trials Maximum Results Faster Deployment Higher Adoption

Microsoft’s information protection solutions 4/9/2019 10:42 PM Microsoft’s information protection solutions Comprehensive protection of sensitive data across devices, cloud services and on-premises environments NATIVE UNIFIED ANYWHERE © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Better user experience and integration into Office native clients 4/9/2019 10:42 PM Better user experience and integration into Office native clients Now: Delightful labeling experience – for everyone! Simplified interface for information labeling More robust content matching engine Medium and long term: Integration into native Office clients: Starting with Word, Excel and PowerPoint for Mac Full Office for Mac Office web apps Office for iOS & Android Office for Windows NATIVE DEMO © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Unified with Office Information Protection and Azure ad policies 4/9/2019 10:42 PM Unified with Office Information Protection and Azure ad policies Now: Unified information types for Office DLP & AIP (80+ types) Enforcing Conditional Access for protected data Short term: SharePoint sync client support for encrypted files (in preview now) Medium and long term: Unified Information Protection policy for Office DLP & AIP Unify label management Unified labeling experience in Office clients & SPO/OD4B Unified classification policy UNIFIED © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Conditional Access Conditions Controls DEMO 10TB 3 Allow access Users Machine learning Session Risk 3 Require MFA Devices Real time Evaluation Engine Limit access Policies Location Deny access Effective policy ****** Apps Force password reset DEMO

Classify, label and protect files anywhere 4/9/2019 10:42 PM Classify, label and protect files anywhere Short term: Classify, label and protect data at rest Label and protect data across cloud applications Medium and long term: Multi platform SDK for labeling and protection – anywhere Central logs, analytics and reports ANYWHERE © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Conditional Access Conditions Controls 10TB 3 Allow access Users Machine learning Session Risk 3 Require MFA Devices Real time Evaluation Engine Limit access Policies Location Deny access Effective policy ****** Apps Force password reset

Monitor and control access through integration with Azure AD CLOUD APPS THEN CLOUD APP SECURITY Allow access Proxy Require MFA Azure AD Conditional Access Policy Limit access Deny access ****** Force password reset

Information Protection Policy Setting Policy Enforcement Data Loss Prevention Activity Anomaly detection App discovery Discovery anomaly File Scan for advanced alerts Protect file Quarantine Make private Remove a collaborator Integration with Azure Information Protection Scan and classify files in the cloud, and apply Azure Information Protection labels for protection—including encryption.

I want to block download of confidential files in cloud apps Cloud App Security Proxy USER DEVICE APP SESSION RISK Role: Vendor Group: Marketing Client: Mobile Config: Open Location: Red Bank, NJ Last Sign-in: 3 hrs ago Platform: Windows Health: Fully patched Config: Unmanaged Last seen: Red Bank, NJ Block on download Device is unmanaged DEMO

Looking ahead H1 CY18 H2 CY17 Office 365 message encryption (GA) TechReady 23 4/9/2019 10:42 PM Looking ahead While representing intended plans, capabilities and target dates are subject to change Office 365 message encryption (GA) Azure Information Protection convergence to 80+ sensitive information types used in Office 365 Azure Information Protection scanner for on-premises file shares (preview) Microsoft Cloud App Security label and protect Office files in cloud apps (preview) Native labeling experience in Word, PowerPoint and Excel on Mac, iOS, Android and web apps Native labeling in Outlook on Mac, iOS, Android and web apps DLP triggers based on labels H1 CY18 H2 CY17 © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.