Welcome to Office Mechanics
Coming up on today's show, if you are used to being able to work from any device really
with protection anywhere we're going to look at how we're are evolving the story around
information protection, now we're also going to look at some of the new vision items we're
producing as part of Office 365 and beyond in the Microsoft Cloud
Microsoft Office
Office Mechanics
So I'm joined by Rudra Mitra, welcome
Great to be here Jeremy
So you run the Office 365 information protection team at Microsoft. How does your team think
about this and what approach are you actually taking with
your team?
So we think about things in three ways we think about being pervasive which is always
being there present protecting and being compliant on the data. We think about being transparent
so we know what's going on with the data both within the organizations that bet on Office
365 as well as being transparent to the organizations with what's going on in the cloud with their
data operationally security wise and we think about being people-centric so trying not to
make it as hard a line between IT and workers but really involve workers with the policies
and the security that IT is trying to put in place. So those are the three.
So let's start with the notion of pervasive what are we doing there?
With the volume of data that we're dealing with it's really hard to think about applying
policy and security after the fact you really want to get in and apply when this data is
being created when it's in the ecosystem so that you don't have to post-processes it so
to speak
so what I have for you here is, we've had compliance center out for a little bit but
here you go in and manage your compliance policies across 365 which means across email
across SharePoint across your instant messaging from Lync for business as well as applying
to other services as they come online
So that's our new compliance center these are all brand new things that we can see here
and I know that even beyond that we've done a lot with managing mail flow also on the
advance threat side of the house
That's right so one of the newest things that's going on right now is the fact that threats
are much more targeted at people and they are much more targeted to organizations and
so instead of bulk spam and bulk mail now you'll see threats that are very targeted
and will detonate post fact you'll get a link it'll pass your spam filters but after its
done that you'll then see a detonation on the payload or it will go rogue after that.
Let me show you some very new stuff that we've built for this called advanced threat protection
So here you're seeing me show you save attachments and safe links here you go set up what you
want to happen when a link comes in an email or when an attachment comes in and quickly
Jeremy I'll show you IW experience of this, if we could switch this to the iPad, think
of this as the worker who's got the mail and you know the IT person set it up and I'm looking
at a mail that was sent to me looks pretty innocuous and think about this as being any
device, Android, iPad, mail client, so I'm going to click on the Bing link, Bing loads
up no problem, fast, but the next link I'm going click is something that came in through
our spam filters as looking just fine I go ahead and click on it and the spammer went
to changed it after the fact we block you any device you've seen warning error and you
decide not to go through.
So even if I redirect that to a new forwarding URL later we'll be able to protect the user
from malicious content but beyond all of that we've also evolved the story and we're continuing
to evolve that even with some recent things around risk management because it goes beyond
just protecting the information but also from a risk management perspective organizational
search there's a lot that we're doing there as well to improve transparency right?
That's right. So transparency is the second pillar of what we're doing there's a lot going
on here but here's a very early look at again a new thing that we're building. So we call
this audit activity and what you're seeing here is that I've done a search over the last
seven days and in the bottom of the pane, it's a little bit small to see, let me zoom
this out. You can see what we're looking at is an activity feed, a trace of what happened
within this organization, who downloaded the file, who opened it, who opened the file,
who logged in, you're seeing this from the client, you're seeing this from different
devices. And the point of this is, now an IT administrator, a business decision maker
can go look at this data to see what exactly is sort of happening. Again transparency in
action.
The other cool think with this is you can also use the APIs and tie into that information
if you've got your own applications whether they're line of business or you're a third
party app developer all of these things you can do to actually extend and use those APIs
in that audit stream to service that however you like to service it.
That's exactly right; that's exactly right.
So it goes even beyond that so we actually have a lot of updates and something brand
new round organizational search to show as well
That's right.
To really continue on transparency and what we're doing there
That's right Jeremy, so the next new thing again to show here is we've had e-discovery
in email and in Sharepoint for some time now so I've done an e-discovery search the new
thing to show you here is if you look at this.
Let me again zoom in a little bit so you can see this better you see that I've done a search
here for Facebook and Tweets.
Okay
This is data that is not naturally SharePoint data, OneDrive data or email data so what
I'm showing for you here is we brought in data from external source sources.
Wow!
If it's relevant to a company
Okay.
And we've parked it in the same sort of storage that we have for other stuff and let me know
show you the search that have gone through and done for this and you can see that the
Facebook data is up on the screen where a search for Facebook and some other words we
found that data we've stuffed into a mailbox, we've figured it out so when I search for
Facebook I can actually see that it's highlighted a search for that so now
external data sources are also showing up in 365.
So that's huge, that means when you think about the vision going forward it's not just
about the cloud of Office 365 or the Microsoft cloud it's really retuned to other services
and being able to pull relevant information for us
So let me show you this tech that I talked about being integrated with 365 so here what
I've have done is I have integrated into the system here all of the Enron public files
that are out there that was about thirty thousand documents I've imported them in I've run Equivio
on this this tech and we can see it it's telling me that to get to what I searched for which
was actually 'agreements' and 'drafts' two keywords I look for you would typically go
to a lot of keyword searches and kinda hunt and peck through documents. Here it saying
that if I can look at the first 20 documents which the machine will suggest to me I can
go get about eighty percent accurate, 84.6 percent accuracy that's found all the relevant
documents for the two terms I was looking for 'draft' and 'agreement'. But let's say
I'm not satisfied with that and I want to go a little bit higher I want to be not just
eighty-four percent accurate I want to go be ninety percent accurate.
Well what I can do, I could bump that up and now I see that I have to review 25 percent
of the documents to get that level of accuracy so it's giving
me a trade-off of time versus accuracy and really you can imagine this in the legal vertical
in the internal compliance vertical being very relevant where you can now and in case
law is coming through now which is you can say is it practical for me to go through and
review a whole bunch more documentation or have I satisfied a sufficient and necessary
need that's a pretty powerful set of tech that's built into 365 integrated into what
you have today you'll find you don't have to go to a bunch of other integration you
get this machine learning right out of the box.
Really, really cool stuff there but I know that it actually goes beyond this into the
user side because we agree and we think that the user should be part of this a part of
the information protection story part of that is really empowering them and really educating
them to be part of the equation so what are we doing around that?
So Jeremy we are working on I a set of features here that I'm going to show you around mobile
device management and DLP and really the focus that I was talking about is to reduce the
compliance and security tension with workers and really involve them and educate them in
the process so here in the compliance center gone into device management again integrated
across the left side navigation and here I'm going to go in and look at my list of managed
devices so typically with BYOD you'd see some tension around, can I put corporate data on
my personal device and back to this iPad, if I could show you this, here when I open
up my mail you can see that I have two profiles, this is my kids device, and it also happens
to be the one that I keep my corporate data on that might make IT, you know, worried about
where the data is going so now we've gone from where IT would scrub the device and remove
all the data which would include personal data and maybe cut organizational data to
where I can now selectively wipe if I lose this device or there's a compromise I can
go back through the admin console that I was showing you earlier and here I'm going to
issue a selective wipe and we'll see if this comes through and we need to do this not only
because of IT requirements there are countries where there are legal needs there is the rule
of the there the current place where you have to say an I will remote wipe the device but
I'm not gonna do that for your personal data that's just not allowed so you can that if
we're still looking at the iPad that the personal data is still there so Asaf's kids who set
up this iPad you can see that that photograph is still there his personal mailes are still
there but the corporate data profile that was there that's gone. So that's super powerful
both for meeting compliance needs for some countries as well as IT feeling like they
can a protect a device without interfering with your personal data really did a great
job with that.
Great, even beyond that we're doing a lot in terms of preventing data loss and that
story continues to grow as well in term of all the different things that we can do within
Office 365 at the moment that will continue to get bigger and better right?
That will. So we've had data loss prevention for a while in mail now we're extending that
to Word, Excel, and PowerPoint client. So that's brand new for Office sixteen and at
the same time we're going to see that you'll find DLP show up in SharePoint so your documents
in SharePoint are protected, Exchange are protected and all these other clients.
Very cool. So let's have a quick look at what that experience looks like.
So you can imagine that this is my personal document library notice as I blow this up
that there are certain interesting icons that are now present this is again very very new
it's in private preview you can see that these new icons that are marking these documents
DLP has gone through in SharePoint and said there's a credit card number in this document
my IT admin set that up as policy that they did not want this type of document flowing
through the organization it sequestered it it hasn't destroyed the data it's kept it
but it has moved it and if I click on this you can see that I'll get a policy tip that
says I have shared outside the organization a restricted piece of data which is a credit
card let me show you one more thing
Okay.
So not only is this in SharePoint as I talked about I'm going to open that same document
up and it's an Excel file so you expect it to open up in Excel this is brand new Excel
16 and you can see that I get the same policy that is applied to the data flowing down through
the client and educates me telling me that there's sensitive data I should not have credit
cards in this organizational document
Very cool. So even at the app's themselves as people are offering their spreadsheets
we'll be able to see what's going on there and if they're entering credit card information.
So we've seen quite a bit we've seen all the things that we're doing around mobile device
management, around protecting files, really at the roots and data loss prevention even
some of the stuff around risk management and organizational search with the exciting new
Equivio things plus all the auditing controls that we have to track it all where is all
this going?
We're going to think about unified compliance unified policy along those three pillars applied
to data not only in 365 but across all kinds of other data that you can bring into the
system and then we're going to have you compliant and secure with the same policies across all
those
Love it so we have to think bigger than the Office 365 Cloud and even the Microsoft Cloud
cause it's going to go to all the different services that you're using an everywhere data
goes we want to be able to protect it. That's about all the time we have for this show today
and course you find information on the Office blogs, as it's released, thank you all for
watching and goodbye for now.
Thank you.