1. Managing Content: You Need To Think About More Than Office 365
Erica Toelle
Product Evangelist

2. Thank you to our sponsors!

3. Sponsor Raffle!!!
Each sponsor stamp will opt you into sponsor raffle prize and mailings
Collect 7 or more sponsor stamps on your Badge to be eligible for the Xbox One X
Hand entire Badge/ ribbon back into registration desk at end of day to enter the prize draw
Badges drawn at 5.15pm in Trinobantes (if you are drawn and do not have the pre-requisite stamp/s….. You’ll lose!)

4. Social Tweet on #spscambridge OR #sqlsatcambridge
We have Giant Jenga, Giant Connect 4, Giant Kerplunk and Sack races!
Post event, join us for a SharePint/ SQLPint from our bar
Don’t forget to thank Sponsors, Volunteers and Speakers!
The event doors will close at 6.30pm

5. Today’s Agenda Define Our Content Problems Solutions To These Problems
Office 365
Custom Solutions
Third Party Tools
Today’s Agenda

6. A Typical Organization
On-Premises
The Cloud
Hybrid

7. What We Are Trying To Do With Content
PREVENT BAD STUFF
INCREASE VALUE
Compliance
Findability
Records
Sensitive Data
Reusability
Security
Provide Context

8. Prevent Bad Stuff

9. Prevent Bad Stuff PREVENT BAD STUFF Access all organizational content
Scan all content
Identify certain types of data: sensitive, PII, records
Ensure it is stored in the correct location
Automatically apply a policy: retention, security, etc.
Compliance
Records
Sensitive Data
Security

10. Source: Microsoft Trust Center

11. Core Compliance Scenarios
Allow people to access and delete their data, ensure data integrity
Have documented processes in place to protect data
Train employees to follow policies and processes
Perform good records management practices

12. Microsoft Compliance Landscape
Ensure Files in Correct Location
Access All Content
Cloud App Security
DLP
Azure Information Protection
Azure Rights Management
IRM
Advanced Data Governance
Retention
Scan Content, Identify Sensitive Data
Automatically Apply Policy
Automatically Apply Policy

13. What is Cloud App Security?
Microsoft Cloud App Security provides a comprehensive, intelligent security solution that brings visibility, real-time control, and security to your cloud applications.
Microsoft Cloud App Security is a CASB (Cloud Access Security Broker) that can help you bring the protection you have on-premises to your cloud apps, gaining comprehensive visibility, auditing capabilities, and granular controls to help ensure your sensitive data stays safe.

14. What is a Cloud Access Security Broker?

15. Summary of What Data is Available Per App
Account information:
Visibility into users, accounts, profile information, status (suspended, active, disabled) groups, and privileges.
Audit trail:
Visibility into user activities, admin activities, log on activity.
Data scan:
Scanning of unstructured data using two processes -periodically (every 12 hours) and in real-time scan (triggered each time a change is detected).
App permissions:
Visibility into issued tokens and their permissions.
Account governance:
Ability to suspend users, revoke passwords, etc.
Data Governance:
Ability to quarantine files, including files in trash, and overwrite files.
App permission governance:
Ability to remove tokens.

16. What Apps Are Supported?

17. Demo: Cloud App Security

22. Prevent Bad Stuff: Cloud App Security
Access all organizational content
Scan all content
Identify certain types of data: sensitive, PII, records
Ensure it is stored in the correct location
Automatically apply a policy: retention, security, etc.
Compliance
Records
Sensitive Data
Security

23. Cloud App Security Pros and Cons
Can see all apps used in your organization
Can’t scan files in all cloud apps
Can scan content in 8 cloud apps
Can’t apply policy to all cloud apps
Partners could develop more cloud connectors
No integration with ADG policies (yet)
Can apply policy to 8 cloud apps
Can’t move content between applications
Integration with AIP policies

24. Microsoft Compliance Landscape
Ensure Files in Correct Location
Access All Content
Cloud App Security
DLP
Azure Information Protection
Azure Rights Management
IRM
Advanced Data Governance
Retention
Scan Content, Identify Sensitive Data
Automatically Apply Policy
Automatically Apply Policy

25. What is Azure Information Protection?
Classify
Label
Protect
Identify sensitive content
Suggested labels based on sensitive data type
Categorize based on confidentiality
Provide visual indications of the label
Define granular rights to content
Stays with the document or
Uses Azure Rights Management

26. Classify

27. Azure Rights Management

28. Azure Rights Management – What Doesn’t Work
If an ARM protected document saved to SharePoint or OneDrive will not support the following features for protected files:
Co-authoring
Office Online
Search
document preview
Thumbnail
eDiscovery
data loss prevention (DLP)

29. Retention Policies Attached to a label. Can do the following:
Trigger a disposition review at the end of the retention period, so that SharePoint and OneDrive documents must be reviewed before they can be deleted.
Start the retention period from when the content was labeled, instead of the age of the content or when it was last modified.

30. Office 365 Labels Location Deployment
Can be deployed to specific locations or the entire organization.
All Locations
SharePoint
OneDrive for Business
Groups
Exchange
Sites
(up to 100 sites)
Accounts
(up to 1000)
(up to 100)
Entire Locations
Recipients
(up to 1000)
Include or Exclude

31. Automatic Classification (Labels)
Except when…
Auto-applied based on sensitive information types
The label is a record
Auto-applied based on a search query
A user has manually applied a label
Auto-applied based on a location
Another label is older

32. Prevent Bad Stuff: Cloud App Security
Access all organizational content
Scan all content
Identify certain types of data: sensitive, PII, records
Ensure it is stored in the correct location
Automatically apply a policy: retention, security, etc.
Compliance
Records
Sensitive Data
Security

33. API and ADG Pros and Cons
Can classify Office 365, SharePoint, and Azure content, can apply policies to these locations
AIP and ADG labels don’t sync (yet)
Azure Rights Management protects the security of documents
Retention doesn’t meet records management standards
Azure Rights Management majorly reduces SharePoint and OneDrive functionality

34. Ensure Documents are in the correct location
Migrate or sync files between cloud applications

35. Increase Value INCREASE VALUE Access all organizational content
Scan all content
Add additional metadata or properties
Use machine learning to add additional context
Display in context with other data
Findability
Reusability
Provide Context

36. Twitter: @EricaToelle
Thank you!!
Erica Toelle
RecordPoint
Product Evangelist