SPTechCon - Securing Your SharePoint & OneDrive Online Configuration
Download as PPTX, PDF0 likes150 views
The document discusses security strategies for Microsoft OneDrive for Business and SharePoint Online, highlighting the importance of managing user access and preventing data leaks. It details various risks and shares insights on controlling external sharing, auditing, and using tools like Azure Active Directory for identity management. Additionally, it presents updates to the SharePoint online experience and introduces new features aimed at enhancing security and collaboration.
SPTechCon - Securing Your SharePoint & OneDrive Online Configuration
- 1. Securing your OneDrive for Business and SharePoint Online Configuration Adam Levithan November 13, 2017
- 2. Community Member Since 2007 @collabadam Adam Levithan Senior Product Manager Secure Collaboration Copyright 2017 Exostar LLC | All Rights Reserved 2
- 4. Agenda
- 5. Hub for TeamworkCo-AuthorConnect Across the Organization Intranets & Content Management Email & Calendar TeamsOffice AppsYammerSharePointOutlook Office 365 Groups Single team membership across apps and services Microsoft Graph Suite-wide intelligence connecting people and content Security and Compliance Centralized policy management
- 6. File Share vs. Collaboration
- 7. Customers are sharing more than ever
- 9. MALICIOUS INSIDER ACCIDENTAL DATA EXPOSURE MALICIOUS OUTSIDER 59% 23% 14% SOURCE OF BREACH DATA – 2013-2017 – breachlevelindex.com How Do Data Leaks Happen?
- 10. Things to Consider Known Vulnerabilities • Enable business apps • Block “bad” apps • Limit app functions • Limit file types • Block websites • Exploits • Malware Unknown Vulnerabilities • Detect Malicious websites • Bad domains • Stolen credentials • Dynamic analysis • Static analysis • Attack techniques • Anomaly detection • Analytics
- 11. 12 SharePoint Office 365 Azure E3 E5 EM+S E3 EM+S E5 AAD Free AAD Basic AAD Premiu m
- 12. Agenda
- 13. Putting the security puzzle pieces together Originally used at www.metalogix.com
- 14. Office 365 admin center Security & Compliance Center SharePoint admin center Microsoft PowerShell OneDrive admin center
- 17. Control users Manage Restrict Conditional access Granular policies Prevent
- 18. Intuitive sharing controls with flexible policies for internal and external sharing Flexible sharing controls for targeted scenarios alerts of suspicious behavior using Advanced Security Management Minimize risk with secure external sharing without sign-in
- 21. Actionable insights and management control
- 25. Demonstration • SharePoint Admin Center • OneDrive Admin Center
- 26. If I were to start over: Use Groups Apps One identity Federated resources Loose coupling Azure AD is the master for group identity & membership Office 365 services extend with their data Service notify each other of changes to a group Attributes Flow User creates new group for teamwork Group experience populated in app of choice Group identity created in Azure Active Directory
- 27. Agenda
- 30. Are you sure you want to restore your OneDrive? Restoring your OneDrive to 8/12/2017 3:49:02 PM will revert 2300 changes. Restore Cancel
- 31. 2013 2014 2015 2016 2017 SharePoint Online Modernize the SharePoint Online admin UX Add new settings for new features New Office 365 admin centers Release the server admin experience to Office 365 SharePoint Server
- 35. 2017 Late 2018Early 2018
- 36. Limited browser access scoped at the site collection level SharePoint Migration Tool (Preview) Idle session sign out (Preview) New Admin Experience for Sharing ControlsPreservation policies (Available Now) Secure external sharing without sign-in Multi-Geo Capabilities with OneDrive (Preview) SharePoint Admin Center (Preview) Service-level encryption with customer key (Available Now) File Restore (Preview)
- 37. Questions Adam Levithan @Collabadam Adam.Levithan@Exostar.com Please Complete our Survey https://www.surveymonkey.com/r/T7KM88X
Editor's Notes
- #6: Lift & Shift Upgrade Power User/Site Owner lift & shift from PC Multi-Prong Site Collection Owner(s) Reorganization from PC Site Collection Owner(s) Reorganization from Server IT Assisted - Multi-Prong Distributed
- #8: OneDrive for Business and SharePoint also work hand-in-hand over the lifecycle of a file. START BY CREATING A FILE IN YOUR PERSONAL FILE SHARE AND STORAGE (ODB) NOW COLOBRATE BY MOVING IT TO SHAREPOINT TEAM SITE (NOW STORED IN ODB) NOW PUBLISH IN A LARGER ORG SP SITE OR MOVE TO SOCIAL SHARING WITH YAMMER OR TEAMS
- #9: 8
- #11: 10
- #14: Lift & Shift Upgrade Power User/Site Owner lift & shift from PC Multi-Prong Site Collection Owner(s) Reorganization from PC Site Collection Owner(s) Reorganization from Server IT Assisted - Multi-Prong Distributed
- #29: Lift & Shift Upgrade Power User/Site Owner lift & shift from PC Multi-Prong Site Collection Owner(s) Reorganization from PC Site Collection Owner(s) Reorganization from Server IT Assisted - Multi-Prong Distributed
- #32: 31
- #33: 32