Demos Sharing a document B2B Protected with Policy Tips Departmental Templates Mac Outlook Protected PDF OneDrive / SharePoint Document Tracking Portal (Preview)

Demos… continued Admin Reporting (Preview) Onboarding Controls CAD integration RMS Partner Offerings Classification (Concept)

Partner Offerings Secude SAP Protection TITUS Office clients Watchful Classification Gigatrust PDF and

Sharing a document B2B

Protected with Policy Tips

Office apps integrates with RMS

Office 365 integrates with RMS Powerful rules-based policies can enforce the automatic application of RMS to and documents that include sensitive information. Protect SharePoint document libraries with on- exit protection of documents Enforce Data Loss Protection policies in with content scanning including attachments

Office 365 integrates with RMS A simple yet powerful rules generation experience with pre-canned templates makes it easy to quickly implement and provision data protection policies

Departmental Templates

Administrator defines a departmental template: What a Marketing user sees: What a other users see:

Mac Outlook IRM support

RMS Protected PDF Experiences

OneDrive for Business with IRM SharePoint Protected Libraries

SharePoint Online with RMS – Protected Document Library

SharePoint Online with RMS –Content is protected as it is opened

SharePoint Online with RMS – Enable RMS on Doc. Library

Document Tracking Portal (Preview)

Microsoft Confidential - EU RMS User Group / Oct

Microsoft Confidential - EU RMS User Group / Oct

Microsoft Confidential - EU RMS User Group / Oct

Microsoft Confidential - EU RMS User Group / Oct

Microsoft Confidential - EU RMS User Group / Oct

Microsoft Confidential - EU RMS User Group / Oct

Microsoft Confidential - EU RMS User Group / Oct

Administrative Reporting (Part of Azure AD Premium)

Onboarding Controls

Azure RMS Onboarding controls Azure RMS onboarding controls are disabled by default All users and applications can consume and protect content Can be enabled via PowerShell: set-AADRMOnboardingControls Two modes of operation: 1- Only users with an Azure RMS license can protect content 2- Only users that are members of a specified group can protect content (the two options can be combined) Enabling either option blocks protection from non-allowed clients Consumption is always allowed regardless of onboarding controls

Enabling onboarding controls, examples: Enable license assignment enforcement: Disable license assignment enforcement and enable group-based control

CAD with RMS Support

Partner Offerings Protecting data leaving SAP TITUS clients Watchful Classification Gigatrust PDF

Secude: Protecting data leaving SAP

TITUS: RMS-enlightened Client

TITUS: RMS-enlightened Secure Doc Container

This memo pertains to our 2013 Business Plan, our Financial Projections in connection with our Opportunity Pipeline, and our estimated budgetary expenditures required to address that pipeline. Please treat this information as Company Confidential. Highlights of the projected 2013 Fiscal Year driven by this pipeline report (attached) include: REVENUE (k)GM%OPEXEBITDA $ 27, %$ 12,417$ 13,177 Note that there were exceptional one-time charges incurred in connection with the restructuring that was approved by the Board of Directors and subsequently ratified by the Shareholders via a Shareholder Resolution Don’t worry, this message was automatically classified and encrypted for me…I didn’t have to do anything…now that we are using the new RightsWATCH solution that works with Microsoft RMS. And the report itself is dynamically watermarked and encrypted…very easy!! Watchful: Deep Office integration

Gigatrust: RMS Protected PDF and much more

Override-able Classification Concept Only / Discussion Aid No release plan in place

Microsoft Confidential - EU RMS User Group / Oct No need for protection Ad-hoc Policy Defined by the user Ad-hoc Policy Defined by the user Templates with user customization Templates Defined by the Admin ADMINISTRATOR No opinion Strong Opinion USER: No opinion Strong Opinion Classification CSOs don’t always know what 5% of their docs are sensitive Users don’t like to classify Classification = Protection is a simplifying assumption Automation (tooling) can scale up the challenge of ‘scoped templates’

Bare essential classification

John composes an and wants to ‘share protected’

The document is not classified. David classifies it.

David reviews and protects the document

An organization defines templates for all users. The user leverages core constructs to build flexible new (compliant) policy. Guided use of Templates

The document is not classified. David classifies it.

The document’s scope is not defined. David defines it.

The document’s scope is defined, but David would also like to add his manager.

David reviews and protects the document

An organization defines templates for all users. The user is expected to use them. The user is permitted to alter them slightly. Advanced user customization

John composes an and wants to ‘share protected’

The document is not classified. John classifies it.

John considers to narrow the access for this document

John wants to remove all Contoso employees from the authorized user list

John wants to add the company’s legal team due to compliance requirement

John wants to reduce the rights for all the recipients to Reviewer rights, except for the legal team

John is now ready to send the protected document