1. Office 365 Security Assessment Workshop
On-site Engagement Overview
<Presenter Name>

2. hidden slide
Feedback
We want to hear from you about how you are using the tools and assets, what works, and what does not. If you feel there is anything missing, or any other feedback that you would like to provide, please go to to provide your feedback.
We need to add the feedback mechanism.

3. Required Partner Preparation
hidden slide
Required Partner Preparation
In order to deliver this presentation successfully you need to know the following:
All slides in the deck with the “example” ribbon show examples. Don’t show the examples to the customer; they are just there to help you understand the intention of the slide. Customize the examples to match the specific engagement you are delivering, then remove the Example tag.
Make sure to have the following people in the workshop:
Anyone needed from your organization.
Customer representatives from:
Project Executive Sponsor – to represent you inside the customer
Project Manager/Coordinator – to provide overall engagement project management tasks
Enterprise/Security Architects – to provide architecture guidance and insights into security policies and standards
Security Engineers – to provide technical guidance and insights into currently deployed security controls
Office 365 Subscription/Tenant Administrator – to provide insight into existing use of Office 365 and access to the reports produced by the tools required for the 2-day on-site workshops

4. Version History hidden slide Version Changes Date 1.0 Initial Release
31st Mar 2017

5. Office 365 Security Assessment Guide
hidden slide
Office 365 Security Assessment Guide
Workshop
Description
Workshop Resources
Engagement setup
Engagement Kick-off
Provides an overview of the 2-day on-site agenda and goals as well as an opportunity to cover Q&A and project governance.
Office 365 Security Assessment-Kick-off Meeting-vX.X.pptx
On-site assessment day one
On-site Engagement Overview
Office 365 Security Assessment-On-site Engagement Overview-vX.X.pptx
Office 365 Security Overview
Overview outlining Microsoft‘s approach to securing enterprise organisations.
Office 365 Security Assessment-Security and Compliance in Office 365-vX.X.pptx
Customer Security Strategy
Customer to present goals and ambitions on their cloud security strategy.
Office 365 Security Assessment-Customer Security Strategy.vX.X.pptx
Review Security Questionnaire
Review the completed security questionnaire.
Office 365 Security Assessment-Questionnaire-vX.X.docx
Office 365 Security Technical Readiness Presentation
Technical readiness presentation time slot. 
One of following Office 365 technical readiness presentations:
Office 365 Security Assessment-Understand how Microsoft protects you against Spoof, Phish, Malware, and Spam s design.X.X.pptx
Office 365 Security Assessment-Gain visibility and control with Office 365 Advanced Security Management-vX.X.pptx
Office 365 Security Assessment-Protect Sensitive information with Office 365 Data Loss Prevention-vX.X.pptx
Office 365 Security Assessment-Acquire insights into proactively protecting against advanced threats-vX.X.pptx
Office 365 Security Assessment-Advanced Data Governance-vX.X.pptx
Office 365 Secure Score - Actionable Security Analytics
Overview of Office 365 Secure Score and how it relates to the security requirements and the assessment.
Office 365 Secure Score - actionable security analytics-vX. X.pptx
You are here
Recommendation:

6. Office 365 Security Assessment Guide
hidden slide
Office 365 Security Assessment Guide
Hidden slide
Workshop
Description
Workshop Resources
On-site assessment day two
Day Two Briefing
Provides an overview of the second day agenda and goals as well as an opportunity to cover Q&A.
Office 365 Security Assessment-On-site Engagement Overview-vX.X.pptx
Secure Score Recommendations / Discussion
Workshop to cover current O365 Secure Score and recommended security actions.
Office 365 Security Assessment-Remediation Checklist Tool-vX.X.xlxs
Office 365 Security Technical Readiness Presentation
Technical readiness presentation time slot.
One of following Office 365 technical readiness presentations:
Office 365 Security Assessment-Understand how Microsoft protects you against Spoof, Phish, Malware, and Spam s design.X.X.pptx
Office 365 Security Assessment-Gain visibility and control with Office 365 Advanced Security Management-vX.X.pptx
Office 365 Security Assessment-Protect Sensitive information with Office 365 Data Loss Prevention-vX.X.pptx
Office 365 Security Assessment-Acquire insights into proactively protecting against advanced threats-vX.X.pptx
Office 365 Security Assessment-Advanced Data Governance-vX.X.pptx
Office 365 Security Roadmap Workshop
Workshop to create an Office 365 security roadmap based on the security requirements and the prioritization of the Office 365 Secure Score actions.
Office 365 Security Assessment-Close-out Presentation-vX.X.pptx
Project close-out and Next steps
Close-out presentation and discussion of next steps.
Recommendation:

7. 1 2 3 4 Agenda Introduction On-site Engagement Overview
Project Governance Update
Q&A 2 3 4

8. On-site Workshop Introduction
The purpose of this meeting is to:
Review and finalize on-site workshop schedule and logistics
Project governance
Risks and Issues
Success Criteria
Q&A

9. Team Introductions
Name Please share your name and where are you based?
Role
Please share your role in the company, which business unit or team you are part of, what other roles have you had? (Internal/External)
Ask everyone on the meeting to present themselves. Note takers should capture this information in the provided template. Limit to 30 seconds per person.
Expectations
Please share your expectations of the session?

10. On-site Engagement Overview

11. Engagement Workflow Now Two weeks from now Three weeks from now
Kick-off workshop
Provide pre-assessment questionnaire
Two weeks from now
Completion of questionnaire
Return completed questionnaire
Three weeks from now
On-site workshops that will cover:
Security objectives and requirements
Office 365 security readiness
Office 365 security assessment
Office 365 security roadmap

12. Office 365 Security Assessment Agenda, Day 1
Example
Office 365 Security Assessment Agenda, Day 1
Workshop
Description
Outcome
Customer attendees
Time
Scheduled time, room
On-site Engagement Overview
Provides an overview of the 2-day on-site agenda and goals as well as an opportunity to cover Q&A and project governance.
Agreed plan and schedule for the 2-day on-site assessment.
All project team
60 minutes
<Time>, <Room>
Office 365 Security Overview
Overview outlining Microsoft‘s approach to securing enterprise organisations.
Sets the stage and provides a high-level overview of Office 365 security features.
Customer Security Strategy
Customer to present goals and ambitions on their cloud security strategy.
Provides a common understanding of the customer cloud security strategy.
Lunch
Review Security Questionnaire
Review the completed security questionnaire.
Prioritized list of security requirements.
Office 365 Security Technical Readiness Presentation
Technical readiness presentation time slot.
Technical readiness provided to customer team.
Security Engineers
Security Architects
Office 365 Secure Score - Actionable Security Analytics
Overview of Office 365 Secure Score and how it relates to the security requirements.
Technical readiness on O365 Secure Score.
Day one wrap up and Q&A
20 minutes

13. Office 365 Security Assessment Agenda, Day 2
Example
Office 365 Security Assessment Agenda, Day 2
Workshop
Description
Outcome
Customer attendees
Time
Scheduled time, room
Day Two Briefing
Provides an overview of the second day agenda and goals as well as an opportunity to cover Q&A.
Agreed schedule for day two.
All project team
30 minutes
<Time>, <Room>
Secure Score Recommendations / Discussion
Workshop to cover current O365 Secure Score and recommended security actions.
Prioritization of O365 Secure Score security actions.
120 minutes
Office 365 Security Technical Readiness Presentation
or Shadow IT Analysis Workshop
Technical readiness presentation time slot. Or, Shadow IT Analysis Workshop using Office 365 Advanced Security Management.
Technical readiness provided to customer team. or
Understanding of current usage of Shadow IT.
Security Engineers
Security Architect
60 minutes
Lunch
Technical readiness presentation time slot.
Office 365 Security Roadmap Workshop
Workshop to create an Office 365 security roadmap based on the security requirements and the prioritization of the Office 365 Secure Score actions.
Defined high-level security roadmap based on Office 365 Secure Score security actions.
Project close-out and Next steps
Close-out presentation and discussion of next steps.
Provide an engagement summary and clear steps with tangible outcomes.

14. Customer Team - Workshop Attendees
Example
Customer Team - Workshop Attendees
Role
Description
Title
Contact information
Project Executive Sponsor
Executive sponsor who is responsible for driving the strategic vision for the organization
Responsible for making key strategic decisions
Ultimate authority and accountability for the project and delivery on project objectives
Helps resolve issues escalated by project team
Sponsors communication within the company about project goals and deliverables
Provides guidance and clarity regarding overall security strategy, standards and policies for the organization
Project Manager
Coordinates partner and working teams engaged in the project
Schedules all meetings with appropriate resources
Is the central point for dissemination of the engagement deliverables
Records and manages project issues, including escalations
Liaises with, and provides updates to, project executive sponsors
Ensures that the on-site requirements are met in time for the 2-day on-site workshops
Enterprise, Security and/or Infrastructure Architects
Responsible for security strategy defined by the organization
Analyses and chooses security products for the organization that meets business goals
Accountable for creating and maintaining the security architecture
Responsible for operation of security products
Provides insights into current and planned security guidelines, requirements and standards for the organization
Security Engineers, technical resources
Responsible the deployment, operations and maintenance of security solutions
Provides technical knowledge on how existing security controls have been implemented
Provides insight in to existing use of Office 365
Update team member titles and names during the workshop.

15. Partner Team - Workshop Attendees
Example
Partner Team - Workshop Attendees
Role
Description
Title
Contact information
Project / Engagement Manager
Develops and maintains project timeline
Coordinates partner and working teams engaged in the project
Manages project deliverables
Records and manages project issues, including escalations
Liaises with, and provides updates to, customer Project Manager
Security Architects / Consultants
Prepares the workshop materials and delivers the 2-day security assessment workshops
Accountable for creating the engagement deliverables
Update team member titles and names prior to the workshop.

16. Project Governance Update

17. Project Governance Update
Example
Project Governance Update
Risk and issues management
Covering business, technology and project execution
Describe the escalation path
Change management
Describe the change management workflow
Success Criteria
Discuss and agree on what a successful engagement would look like
Date recorded
Risk/Issue description
Probability
Impact
Mitigation plan
Cover overall project governance and make sure to document risks/issues as well as success criteria for the engagement.

18. Project Deliverables and Work Products
Example
Project Deliverables and Work Products
Deliverable, Work Product
Description
Delivery Date
Kick-off Presentation
Overview of the engagement covering vision and objectives, requirements and next steps and actions
After the kick-off presentation
Pre-Assessment Questionnaire
A questionnaire containing questions on cloud usage/adoption, security requirements and objectives, regulations and frameworks
Recommendations and Roadmap Report
A document containing a prioritized list of Office 365 security recommendations based on Office 365 Secure Score
After the 2-day on-site workshops

19. Q&A