Skip to main content

Cloud

Boosting Cloud Security in Office 365

Microsoft has been spearheading the security campaign across cloud services. This week has been in focus with announcements of new capabilities affecting SharePoint Online (SPO), Email, and customer controls. I’ve been involved in numerous customer strategy sessions where similar concerns were raised. It is becoming increasingly clear that customers are expecting higher level of security controls across all Office 365 workloads. The vision has always been to extend these controls to services beyond email.

ExtendDLP1Data Loss Prevention (DLP) has been part of Exchange since 2013. In this post I explain how DLP feature extends within SPO and OneDrive for Business (OD4B). Last year DLP was added to SPO, where it provided capability to find sensitive information by searching and querying the data. This helped organizations to surface sensitive content, put them on hold for legal benefits, and take manual actions (like export). In Exchange, it provided with policy tips and notification emails. It is this capability that is now being extended to SPO and OD4B which in turn means greater proactive control over sensitive data.

These policies include simple “if-else-then conditions” and actions. It also provides preconfigured templates to start from. Users get real time notification if working within the context of SPO and OneDrive for Business

ExtendDLP2

Within SPO and OD4B it will detect if the user is sharing content externally and provide the user with policy tips. Furthermore it’ll go one level deeper by scanning for document metadata.

ExtendDLP3

Admins will get built in reports for incident and tracking

ExtendDLP4

If until now you were on the edge, concerned with the SPO security capabilities then hang on just a bit more until second quarter of 2015 when it rolls out as public preview.

Image source: Office blogs

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.