Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save...
Transcript of Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save...
![Page 1: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/1.jpg)
MICROSOFT 365
Protect Office 365 and
more with EMS
Jan Ketil Skanke – Enterprise Mobility MVP
COO and Principal Cloud Architect @CloudWay
![Page 2: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/2.jpg)
MICROSOFT 365
Jan Ketil Skanke
MVP Enterprise Mobility
Partner and Princial Cloud Architect
CloudWay
Twitter: @JankeSkanke
![Page 3: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/3.jpg)
MICROSOFT 365
How good is your security?
![Page 4: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/4.jpg)
MICROSOFT 365
Challenges in defense/security management
Identity-based attacks are up 300% this year
Lack of knowledge of available controls and which are most effective
Unable to benchmark against other organizations
Most enterprises report using more than 60 security solutions
Information is your most attractive target
Many different controls
Many different places to configure controls
96% of malware is automated polymorphic
Eroding coverage of controls
![Page 5: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/5.jpg)
MICROSOFT 365 Assess your current situation
https//securescore.microsoft.com
![Page 6: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/6.jpg)
MICROSOFT 365
Guidance to increase your security levelLearn what security features are available to reduce risk while helping you balance productivity and security
Insights into your security positionOne place to understand your security position and what features you have enabled
Score-based frameworkCalculates a security score based on current security settings and behaviours and compares it to a baseline asserted by Microsoft
Secure Score
![Page 7: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/7.jpg)
MICROSOFT 365 Identity Secure Score
![Page 8: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/8.jpg)
MICROSOFT 365 Enable controls through Secure Score
Get more details and enable control or take you to where you can enable
![Page 9: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/9.jpg)
MICROSOFT 365 How scores get calculated
Nightly process collects telemetry from workloads
Ignore and 3rd party information is stored in another location
Reviewing report data is anonymized and store separately
Azure Active
Directory
Secure Score UIAPI to
Data Store
Workload Data
for Secure Score
Azure
Event Hub
Secure Score
Worker Process
Workload
Data Stores
Reporting
Actions Data
Ignore and 3rd
Party Action Data
![Page 10: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/10.jpg)
MICROSOFT 365
Identity Based Approach
![Page 11: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/11.jpg)
MICROSOFT 365
Identity Based Approach
Device Trust
![Page 12: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/12.jpg)
MICROSOFT 365
Identity Based Approach
Device Trust
MAM vs MDM?
![Page 13: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/13.jpg)
MICROSOFT 365
Identity Based Approach
Device Trust
MAM vs MDM?
Health and Compliance?
![Page 14: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/14.jpg)
MICROSOFT 365
Identity Based Approach
Device Trust
MAM vs MDM?
Health and Compliance
Data Security
![Page 15: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/15.jpg)
MICROSOFT 365
Identity Based Security
Identity driven approach
MFA / Conditional Access
Risk
Can we trust their device?
Who and What are accessing your data?
![Page 16: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/16.jpg)
MICROSOFT 365
Enable self-help for more predictable
and complete end user security
Increase your awareness with
auditing and monitor security alerts
Automate threat response
Reduce your attack surface
Strengthen your credentials
Blocking legacy authentication
reduces compromise by 66%.
Implementing risk policiesreduces compromise by 96%
Attackers escape detection inside a victim’s
network for a median of 101 days. (Source: FireEye)
60% of enterprises experienced social
engineering attacks in 2016. (Source: Agari)
MFA reduces compromise by 99.99%
Getting the basics rights
![Page 17: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/17.jpg)
MICROSOFT 365
“Less than 2% of tenant admins have MFA enabled”
![Page 18: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/18.jpg)
MICROSOFT 365
Secure Privileged Access
• Create a “Break The Glass” account
• Setup MFA on “all” Privileged roles
• Use AAD Privileged Identity MGMT
• Monitor usage – Alerting
![Page 19: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/19.jpg)
MICROSOFT 365
Secure ALL your users
Enable MFA the Right Way
Use Conditional Access
Protect ALL your apps
Trust on Device Level
Risk Based Policies
MDATP and AAD Identity Protection
![Page 20: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/20.jpg)
MICROSOFT 365 Conditional Access
Allow Access
Block Access
Cloud Apps
On-premises
User
Conditions
Actions
Enforce MFA per
user/per app
Location (IP Range)
Device State
User Group
![Page 21: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/21.jpg)
MICROSOFT 365
What about those Oauth Apps?
![Page 22: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/22.jpg)
MICROSOFT 365
What about those Oauth Apps?
![Page 23: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/23.jpg)
MICROSOFT 365
![Page 24: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/24.jpg)
MICROSOFT 365
![Page 25: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/25.jpg)
MICROSOFT 365
![Page 26: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/26.jpg)
MICROSOFT 365
![Page 27: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/27.jpg)
MICROSOFT 365
![Page 28: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/28.jpg)
MICROSOFT 365
SO WHO IS ACCESSING YOUR COMPANY DATA?
![Page 29: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/29.jpg)
MICROSOFT 365
Controlling Oath Apps with MCAS
DEMO
![Page 30: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/30.jpg)
MICROSOFT 365
Moving to Device Trust
![Page 31: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/31.jpg)
MICROSOFT 365 Configure Conditional Access
Require MFA for all unknown Windows devicesRequire Managed App on Mobile
Zero Trust Network: No need to trust your local network.
Enable Baseline Policy for Admins
Block Legacy Auth with Policy
![Page 32: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/32.jpg)
MICROSOFT 365
Work-owned devices Personal devices
Trusted by virtue of domain
join or complianceTrusted if device complies
with MDM policyTrusted if device/app complies
with Intune policy
![Page 33: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/33.jpg)
MICROSOFT 365
Utilize Microsoft Intune
Setup Configuration Policies
Setup Compliance Policies
Compliant Device
![Page 34: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/34.jpg)
CorporateNetwork
Geo-location
MicrosoftCloud App SecurityMacOS
Android
iOS
Windows
WindowsDefender ATP
Client apps
Browser apps
Google ID
MSA
Azure AD
ADFS
RequireMFA
Allow/blockaccess
Block legacyauthentication
Forcepasswordreset
******
Limitedaccess
Controls
Employee & PartnerUsers and Roles
Trusted &Compliant Devices
Physical &Virtual Location
Client apps &Auth Method
Conditions
Machine
learning
Policies
Real timeEvaluationEngine
SessionRisk
3
40TB
Effectivepolicy
![Page 35: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/35.jpg)
MICROSOFT 365
Conditional Access
DEMO
![Page 36: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/36.jpg)
MICROSOFT 365
Intune App Protection for Mobile Devices
![Page 37: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/37.jpg)
MICROSOFT 365
Why Intune App Protection for Mobile Devices
![Page 38: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/38.jpg)
MICROSOFT 365
Why Intune App Protection for Mobile Devices
![Page 39: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/39.jpg)
MICROSOFT 365
Why Intune App Protection for Mobile Devices
![Page 40: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/40.jpg)
MICROSOFT 365
Why Intune App Protection for Mobile Devices
![Page 41: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/41.jpg)
MICROSOFT 365
Without Enrollment
![Page 42: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/42.jpg)
MICROSOFT 365
Without Enrollment
![Page 43: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/43.jpg)
MICROSOFT 365
Without Enrollment
![Page 44: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/44.jpg)
MICROSOFT 365
Without Enrollment
![Page 45: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/45.jpg)
MICROSOFT 365
Without Enrollment
![Page 46: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/46.jpg)
MICROSOFT 365
Without Enrollment
![Page 47: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/47.jpg)
MICROSOFT 365
Without Enrollment
![Page 48: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/48.jpg)
MICROSOFT 365
Intune App Protection Policies (APP)
Personal apps
Corporate apps
MDM policies
Comprehensive protection
• App encryption at rest
• App access control – PIN or credentials
• Save as/copy/paste restrictions
• App-level selective wipe
MDM mgmt. by Intune or third-party is optional
Might be a good solution for these scenarios:
• BYOD when MDM is not required
• Extending app access to vendors and partners
• Already have an existing MDM solution
MAM policies
MDM – optional (Intune or 3rd-party)
![Page 49: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/49.jpg)
MICROSOFT 365
What do we need?
123
![Page 50: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/50.jpg)
MICROSOFT 365
The Broker App(s) 2
![Page 51: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/51.jpg)
MICROSOFT 365
Conditional Access Policies
ENFORCE MFA
ALLOW
BLOCK
![Page 52: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/52.jpg)
MICROSOFT 365 3
ENFORCE MFA
ALLOW
BLOCK
![Page 53: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/53.jpg)
MICROSOFT 365
security.microsoft.com
![Page 54: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/54.jpg)
MICROSOFT 365 Intune Security Tasks
Intune Admin get tasks assigned from SecOps
Integrated with Microsoft Defender ATP
![Page 55: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/55.jpg)
MICROSOFT 365
![Page 56: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/56.jpg)
MICROSOFT 365
![Page 57: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/57.jpg)
MICROSOFT 365
![Page 58: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/58.jpg)
MICROSOFT 365
![Page 59: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/59.jpg)
MICROSOFT 365
![Page 60: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/60.jpg)
MICROSOFT 365
![Page 61: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/61.jpg)
MICROSOFT 365
![Page 62: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/62.jpg)
MICROSOFT 365
DEMO
![Page 63: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/63.jpg)
MICROSOFT 365
Log Analytics
Export logs to Log Analytics
Store logs in Storage Account
Stream to Event Hub (forward to SIEM)
![Page 64: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/64.jpg)
MICROSOFT 365
Logs logs logs
![Page 65: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/65.jpg)
MICROSOFT 365
DEMO
![Page 66: Protect Office 365 and more with EMS · •App access control –PIN or credentials •Save as/copy/paste restrictions •App-level selective wipe MDM mgmt. by Intune or third-party](https://reader036.fdocuments.net/reader036/viewer/2022071013/5fcb3a5efedbc77a442f2f4b/html5/thumbnails/66.jpg)
MICROSOFT 365
Thank You
Remember to evaluate my
session