Compliance and eDiscovery with Office 365

© 2015 Hitachi Consulting Corporation.  All rights reserved. Proprietary and confidential.

Who am I?Slide subtitle

05/01/2023 2

Corey Roth is an Office 365 solution architect on the sales enablement team of Hitachi Consulting. Corey is an Oklahoma native and a graduate of Oklahoma State University. Based in Dallas, TX now, Corey can often be found speaking at major conferences, user groups, and other events. Corey focuses on cloud based technologies such as Azure and Office 365. He also has deep interests in Windows 10 and IoT. Corey is a six-time winner of the Microsoft MVP award in SharePoint Server.

Twitter: @coreyroth

Corey Roth

© 2015 Hitachi Consulting Corporation.  All rights reserved. Proprietary and confidential.

Agenda

Story RMS Compliance eDiscovery

Data Loss Protection

Questions

© 2015 Hitachi Consulting Corporation.  All rights reserved. Proprietary and confidential.

What did Bob’s company do?Slide subtitle

Disabled USB portsRemove optical drivesDisabled e-mail forwarding rulesBlocked access to facebookBlocked access to Gmail and Outlook

05/01/2023 10

Our information is now secure!

Wait…what?

Suggested Solution: RMSWhat is RMS?

A form of Information Rights ManagementUses Encryption and Enriched document permissions to protect sensitive data.Protects data “in-transit” and “at rest” (stuff that is being emailed, stuff that is sitting on a disk)

Rights Management is nothing new

What are the component parts?AD RMS Server – must be an AD memberAD RMS ClientVista – Windows 7 – Windows 8/8.1, Windows 10AD RMS ApplicationsOffice, Exchange/Outlook, SharePoint, Office 365

Templates – who can do what?

Forward Print

Reply

Extract

Full control

Edit rights

Reply all

View

SaveEdit

View rightsExport

Allow macros

Azure RMSProtects sensitive dataAt restIn transit

PersistentDesigned to work with Office 365, Exchange Online, and SharePoint Online

How do you manage Azure RMSLots of planningSecurity Groups and Mail Enabled Groups

Who is going to be in charge of the Tenant Key?Install RMS PowerShell (AADRM)Activate Rights Management in Office 365

Demo – Rights Management

What you may be doing today….SP/OneDrive

Skype for Business

Exchange

Social, IM (FB, Twitter, etc.

Third Party Archives

Compliance and Governance

Solutions

• Data duplication

• Non native end user experience

• Incomplete information

• Higher cost

• Fragmented policy and experience

O365 Compliance…your peace of mind

Office 365SP/OneDrive

Skype for Business

Exchange

And more…

Compliance Center

SPO/OneDrive

EXO

Archiving eDiscovery DLP AuditingDevice Protectionand more…

Social, IM (FB, Twitter, etc.

Third Party Archives

And more…

Partner Ecosystem (APIs, Experiences)

AlertingIngestion Review Auditing and more…

YammerSkype

Compliance CenterOne experience across all

workloads (EXO, SPO, Skype for Business, etc.)

Consistent Governance(Preservation, Delete,

Device Protection, DLP)

Insights and Alerts for Security and Compliance

Cloud Connect On-premises can still have compliance features in the cloud Cloud based Compliance Center, Auditing, Analyze with Equivio, DLP

and more… Pure On-Premises

…and not just for data in the cloud.

Exchange SharePoint• O365 Archives grow with your data• Public Folder Search and Preservation• Search Permissions Scoping• Search with Infix and Suffix wildcards• Audit Reporting• Export to Analyze with Equivio

• Document Deletion • Audit Reporting• Search with Infix and Suffix wildcards• Unlimited Concurrent Searches

eDiscoveryScalable, complete, built in search

Search and Refine with Compliance Search

One search for all data types

Export to Review and Legal Partners

eDiscovery FeaturesAnalyze

Equivio enabled insights

Download results of a search from SharePoint, OneDrive, Exchange, and file shares whether on premises or in Office 365.

EDRM XML supported formats

Can export to legal or review partners

Export the smallest amount of data

Themes to understand what you’re looking for

Pivots and grouping to enable complex and powerful searches

Predictive coding to cull large amounts of data

ExportQuery and Hold

Search and Preserve

Unlimited, Concurrent searchesProximity search, rich query syntax, hit highlighting, infix and suffix wildcards

Granular Search Permissions Hold mailboxes, sites and queries with no impact to end users

Indexing is immediate and full fidelity with built in search

DEMO - eDiscovery

DLPSensitive data analyzed using built in search

Define policies for sensitive data

Unified policies for all data types

End users empowered with Policy Tips, contextual experiences that ensure productivity

All activity is audited and reported

Protect and Educate

Policy Tips to educate end users

Policy Tips in OWA, Outlook, SharePoint and OneDrive and Office Clients (Word, PowerPoint, Excel)

Malicious users are audited and good users are protected

Auditing and Reporting of all DLP activity

Identity and Monitor

Policies govern to flow sensitive data

Index sensitive content as it arrives in the service

Contextual classification based on Windows FCI system or 3rd party system

Select DLP policies from a template Create or extend custom policies to integrate with incident management or alerting systems

O365 DLP Features

New DLP sensitive information types added to Exchange

Extension of DLP capabilities to SharePoint

PolicyTips added to Excel and other Office applications

Policy Tips across Office experiences

How are you protecting your data?