Coming up,
I'll show you the Office 365 secure score.
A new tool that helps you automatically assess the security posture
of your Office 365 account, data, and devices.
And discover the security features and best practices that are available to you to implement
based on your overall security and productivity goal.
I'm going to cover three key features of the experience.
Your score, taking action, and tracking progress.
If you are authenticated to Office 365 as a global administrator
you can access the secure score by going directly to securescore.office.com.
There's no config necessary, no setup, it just works.
Now you need to be a global admin for your organization for now,
but soon you'll be able to access the experience with any kind of administrative role.
The first time you log on to experience,
your scores has already been calculated and is ready for you to review.
The score is calculated based on the controls you can configure,
versus what you have configured.
Now the numerator of your score is the sum of the security controls
that you fully or partially meet.
You've earned those points.
And the denominator represents the number of points that you can possibly earn.
Given the set of features that you have available.
In this case, I've earned 93 points
worth of security value
and could go all the way up to 243.
In addition to understanding your score,
you can also get some insight into how you stack up against
other Office 365 customers.
The score comparison shows your score
next to the average of all organizations that are in this service.
Now this average seems low, but there are millions of organizations
of all types size and sophistication that are included in that calculation.
You'll also notice the target score here.
Note that this number is higher than your denominator
and this is because it includes all controls whether you currently have access to them or not.
So this shows you,
for any given set of selected controls, what your score could be
if you did all those actions.
The description says "Balanced" at the moment.
You can reduce the number of actions by sliding your slider to the left.
And as you move to the right more action items appear in the queue.
The action item becomes balanced, until finally it ends up being more aggressive.
Several control dimensions are also available here in the filter.
They include the ability to filter by category,
user impact, implementation cost, and control type.
For example, if you just want to look at
low user impact controls, you can apply the filter and only work with those controls.
Please note that any control that's labeled "Not scored"
is one you can take action on.
We have not yet ingested the date on the back end to give you points for that.
Don't let that label stop you as taking the action still improves your security.
But the points will come later.
So once you have a reasonable set of actions selected.
You can explore what each action means for your organization.
let's take a look at one of the most common findings.
Designate less than five global admins.
When you expand the control,
you'll see a clear easy-to-read explanation of what risk the control is trying to mitigate.
What it is we're recommending,
and what will happen to your score if you take the action.
We'll also show you some additional data to help you balance
your organization's productivity against your security.
It is important not to encourage
shadow IT by being too restrictive, but to encourage the right behavior.
So when you click on the "Learn More" button, right down here.
A remediation pane will appear that will clearly explain
what it is we're asking you to do,
and what the impact will be to your users.
You can then either take the action.
In this case I'm going to demote
Kau here to a security administrator.
Or you can follow the link to the administrative interface to take the action.
Your scores will update the next day.
Now that you know how to improve your score,
you can leverage the score analyzer to track your progress over time
and report on your security posture to your organization.
The secure score summary graph shows your score over time
versus the Office 365 average.
For any given day, the experience will also share your points and controls completed on that day.
Along with the detailed summary of a completed and incompleted actions.
Also note the export button here at the top.
You can export your control details to a CSV
or a PDF to share details with your team.
So that was the secure score.
Try it for yourself.
Most Office 365 organizations can use it at securescore.office com.
Do keep checking back because there's still more to come.
We'll soon give you the ability to exclude controls.
We'll be instrumenting more controls.
And we'll be building more end-to-end remediations.
Thanks for watching.
Microsoft Mechanics
www.microsoft.com/mechanics