SlideShare a Scribd company logo
Netskope © 2015, Optiv Security Inc. © 2015
5 Highest-Impact CASB Use Cases
for Office 365
Netskope © 2015, Optiv Security Inc. © 2015
“By 2017, organizations that have made a strategic decision to
invest in cloud applications for mission-critical workloads will
consider CASBs to be an essential security control.”
© 2016 Netskope. All Rights Reserved. 2
© 2016 Netskope. All Rights Reserved.
What is a Cloud Access Security Broker?
3
• Defined by Gartner in 2012;
• Cloud-based or on-premises;
• Sits between user and cloud app;
• Visibility and control of cloud apps as
they are accessed;
• Example policies: Authorization,
encryption, tokenization, logging,
alerting, authentication
© 2016 Netskope. All Rights Reserved.
Gartner’s Four Pillars of CASB
4
VISIBILITY
DATA SECURITY
COMPLIANCE
THREAT
PROTECTION
What is driving the need for a CASB?
5
Netskope © 2015, Optiv Security Inc. © 2015
There are 22,000 enterprise
apps today (and growing).
© 2016 Netskope. All Rights Reserved.
917 Apps Per Enterprise – It’s Easy to Buy and Use Them!
7
10%
70%
20%
MostlyUnsanctionedSanctioned
IT-led
Business-led
User-led
© 2016 Netskope. All Rights Reserved.
How Much of Your Business Data is in the Cloud?
8
30%
Data Breaches
Failed Audits =
Fines, Penalties
Loss or Theft of IP
or Sensitive Data
Loss of
Reputation,
Business
Disruption
© 2016 Netskope. All Rights Reserved. 9
© 2016 Netskope. Company Confidential
Four ways users interact with Office 365
10
Web
Browser
Mobile
App
App
Ecosystem
Sync
Client
© 2016 Netskope. Company Confidential
Safe cloud enablement starts with covering all sources
11
Browser
Sync
Client
Mobile
App
App
Ecosystem
• Are risky activities taking place?
• Is sensitive data leaking? Where?
• Do users with unmanaged devices have the same
level of access as users with managed devices?
• What is your exposure to threats such as malware or
ransomware?
5 Highest-Impact
CASB Use Cases
For Office 365
Use Case #1
Find sensitive data in
OneDrive and
SharePoint
Prevent sensitive data
leakage in Office 365
and to app ecosystem
14
1. API connection to enable eDiscovery of
content in OneDrive and SharePoint
2. Inline deployment with ability to decode
traffic to get real-time visibility and control
over activities in Office 365 suite
3. Ability to associate personal and corporate
cloud app account credentials
4. Ability to cover web browsers, OneDrive
sync client, Office mobile apps, and apps in
O365 ecosystem
5. Cloud DLP engine to identify sensitive
content in and enroute to and from O365
CASB
Requirements
Use Case #2
Prevent sensitive
data leakage via
Outlook.com email
16
1. Inline deployment options to get
access to Outlook.com traffic in real-
time
2. Ability to decode details in real-time
about activity and data connected to
Outlook.com
3. Cloud DLP engine to identify
sensitive content being sent in
Outlook.com email body and
attachments
4. Ability to cover both web browsers
and mobile apps
CASB
Requirements
Netskope © 2015, Optiv Security Inc. © 2015
Use Case #3
Provide granular
access control to
Office 365 for
managed and
unmanaged devices
18
1. Ability to classify managed
vs. unmanaged devices
2. Ability to set granular
policies based on device
classification
3. E.g. “only allow full Outlook
access for managed
devices and force OWA for
unmanaged”
CASB
Requirements
Use Case #4
Find data exfiltration
going from Office 365 to
unsanctioned apps
Source: AT&T Cybersecurity Insights
20
1. Inline deployment options to get
access to both Office 365 and
unsanctioned cloud traffic
2. Ability to decode details in
real-time about activity and data
3. Ability to correlate events and
perform anomaly detection
4. Need to see cloud usage details
from browsers, OneDrive sync
clients, and Office 365 mobile
apps
CASB
Requirements
Use Case #5
Find malware in
OneDrive and
SharePoint and
quarantine it
22
1. Ability to scan SharePoint sites and
OneDrive for various malware types and
quarantine the malware
2. Ability to replace the eradicated malware
with a tombstone file, letting the user know of
the action taken
CASB
Requirements
Netskope © 2015, Optiv Security Inc. © 2015
5:
Find malware in OneDrive
and SharePoint and
quarantine it
3:
Provide granular access control
to Office 365 for managed and
unmanaged devices
2:
Prevent sensitive data
leakage via Outlook.com
email
4:
Find data exfiltration going
from Office 365 to
unsanctioned apps
1:
Find sensitive data in OneDrive
and SharePoint and prevent
sensitive data leakage in Office
365 and to app ecosystem
Netskope © 2015, Optiv Security Inc. © 2015
THANK YOU!

More Related Content

PPTX
Microsoft Information Protection: Your Security and Compliance Framework
PPTX
Microsoft Threat Protection
PPTX
The Definitive CASB Business Case Kit - Presentation
PPTX
EDR vs SIEM - The fight is on
PDF
Microsoft 365 Enterprise Security with E5 Overview
PPTX
Bitglass Webinar - Top 6 CASB Use Cases
PDF
Overview of Data Loss Prevention (DLP) Technology
PPTX
5 Highest-Impact CASB Use Cases
Microsoft Information Protection: Your Security and Compliance Framework
Microsoft Threat Protection
The Definitive CASB Business Case Kit - Presentation
EDR vs SIEM - The fight is on
Microsoft 365 Enterprise Security with E5 Overview
Bitglass Webinar - Top 6 CASB Use Cases
Overview of Data Loss Prevention (DLP) Technology
5 Highest-Impact CASB Use Cases

What's hot (20)

PPTX
Fundamentals of Microsoft 365 Security , Identity and Compliance
PPTX
Introduction to Azure monitor
PPTX
Azure backup Disaster Recovery Business Continuity
PDF
Endpoint Detection & Response - FireEye
PPTX
Public Sector Cloud
PPTX
Security operation center (SOC)
PPTX
OpenStack Architecture and Use Cases
PPTX
Check Point Solutions Portfolio- Detailed
PPTX
SEIM-Microsoft Sentinel.pptx
PPTX
4_Session 1- Universal ZTNA.pptx
PPTX
Splunk Cloud and Splunk Enterprise 7.2
PDF
Microsoft 365 Security and Compliance
PPTX
CASB: Securing your cloud applications
PDF
VMware Tanzu Introduction
PDF
Azure Sentinel
PDF
Netskope Overview
PDF
Microsoft Security - New Capabilities In Microsoft 365 E5 Plans
PDF
PaloAlto Enterprise Security Solution
PDF
Elastic SIEM (Endpoint Security)
PDF
SIEM Architecture
Fundamentals of Microsoft 365 Security , Identity and Compliance
Introduction to Azure monitor
Azure backup Disaster Recovery Business Continuity
Endpoint Detection & Response - FireEye
Public Sector Cloud
Security operation center (SOC)
OpenStack Architecture and Use Cases
Check Point Solutions Portfolio- Detailed
SEIM-Microsoft Sentinel.pptx
4_Session 1- Universal ZTNA.pptx
Splunk Cloud and Splunk Enterprise 7.2
Microsoft 365 Security and Compliance
CASB: Securing your cloud applications
VMware Tanzu Introduction
Azure Sentinel
Netskope Overview
Microsoft Security - New Capabilities In Microsoft 365 E5 Plans
PaloAlto Enterprise Security Solution
Elastic SIEM (Endpoint Security)
SIEM Architecture
Ad

Similar to 5 Highest-Impact CASB Use Cases - Office 365 (20)

PDF
Cloud Access Security Brokers - What's all the Hype
PPTX
Jervis Hui - No Tradeoffs: Cloud Security & Privacy Don't Need To Be At Odds
PPTX
Cloudy with a Chance of...Visibility, Accountability & Security
PPTX
Proteja sus datos en cualquier servicio Cloud y Web de forma unificada
PPTX
CASBs and Office 365: The Security Menace
PPTX
Office 365 in Focus. Security and Governance Strategies from the Experts - We...
PDF
Improving Cloud Visibility, Accountability & Security
PPTX
01-Chapter 01-Introduction to CASB and Netskope.pptx
PPTX
Safely Enabling Office 365
PDF
Migrating Critical Applications to the Cloud - isaca seattle - sanitized
PDF
Migrating Critical Applications To The Cloud - ISACA Seattle - Sanitized
PDF
Cloud Application Security --Symantec
PPTX
Maximize your cloud app control with Microsoft MCAS and Zscaler
PPTX
Maximize your cloud app control with Microsoft MCAS and Zscaler
PPTX
Netskope — Shadow IT Is A Good Thing
PPTX
Embracing secure, scalable BYOD with Sencha and Centrify
PDF
Proven Practices for Office 365 Deployment, Security and Management
PDF
Microsoft Cloud App Security CASB
PDF
Oracle Digital Business Transformation and Internet of Things by Ermin Prašović
PPTX
The Four Horsemen of the O365 Apocalypse
Cloud Access Security Brokers - What's all the Hype
Jervis Hui - No Tradeoffs: Cloud Security & Privacy Don't Need To Be At Odds
Cloudy with a Chance of...Visibility, Accountability & Security
Proteja sus datos en cualquier servicio Cloud y Web de forma unificada
CASBs and Office 365: The Security Menace
Office 365 in Focus. Security and Governance Strategies from the Experts - We...
Improving Cloud Visibility, Accountability & Security
01-Chapter 01-Introduction to CASB and Netskope.pptx
Safely Enabling Office 365
Migrating Critical Applications to the Cloud - isaca seattle - sanitized
Migrating Critical Applications To The Cloud - ISACA Seattle - Sanitized
Cloud Application Security --Symantec
Maximize your cloud app control with Microsoft MCAS and Zscaler
Maximize your cloud app control with Microsoft MCAS and Zscaler
Netskope — Shadow IT Is A Good Thing
Embracing secure, scalable BYOD with Sencha and Centrify
Proven Practices for Office 365 Deployment, Security and Management
Microsoft Cloud App Security CASB
Oracle Digital Business Transformation and Internet of Things by Ermin Prašović
The Four Horsemen of the O365 Apocalypse
Ad

More from Netskope (20)

PPTX
Netskope Threat Labs: Cloud As an Attack Vector
PDF
Why Everyone Needs a Cloud-First Security Program - SASEfaction Guaranteed!
PDF
MalCon Future of Security
PDF
Phishing in the Cloud Era (BSides)
PPTX
DEF CON 27 - Exploiting AWS Loopholes
PPTX
Defcon 27 - The Future of Command and Control
PPTX
Defcon 27 - Phishing in the Cloud Era
PPTX
Defcon 27 - Exploiting IAM in GCP
PDF
June 2016 EMEA Netskope Cloud Report
PDF
June 2016 Worldwide Netskope Cloud Report
PPTX
Cure for the Common Cloud: How Healthcare can Safely Enable the Cloud
PPTX
Quantifying Cloud Risk for Your Corporate Leadership
PPTX
Lions, Tigers, and PHI, Oh My! The latest in data loss prevention in the cloud.
PDF
Autumn 2015 EMEA Netskope Cloud Report
PDF
Fall 2015 Worldwide Netskope Cloud Report
PPTX
Cloud Security for Dummies Webinar — The Identity Edition
PPTX
Reference Architecture for Data Loss Prevention in the Cloud
PDF
Summer 2015 EMEA Netskope Cloud Report
PDF
Summer 2015 Worldwide Netskope Cloud Report
PPTX
Making Cloud Security Part of Your DNA Webinar Slides
Netskope Threat Labs: Cloud As an Attack Vector
Why Everyone Needs a Cloud-First Security Program - SASEfaction Guaranteed!
MalCon Future of Security
Phishing in the Cloud Era (BSides)
DEF CON 27 - Exploiting AWS Loopholes
Defcon 27 - The Future of Command and Control
Defcon 27 - Phishing in the Cloud Era
Defcon 27 - Exploiting IAM in GCP
June 2016 EMEA Netskope Cloud Report
June 2016 Worldwide Netskope Cloud Report
Cure for the Common Cloud: How Healthcare can Safely Enable the Cloud
Quantifying Cloud Risk for Your Corporate Leadership
Lions, Tigers, and PHI, Oh My! The latest in data loss prevention in the cloud.
Autumn 2015 EMEA Netskope Cloud Report
Fall 2015 Worldwide Netskope Cloud Report
Cloud Security for Dummies Webinar — The Identity Edition
Reference Architecture for Data Loss Prevention in the Cloud
Summer 2015 EMEA Netskope Cloud Report
Summer 2015 Worldwide Netskope Cloud Report
Making Cloud Security Part of Your DNA Webinar Slides

Recently uploaded (20)

PPTX
MYSQL Presentation for SQL database connectivity
PDF
KodekX | Application Modernization Development
PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
PDF
Advanced methodologies resolving dimensionality complications for autism neur...
PDF
Bridging biosciences and deep learning for revolutionary discoveries: a compr...
PDF
CIFDAQ's Market Insight: SEC Turns Pro Crypto
PDF
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PPTX
Big Data Technologies - Introduction.pptx
PDF
Building Integrated photovoltaic BIPV_UPV.pdf
PDF
Diabetes mellitus diagnosis method based random forest with bat algorithm
PPTX
Cloud computing and distributed systems.
PDF
Empathic Computing: Creating Shared Understanding
PDF
Reach Out and Touch Someone: Haptics and Empathic Computing
PDF
How UI/UX Design Impacts User Retention in Mobile Apps.pdf
PPT
Teaching material agriculture food technology
PDF
Electronic commerce courselecture one. Pdf
PPTX
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
PDF
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
PPTX
20250228 LYD VKU AI Blended-Learning.pptx
MYSQL Presentation for SQL database connectivity
KodekX | Application Modernization Development
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
Advanced methodologies resolving dimensionality complications for autism neur...
Bridging biosciences and deep learning for revolutionary discoveries: a compr...
CIFDAQ's Market Insight: SEC Turns Pro Crypto
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
Mobile App Security Testing_ A Comprehensive Guide.pdf
Big Data Technologies - Introduction.pptx
Building Integrated photovoltaic BIPV_UPV.pdf
Diabetes mellitus diagnosis method based random forest with bat algorithm
Cloud computing and distributed systems.
Empathic Computing: Creating Shared Understanding
Reach Out and Touch Someone: Haptics and Empathic Computing
How UI/UX Design Impacts User Retention in Mobile Apps.pdf
Teaching material agriculture food technology
Electronic commerce courselecture one. Pdf
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
20250228 LYD VKU AI Blended-Learning.pptx

5 Highest-Impact CASB Use Cases - Office 365

  • 1. Netskope © 2015, Optiv Security Inc. © 2015 5 Highest-Impact CASB Use Cases for Office 365
  • 2. Netskope © 2015, Optiv Security Inc. © 2015 “By 2017, organizations that have made a strategic decision to invest in cloud applications for mission-critical workloads will consider CASBs to be an essential security control.” © 2016 Netskope. All Rights Reserved. 2
  • 3. © 2016 Netskope. All Rights Reserved. What is a Cloud Access Security Broker? 3 • Defined by Gartner in 2012; • Cloud-based or on-premises; • Sits between user and cloud app; • Visibility and control of cloud apps as they are accessed; • Example policies: Authorization, encryption, tokenization, logging, alerting, authentication
  • 4. © 2016 Netskope. All Rights Reserved. Gartner’s Four Pillars of CASB 4 VISIBILITY DATA SECURITY COMPLIANCE THREAT PROTECTION
  • 5. What is driving the need for a CASB? 5
  • 6. Netskope © 2015, Optiv Security Inc. © 2015 There are 22,000 enterprise apps today (and growing).
  • 7. © 2016 Netskope. All Rights Reserved. 917 Apps Per Enterprise – It’s Easy to Buy and Use Them! 7 10% 70% 20% MostlyUnsanctionedSanctioned IT-led Business-led User-led
  • 8. © 2016 Netskope. All Rights Reserved. How Much of Your Business Data is in the Cloud? 8 30%
  • 9. Data Breaches Failed Audits = Fines, Penalties Loss or Theft of IP or Sensitive Data Loss of Reputation, Business Disruption © 2016 Netskope. All Rights Reserved. 9
  • 10. © 2016 Netskope. Company Confidential Four ways users interact with Office 365 10 Web Browser Mobile App App Ecosystem Sync Client
  • 11. © 2016 Netskope. Company Confidential Safe cloud enablement starts with covering all sources 11 Browser Sync Client Mobile App App Ecosystem • Are risky activities taking place? • Is sensitive data leaking? Where? • Do users with unmanaged devices have the same level of access as users with managed devices? • What is your exposure to threats such as malware or ransomware?
  • 12. 5 Highest-Impact CASB Use Cases For Office 365
  • 13. Use Case #1 Find sensitive data in OneDrive and SharePoint Prevent sensitive data leakage in Office 365 and to app ecosystem
  • 14. 14 1. API connection to enable eDiscovery of content in OneDrive and SharePoint 2. Inline deployment with ability to decode traffic to get real-time visibility and control over activities in Office 365 suite 3. Ability to associate personal and corporate cloud app account credentials 4. Ability to cover web browsers, OneDrive sync client, Office mobile apps, and apps in O365 ecosystem 5. Cloud DLP engine to identify sensitive content in and enroute to and from O365 CASB Requirements
  • 15. Use Case #2 Prevent sensitive data leakage via Outlook.com email
  • 16. 16 1. Inline deployment options to get access to Outlook.com traffic in real- time 2. Ability to decode details in real-time about activity and data connected to Outlook.com 3. Cloud DLP engine to identify sensitive content being sent in Outlook.com email body and attachments 4. Ability to cover both web browsers and mobile apps CASB Requirements
  • 17. Netskope © 2015, Optiv Security Inc. © 2015 Use Case #3 Provide granular access control to Office 365 for managed and unmanaged devices
  • 18. 18 1. Ability to classify managed vs. unmanaged devices 2. Ability to set granular policies based on device classification 3. E.g. “only allow full Outlook access for managed devices and force OWA for unmanaged” CASB Requirements
  • 19. Use Case #4 Find data exfiltration going from Office 365 to unsanctioned apps Source: AT&T Cybersecurity Insights
  • 20. 20 1. Inline deployment options to get access to both Office 365 and unsanctioned cloud traffic 2. Ability to decode details in real-time about activity and data 3. Ability to correlate events and perform anomaly detection 4. Need to see cloud usage details from browsers, OneDrive sync clients, and Office 365 mobile apps CASB Requirements
  • 21. Use Case #5 Find malware in OneDrive and SharePoint and quarantine it
  • 22. 22 1. Ability to scan SharePoint sites and OneDrive for various malware types and quarantine the malware 2. Ability to replace the eradicated malware with a tombstone file, letting the user know of the action taken CASB Requirements
  • 23. Netskope © 2015, Optiv Security Inc. © 2015 5: Find malware in OneDrive and SharePoint and quarantine it 3: Provide granular access control to Office 365 for managed and unmanaged devices 2: Prevent sensitive data leakage via Outlook.com email 4: Find data exfiltration going from Office 365 to unsanctioned apps 1: Find sensitive data in OneDrive and SharePoint and prevent sensitive data leakage in Office 365 and to app ecosystem
  • 24. Netskope © 2015, Optiv Security Inc. © 2015 THANK YOU!

Editor's Notes

  • #4: Official Gartner definition: CASBs are on-premises, or cloud-based, security policy enforcement points placed between cloud service consumers and cloud service providers to combine and interject enterprise security policies as the cloud-based resources are accessed. CASBs consolidate multiple types of security policy enforcement. Example security policies include authentication, SSO, authorization, credential mapping, device profiling, encryption, tokenization, logging, alerting, malware detection/prevention and so on.
  • #8: There are more than 900 cloud apps per enterprise, on average. If we look at how these applications make their way into the enterprise, about 10% are sanctioned by IT and include apps such as Office 365, Salesforce, Box, and a variety of business applications. IT often doesn’t know about the other 90%. Those fall under the Shadow IT category. Shadow IT is created by apps being brought in by users and lines-of-business, who today feel more empowered than ever because apps are easy to get and use. Whether sanctioned or Shadow IT, many of these apps has an important, and sometimes critical, role to play in the success of your organization.
  • #9: The real question, though, is how much of your data is in these apps? What do you think? Last year we did a study with Ponemon to examine the impact the cloud has on the probability and economic impact of a data breach. One of the question we asked IT and security professionals was how much business data they believe is in the cloud. Their (self-reported) estimate is about 30 percent. Whether it’s 30 percent or more than that, it’s only going up from here.
  • #14: Discover Cloud Apps and Assess Risk   Discovery is often the starting point for many of our customers. Netskope’s advanced Discovery can help you assess your risk, do due diligence on new cloud apps that you may be considering bringing into your organization, or perhaps getting your arms around what your cloud spend is.  
  • #18: Step 2: The next step is to understand how those cloud apps are being used. You need visibility into the details of what the activities are taking in account contextual details such as the app, user, specific activity, and device that was used.
  • #20: Netskope provides the most powerful cloud DLP solution. Not only does it support for than 3,000 data identifiers, 500+ file types and advanced features like proximity and Exact Match, but you can also uniquely apply our DLP and leverage deep context to scan content tied to a real-time activity for both sanctioned and unsanctioned apps as well as content that is resident in sanctioned apps.  
  • #22: This demo is the first phase of our Active Threat Protection, which is about finding and quarantining malware in sanctioned cloud apps. We recently announced Active Threat protection, supporting the ability to find and remediate malware and threats in real-time as they are uploaded, downloaded, or shared across unsanctioned or sanctioned cloud apps.  
  • #24: Here, in summary, are my 6 steps. I am confident if you follow these, you will have a safer cloud experience.