Office 365 & SharePoint Connect 2019 Session

1. Keep control of your data
with Azure Information
Protection and Azure
Conditional Access
Bram de Jager
Lead Architect
delaware Netherlands

3. AGENDA
›Information Protection basics
›Demo
›What’s next
›Wrap-up

4. INFORMATION
PROTECTION
BASICS

5. Identity & access
management
Security
management
Threat
protection
MICROSOFT SECURITY PLATFORM

6. IN A WORLDWITHOUT BOUNDARIES, DATA
LIVES AND TRAVELS EVERYWHERE

7. Do you have a strategy to protect your most valuable
data?
Do you know where your sensitive data resides?
Do you have control of your
data as it travels inside and
outside of your
organization?
Are you using multiple
solutions to discover,
classify, label, and protect
sensitive data?

8. 88%
of organizations no longer have
confidence to detect and prevent
loss of sensitive data
of employees use non-approved
SaaS apps at work80%
85%
of enterprise organizations keep
sensitive information in the cloud
58%
Have accidentally sent sensitive
information to the wrong person
SENSITIVE DATA IS AT RISK

9. MICROSOFT INFORMATION PROTECTION
Across
Devices Apps Cloud services On-premises

10. DATA PROTECTION & DATA GOVERNANCE
GO HAND-IN-HAND
› Unified approach to discover, classify &
label
› Automatically apply policy-based actions
› Proactive monitoring to identify risks
› Broad coverage across locations
LabelDiscover Classify
Sensitivity Retention
→ Encryption
→ Restrict Access
→ Watermark
→ Header/Footer
→ Retention
→ Deletion
→ Records
Management
→ Archiving
→ Sensitive data
discovery
→ Data at risk
→ Policy violations
→ Policy
recommendations
→ Proactive alerts
Apply label
Unified approach
Monitor

11. Office 365
Information Protection
Windows
Information Protection
Azure
Information Protection
What
Where
How
MICROSOFT INFORMATION PROTECTION –
THEWAY ITWAS

12. What
Where
How
Office 365
Information Protection
Windows
Information
Protection
Azure
Information Protection
MICROSOFT INFORMATION PROTECTION –
GOING FORWARD

13. CONFIDENTIAL
Tag that is customizable,
readable by other systems,
and persistent.
It becomes the basis for applying and
enforcing data protection policies.
In files and emails, the label is persisted
as document metadata
In SharePoint Online, the label is
persisted as container metadata
WHAT IS A SENSITIVITY LABEL?

14. DEMO

15. DEMO NOTES
› Labeling clients
› Azure Information Protection client
› Azure Information Protection Unified labeling client
› Office 365 ProPlus native support for Sensitivity labels (Office 365 Unified Labels)
› Conditional Access for AIP
› Only supported with the Azure Information Protection client

16. BEFOREYOU START,A NOTE ON MIGRATE FIRST!

17. BEFOREYOU START, UNIFIED LABELING
NOT ACTIVATED

18. WHERETHE UNIFIED LABEL FEATURE IS
AVAILABLE TODAY?
Platform Application Availability
Windows Word, Excel, PowerPoint, Outlook Version 1910+
Mac Word, Excel, PowerPoint, Outlook Version 16.21.0+
iOS Word, Excel, PowerPoint Version 2.21+
Outlook Expected Q4 of calendar year 2019
Android Word, Excel, PowerPoint Version 16.0.11231+
Outlook Expected Q4 of calendar year 2019
Web Word, Excel, PowerPoint Expected Q4 of calendar year 2019
Outlook Web Access Expected Q4 of calendar year 2019
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-office-apps#what-sensitivity-label-
capabilities-are-supported-in-office-today

19. WHERETHE UNIFIED LABEL FEATURE IS
AVAILABLE TODAY?
Platform Application Availability
Windows Word, Excel, PowerPoint, Outlook Version 1910+
Mac Word, Excel, PowerPoint, Outlook Version 16.21.0+
iOS Word, Excel, PowerPoint Version 2.21+
Outlook Expected Q4 of calendar year 2019
Android Word, Excel, PowerPoint Version 16.0.11231+
Outlook Expected Q4 of calendar year 2019
Web Word, Excel, PowerPoint Expected Q4 of calendar year 2019
Outlook Web Access Expected Q4 of calendar year 2019
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-office-apps#what-sensitivity-label-
capabilities-are-supported-in-office-today

20. WHAT'S
NEXT?

21. SENSITIVITY SITE AND GROUP SETTINGS

22. DURING SITE CREATION OR AFTERWARD
CHANGE SENSITIVITY

23. DURING SITE CREATION OR AFTERWARD
CHANGE SENSITIVITY

24. NATIVE SUPPORT FOR OFFICE ONLINE

25. SENSITIVITY METADATA FIELD IN SHAREPOINT

26. WRAP-UP

27. MICROSOFT INFORMATION PROTECTION
Across
Devices Apps Cloud services On-premises

28. KEY CONSIDERATIONS
› HAVE CLEAR REQUIREMENTS!
› Research what devices do you need to support?
› Validate the known issues / limitations towards your devices!
› Where is your data located: online, on-premises, or on devices?
› What file types require protection?
› Choose between AIP labels or Office 365 Sensitivity labels (Unified Labels)
› Determine Sensitivity client: AIP, AIP UL, or native Office ProPlus Sensitivity Labels
› Start implementation…
36

29. MICROSOFT
INFORMATION
PROTECTION
MICROSOFT CLOUD APP SECURITY
Visibility into 15k+ cloud apps, data access & usage,
potential abuse
AZURE SECURITY CENTER INFORMATION PROTECTION
Classify & label sensitive structured data in Azure SQL, SQL
Server and other Azure repositories
OFFICE APPS
Protect sensitive information while working in Excel, Word,
PowerPoint, Outlook
AZURE ADVANCED THREAT PROTECTION
Identify advanced data related attacks and insider threats
OFFICE 365 DATA LOSS PREVENTION
Prevent data loss across Exchange Online, SharePoint Online,
OneDrive for Business
SHAREPOINT & GROUPS
Protect files in libraries and lists
OFFICE 365 ADVANCED DATA GOVERNANCE
Apply retention and deletion policies to sensitive and
important data in Office 365
ADOBE PDFs
Natively view labeled and protected PDFs on Adobe Acrobat
Reader
WINDOWS INFORMATION PROTECTION
Separate personal vs. work data on Windows 10 devices,
prevent work data from traveling to non-work locations
OFFICE 365 MESSAGE ENCRYPTION
Send encrypted emails in Office 365 to anyone
inside or outside of the company
CONDITIONAL ACCESS
Control access to files based on policy, such as identity, machine
configuration, geo location
Discover | Classify | Protect | Monitor
SDK FOR PARTNER ECOSYSTEM & ISVs
Enable ISVs to consume labels, apply protection
COMPREHENSIVE SET OF CAPABILITIES

30. PRIVATE PREVIEW SECURITY AND
COMPLIANCE PROGRAM
Want an early start with these new and
upcoming security and compliance
capabilities?
Nominate your business for our private previews
at https://aka.ms/spc19SecurityPreviews

31. SharePoint Client
Browser
▪ Must have SharePoint
community tool!
▪ Provides insights into
your SharePoint site or
tenant
▪ Uses the CSOM to
connect to SharePoint
2010/2013/2016/2019
and SharePoint Online
▪ https://github.com/bra
mdejager/spcb

32. @bramdejager
bram.dejager@delaware.pro
bramdejager.wordpress.com
QUESTIONS?