BEING MOBILE WITH WINDOWS 8.1

Transcription

1 BEING MOBILE WITH WINDOWS 8.1 OCTOBER 28, 2014 SLIDE 1

2 SPEAKERS INTRO #Name: D Hoker Gino #Function: Technology Expert # gino.dhoker@realdolmen.com #Blog: #Mobile: 0477/ Company: OCTOBER 28, 2014 SLIDE 2

3 AGENDA Governance Policy Enforcement tools Data Loss Prevention Rights Management Services Dynamic Access Control OCTOBER 28, 2014 SLIDE 3

4 GOVERNANCE What is IT Governance? Governance is the set of policies, roles, responsibilities, and processes that control how an organization's business divisions and IT teams work together to achieve its goals. Data governance Secure Infrastructure Identity and access control Information protection Auditing and reporting OCTOBER 28, 2014 SLIDE 4

5 POLICY ENFORCEMENT Security challenges Potential loss of sensitive data Rapidly evolving external threads Keeping safe without impacting users Flexibel tools for policy enforcement Data Loss Prevention Rights Management Services (RMS) Dynamic Access Control (DAC) Transport Rules OCTOBER 28, 2014 SLIDE 5

6 DATA LOSS PREVENTION What Identify, monitor, protect sensitive data through deep content analysis Process Mailbox Server policy evaluation Administrator DLP policy configuration Audit & incident data generation Contextual policy education Outlook policy in Outlook distribution Outlook OCTOBER 28, 2014 SLIDE 6

7 DATA LOSS PREVENTION Audit data Classification < > Rule details Katie, OCTOBER 28, 2014 SLIDE 7

8 RIGHTS MANAGEMENT SERVICES (RMS) DLP has identified sensitive information? Apply Rights Protection (RMS) What is RMS Safeguard sensitive information Persistent protection with the data Data in motion Data at rest Closer management of rights and conditions RMS scenario s AD RMS Azure RMS (Office 365) OCTOBER 28, 2014 SLIDE 8

9 AD RIGHTS MANAGEMENT SERVICES (AD RMS) Process AD RMS Information Author Recipient RMS service authenticates and authorizes RMS service logs user activity OCTOBER 28, 2014 SLIDE 9

10 AD RIGHTS MANAGEMENT (AD RMS) AD Rights Management features RMS sharing application for Windows and mobile platforms Office applications: Word, Excel, PowerPoint, Outlook Exchange Online and Exchange Server SharePoint Online and SharePoint Server File servers that run Windows Server and use File Classification Infrastructure (FCI) Other applications that support the RMS APIs OCTOBER 28, 2014 SLIDE 10

11 AZURE RIGHTS MANAGEMENT (AZURE RMS) Office 365 Rights Management features Exchange Online IRM Integration Protect and consume messages SharePoint Online IRM Integration IRM-protected document libraries Office IRM Integration Enables MS Office users to be able to IRM protect content OCTOBER 28, 2014 SLIDE 11

12 DYNAMIC ACCESS CONTROL (DAC) Domain-based Dynamic Access Control Enables administrators to apply access-control permissions and restrictions based on well-defined rules the sensitivity of the resources the job or role of the user the configuration of the device that is used to access these resources DAC Pillars Classification Access Control Auditing RMS Protection OCTOBER 28, 2014 SLIDE 12

13 DAC - CLASSIFICATION Identify data by using file classification Manual tagging by owner Tagging by applications Automatic tagging Example OCTOBER 28, 2014 SLIDE 13

14 DAC ACCESS CONTROL Control access to files by applying safety-net policies Central access policies based on file classification Expression-based access conditions for User claims Device claims File tags Access-denied assistance Example OCTOBER 28, 2014 SLIDE 14

15 DAC - AUDITING Central audit policies can be applied across multiple file servers Expression-based audits for user claims, device claims, and file tags Staging audits to simulate policy changes in a real environment OCTOBER 28, 2014 SLIDE 15

16 DAC - RMS PROTECTION Automatic Rights Management Services (RMS) protection for Microsoft Office documents Near real-time protection when a file is tagged Extensibility for non-office RMS protectors OCTOBER 28, 2014 SLIDE 16