Windows 10: Introducing new Microsoft 365 security center and compliance center

Brink · Jan 29, 2019

In the past few years, we have been heavily investing in the security and compliance areas to help organizations safeguard their digital estate and achieve compliance. According to recent customer research, we heard that while security and compliance are both top of mind areas in data protection, most organizations have different teams working in these two spaces. To empower your security and compliance professionals to work more efficiently in dedicated platforms, we are excited to announce the availability of Microsoft 365 security center (security.microsoft.com) and Microsoft 365 compliance center (compliance.microsoft.com).

The new specialized workspaces enable your security and compliance teams to have centralized management across your Microsoft 365 services, bringing together Office 365, Windows 10, and Enterprise Mobility + Security (EMS), with several Azure capabilities.

In both specialized centers, you can easily find actionable insights, alerts, and scores to help you understand your security and compliance risks and leverage artificial intelligence to strengthen your security and compliance posture. You can find more details about each center in the following paragraphs.

Microsoft 365 security center

The new Microsoft 365 security center provides security administrators and other risk management professionals with a centralized hub and specialized workspace that enables them to manage and take full advantage of Microsoft 365 intelligent security solutions for identity and access management, threat protection, information protection, and security management. With it they’ll gain the visibility, control, and guidance necessary to understand and act on the threats that their organization is facing today, have faced in the past, and may face in the future.

This new workspace is organized around the products that make up Microsoft Threat Protection by rendering them in a completely new way, one that’s focused on the entities that our customers must secure across their entire digital estate. We have consolidated the experience across Microsoft 365 products and designed around the concepts of Identity, Endpoints, User Data, Cloud App and Infrastructure, and not the underlying products that help secure them. This enables end-to-end security insights and management and paves the way for a comprehensive Microsoft 365 security solution.

In addition, the Microsoft 365 security center enables organizations to reduce security risks by providing them with the tools necessary to assess their current and historical security postures and to determine the appropriate set of actions to take to mitigate future risks. These tools consist of rich dashboards, reports, and interactive experiences like Microsoft Secure Score, each of which are designed to provide security administrators with the visibility, controls, and guidance they need to drive maximum security posture improvements. Microsoft 365 security center also provides experiences for security operators (SecOps) through the integration of incident response capabilities such as a centralized alerts view and hunting capabilities which can be used to perform ad-hoc investigations.

Microsoft 365 compliance center

The new Microsoft 365 compliance center is a specialized workspace for your compliance, privacy, and risk management professionals. In the new center, you can assess your compliance risks through Compliance Manager, protect and govern your data with sensitivity and retention labels, respond to regulatory requests like Data Subject Requests, and access to more other compliance and privacy solutions.

The new experience helps you reduce compliance risks and protect your digital estate more easily and effectively with three new insights:

With the Compliance Manager integration, Microsoft 365 compliance center provides you with visibility into your compliance posture against key regulations and standards like the GDPR, ISO 27001, NIST 800-53, and more on the homepage. You can then perform risk assessments and follow step-by-step guidance to enhance your compliance and privacy controls.

Additionally, to help you label data more accurately, the new Microsoft 365 Label Analytics preview can enable you to analyze and validate how sensitivity and retention labels are being used beyond your Office 365 workloads.

We also brought in the Microsoft Cloud App Security (MCAS) insights into Microsoft 365 compliance center to help you identify compliance risks across applications, discover shadow IT, and monitor employees’ non-compliant behaviors.

We will be gradually rolling out the new experience from the end of January, and the rollout will be completed worldwide by the end of March. Once this new experience is rolled out, you can access it by visiting security.microsoft.com or compliance.microsoft.com or from the Microsoft 365 admin center.

You can learn more about the new Microsoft 365 security center and Microsoft 365 compliance center in our technical supporting document.
Click to expand...

Source: Introducing the new Microsoft 365 security center and Microsoft 365 compliance center - Microsoft Tech Community - 326959

:)

Brink · Jan 29, 2019

New advanced security and compliance offerings for Microsoft 365

When we first introduced Microsoft 365 bringing together Office 365, Windows 10, and Enterprise Mobility + Security (EMS), our vision was two-fold: 1) deliver a great experience for customers to empower employee creativity and teamwork, and 2) provide the most secure and easy to manage platform for a modern workplace. We’ve been thrilled with the response, as customers like BP, Gap, Walmart, and Lilly have contributed to triple-digit seat growth since its launch.

A big driver of customer adoption of Microsoft 365 is the need for security and compliance solutions in an age of increasingly sophisticated cybersecurity threats, as well as complex information protection needs due to regulations like the General Data Protection Regulation (GDPR). To help address these needs, we are introducing two new Microsoft 365 security and compliance offerings that will be available for purchase on February 1, 2019.

Identity & Threat Protection—This new package brings together security value across Office 365, Windows 10, and EMS in a single offering. It includes best of breed for advanced threat protection services including Microsoft Threat Protection (Azure Advanced Threat Protection (ATP), Windows Defender ATP, and Office 365 ATP including Threat Intelligence), as well as Microsoft Cloud App Security and Azure Active Directory. This offer will be available for $12 per user per month.*

Information Protection & Compliance—This new package combines Office 365 Advance Compliance and Azure Information Protection. It’s designed to help chief compliance officers perform ongoing risk assessments with a compliance score across Microsoft Cloud services, automatically classify and protect sensitive data, and efficiently respond to regulatory requests leveraging artificial intelligence (AI). This offer will be available for $10 per user per month.*

All the value in these new offers remains available as part of the full Microsoft 365 E5 suite, which also includes business analytics and our enterprise grade phone system and audio conferencing. The full Microsoft 365 E5 suite includes not only security and compliance capabilities, but also offerings in business analytics featuring Power BI, and communications with audio conferencing and advanced phone system value. Additionally, customers can continue to purchase security and compliance components on a standalone basis.

There are no price increases or service impacts associated with any of these changes. The new Identity & Threat Protection and Information Protection & Compliance offerings are designed to provide customers with simpler purchase, deployment, and adoption of these security and compliance workloads.

As we speak to customers about the future of work, we know security and compliance are some of the highest organizational priorities and we hope these new offerings will help them achieve their security and compliance goals.

*Pricing for Microsoft 365 E3 customers before volume discounts.
Click to expand...

Source: Introducing new advanced security and compliance offerings for Microsoft 365 - Microsoft 365 Blog

Tweet

— Twitter API (@User) View on Twiiter

Brink · Jan 29, 2019

New in Office 365 security and compliance - June update

Recent updates for security and compliance include enhancements to Advanced Threat Protection, eDiscovery, Advanced Data Governance, Advanced Security Management and expanded support for Windows Information Protection. Read on to learn more about these updates.

Enhancements to threat protection visibility and controls

Office 365 Exchange Online Protection (EOP) and Advanced Threat Protection (ATP) were designed to keep your organization protected against cyber-attacks while supporting end-user productivity. The Office 365 team continues to enhance both EOP and ATP by offering deeper insights and more flexible controls. This month, we are introducing the following new capabilities:

Threat Protection status report—New reporting for ATP and EOP that adds visibility into malicious emails detected and blocked for your organization. This supplements the recently introduced reports in the Security & Compliance Center for ATP Safe Attachments.

Threat Protection status report.

Enhanced quarantine capabilities—Now all emails classified as malware from both EOP and ATP are quarantined. This builds upon the existing quarantine experience by allowing administrators to review and delete emails from quarantine.

New ATP Safe Links Policy features—Four new features build upon the Safe Link policies.

Per-tenant block list—Provides the administrator the ability to block specific URLs.

Email wildcarding for domains and handles—Enables you to save time by writing partial domain/handle names.

Split Safe Links policies—Allows Safe Links policies to be customized for specific user lists in the organization, including groups, individuals and divisions.

Expanded character limit for URLs—Enables blocking/allowing URLs with longer character lengths.

Safe Links Block URL list.

Additional details on these new features can be found in the Microsoft Tech Community, as well as on the EOP and ATP product pages. EOP is offered across our enterprise E1, E3 and E5 suites. ATP is offered as both a standalone SKU or as part of E5.

New features streamline your compliance process using Office 365

Businesses around the world must be able to keep and protect important information and quickly find what’s relevant to continue to meet legal, business and regulatory compliance requirements. At Microsoft, we know how demanding and complex compliance can be and have recently released several new eDiscovery and Data Governance features in Office 365 to support your compliance needs. These features include:

Optical character recognition in Advanced eDiscovery—Extracts text from image files or objects within the files, significantly reducing the amount of manual remediation work required to analyze image files.

Rights management (RMS) decryption in Office 365 eDiscovery—Automatically decrypts RMS-encrypted email messages at export time when you choose the MSG Export option.

Unified case management—Provides a consistent user interface spanning the eDiscovery capabilities in Office 365, from core to advanced, which helps to reduce potential human errors by streamlining eDiscovery case definition and eliminating several steps in the process.

Unified case management in Advanced eDiscovery.

Visit the Microsoft Tech Community for more details about the new eDiscovery features. Unified case management and RMS decryption are included with Office 365 E3. Optical character recognition is included with Advanced eDiscovery in E5.

Announcing general availability of Supervision capabilities in Office 365 Advanced Data Governance

Many organizations have the need to perform supervision of employee communications. This need stems from internal security and compliance guidelines, or from regulatory bodies such as the Financial Industry Regulatory Authority (FINRA). In both cases, failure to have a demonstrable supervision process in place could potentially expose organizations to liability or severe penalties.

To address this need, we’ve released the new Supervision feature in Office 365 Advanced Data Governance. Supervision covers not only email communications, but also third-party communications streams, such as Facebook, Twitter, Bloomberg and many more. Visit the Microsoft Tech Community for more details about the general availability of Supervision.

Supervision policies in Office 365 Advanced Data Governance.

Supervision is part of Office 365 Advanced Data Governance, which is available as part of Office 365 E5 or the Office 365 Advanced Compliance SKU.

Windows Information Protection now supports Office desktop applications

In August, we announced our support of Windows Information Protection (WIP) for Office mobile apps on Windows tablets and phones, to help prevent accidental business data leaks while letting users maintain control over their personal data by designating content as “work” or “personal.” We’re pleased to announce we have expanded support for WIP to include the Office 365 ProPlus desktop versions of Word, Excel, PowerPoint, Outlook, OneNote and Skype for Business. This will help provide more comprehensive protection of your business data on Windows 10 devices. To read more about WIP, check out our Microsoft Tech Community blog.

ZEi8D1J9gh8

SIEM connector—now available for Office 365 Advanced Security Management

A year ago, we announced a way for you to get greater visibility and control over Office 365 with Advanced Security Management (ASM). Since then, we have added new features to help you better determine shadow IT activity. We also enhanced control over third-party apps connected to Office 365. After these updates, we started hearing that some of you were looking for a way to export alerts to other systems that are integrated into your existing workflows. Today, we are releasing a solution that supports centralized monitoring of ASM alerts with your security information and event management (SIEM) software. Integrating with an SIEM allows you to better protect Office 365 while maintaining your organization’s security workflow, automate your security procedures and correlate between your cloud-based and on-premises events.

There is no additional cost for an SIEM connector for ASM; you just need to have Office 365 E5 or the ASM add-on. To learn how to setup the ASM SIEM connector, please read “SIEM integration with Office 365 Advanced Security Management.”

Configuration screen for ASM SIEM agent.

Join the Security, Privacy and Compliance Tech Community

These new features help broaden and enhance the scope of security and compliance capabilities within Office 365. Join our Security, Privacy and Compliance Tech Community to further evolve your organization’s security and compliance with these services and learn and contribute to security, privacy and compliance best practices. The Tech Community is a great resource to communicate and learn from your peers—as well as offer your insights on the growing importance of security, privacy and compliance.

—Office 365 team
Click to expand...

Source: New in Office 365 security and compliance - June update - Office Blogs

See also: New to Office 365 in June - classroom experiences in Microsoft Teams and more - Office Blogs

Brink · Jan 29, 2019

Upgraded Microsoft Trust Center adds rich new content

A little over a year ago, we launched the Microsoft Trust Center at www.microsoft.com/trustcenter, which unified trust-related resources across our enterprise cloud services. This week, we launched a completely redesigned and greatly expanded site with new content including EU General Data Protection Regulation (GDPR) guidance, audit reports, and security assessments.

The Trust Center is an important part of the Microsoft Trusted Cloud initiative and provides support and resources for information professionals, as well as the legal and compliance community. The Trust Center offers a rich set of resources, including in-depth information about security, privacy, and compliance offerings, policies, features, and practices across our cloud products, including Azure, Dynamics 365, Office 365, Power BI, Visual Studio Team Services, and Windows Server 2016. Each content area is supplemented by a curated collection of hundreds of the most applicable and widely-used resources for each topic.

New enhancements to the Trust Center include:

Access to protected content, including SOC and ISO 27001 audit reports, certifications, and product security assessments, integrated into the Trust Center pages through the Service Trust Platform, which is available to customers with an active or trial subscription to one of Microsoft’s business cloud services.

A GDPR homepage that will serve as the company’s main resource for customers on the road to GDPR compliance, including guides to how some of our existing products and services, like Azure, Dynamics 365, and Office 365 can help you with the solutions you need to tackle each step of GDPR compliance.

Information and guidance specific to key organizational roles, including business managers, tenant admins or data security teams, risk assessment and privacy officers, and legal compliance teams.

New content areas, including resources for accessibility compliance, cybercrime, and industry-focused pages on finance, health, and media.

We are committed to providing you with guidance, documentation, and support you need to meet your security, privacy, and compliance goals. We will continuously improve the Trust Center to help make your job easier.

Visit http://www.microsoft.com/TrustCenter
Click to expand...

Source: https://blogs.microsoft.com/microsof...h-new-content/

Windows 10: Introducing new Microsoft 365 security center and compliance center

Introducing new Microsoft 365 security center and compliance center

Introducing new Microsoft 365 security center and compliance center

Introducing new Microsoft 365 security center and compliance center

Introducing new Microsoft 365 security center and compliance center - Similar Threads - Introducing Microsoft 365

Security Center

Security Center

Introducing the new Twitter Transparency Center

security and compliance center quarantine

Microsoft 365 Security Center reaches general availability

New advanced security and compliance offerings for Microsoft 365

Security Center

Introducing the new Microsoft Edge IT Center

Introducing Windows Defender Security Center