Welcome to Microsoft Mechanics.
Coming up on the show, we'll explore the compliance side
of the Office 365 Security and Compliance Center.
The central place to view and manage your data even beyond the Microsoft ecosystem.
From a revised experience for compliance personnel
to how you can use it for data management ,
eDiscovery, Supervisory Review, and more.
Microsoft Mechanics
I'm joined again by Kamal Janardhan from the Office 365 Security Compliance team, welcome.
Hi Jeremy, thanks for having me.
We made some really big changes in the security and compliance portal
in Office 365, can you tell us what's new?
Yeah so we brought in the security controls into the Compliance and Security Center
so that you can actually manage your compliance and security across all your cloud services.
Additionally we've added insight and intelligence
so the recommendations that we give you when you log into a tenant
are actually customized for the role.
We tailor this experience as you additionally add services
or manage them in the cloud.
Very nice, so this doesn't look like the typical admin experience
that I'm use to from an Office 365 standpoint.
Does this go broader then the admins of Office 365?
Yeah that's right.
As the compliance admin, I have a preview of the entire tenant.
Now this is the first time I'm logging into a new tenant
so I can go here and get two recommendations.
One is to turn on my audit logging
so I can get access to all the actions taken by every admin in my tenant.
But, I'm going to move over here to the signing on of archived mail boxes.
The system has detected that my users have a large amount of data.
So with one click, I'm going to turn on the archived mailboxes
and enable this capability for my tenant
So I don't have to navigate to that control?
It might be a bit deeper into some of these sub menus here.
But, beyond all of that, I know that there are some things around
determining who is actually part of the compliance team, right?
That's right.
So i'm going to go over here to the permissions tab.
The permissions tab is designed to help you determine
which roles are right for which features in your tenant.
So you can see here there's a compliance administrator.
Let's click on eDiscovery manager.
Here the eDiscovery manager has Case Management permissions,
Compliance Search, Export, Hold etc.
And they were given permissions to view the content of a particular user
for a particular date range.
They cannot access content of any other user.
And Jeremy, actually I've got you set up as a Records Manager.
So you can actually see a pared-down version of the tenant with just those features available to you.
Great, you know I've always been a records managers.
The nice thing is I've only got a very small set of things that I have to worry about here.
In this case the Data Management tab.
I also get these nice widgets on the screen that allow me to enable things.
For example if I want to turn on preservation
it gives me some stats even to tell me what the benefits are of using that.
When I go to click on that, I actually see
it sets up maybe a preservation policy.
In my case it will tell me how many users will be covered by preservation
And it will give me a default recommendation for 10 years to preserve all of that data.
And I can customize that or I could just take the default.
So i'll take the defaults here.
And now once I do that I actually have another widget
that just showed up in place of the old one.
The import widget.
And I see Twitter, Facebook, LinkedIn, what's that?
Yeah that's right so what we found is that once admins
turn on archiving and preservation of the organization
they've also come to us and said that all that data is not Microsoft data
its third party data.
So we built this new feature called the Import Service
that allows you to ingest data from third party sources
like Facebook, Twitter, and LinkedIn.
And then once that content is within Office 365
all the controls of eDiscovery, retention, preservation and auditing
they're available to you for that data as well.
It's really great that we get third party of the outside of the Microsoft ecosystem
in to Office 365.
But, how do we do that?
So you can use our drive shipping service.
Or, the good news is a lot of cloud services have opened APIs
that allow you to easily import or stream your data into Office 365.
Let me show you how this can be useful in the case of eDiscovery
where we have a number of new capabilities.
ok.
We'll tab over to my tenant and take a look at the eDiscovery section.
As you can see here, we have new case management hold, search, and export.
Now I'm a tenant and I've turned on preservation and archiving in my environment
but that's really saving a large amount of data.
I want to narrow it down to something associated with the keyword Redstone.
you can say that's a case that I'm actually running.
Very popular code name at the moment.
Yes it is.
And then, here are the details of the case.
I can also with a new capability, turn on holds on that case
I'm preserving only a subset of the data.
I can run searches
and as you can see I can search for just Twitter or Facebook data.
And I can do exports.
Now previously our exports limited to one PSC.
We now have the ability to take at least over a thousand mailboxes
and combine them into a single PSC to export.
Terrific.
Let's go over and take a look at our searches
and let's preview our search results.
What you're going to see here is this search is actually run against our data.
And search through all the third party data that's already in place.
I'm going to click on a message over here
that has no subject.
Effectively, it's a Twitter message and as you can see
the twitter message is saved in its full fidelity
with the additional information about Redstone in the context that you can see.
So beyond all of this though,
when we look at the third party data and how that's coming in
I know there's stuff that's kind of already there
that your kind of reactively searching
but, what happens as new data starts to come into the tenant?
That's an excellent question.
So we have something called Supervisory Review Feature, over here.
That allows you to catch data in flight as it's coming in.
So, Redstone allowed me to search for all the existing content.
I'm going to go into the supervisory Review tool
and take a look at my Redstone investigation
So as you can see this is Redstone investigation.
Everything with the keyword Redstone
an email will be received by the reviewers.
I'm reviewing the content of all employees in the organization.
The conditions are any mail sent to these users and groups
with the criteria or keyword Redstone.
And I want to sample one hundred percent of the content.
Initially, I've set you up Jeremy as a reviewer
so you'll be able to see this incoming content in your Outlook or Owa experience
and allow you to review and determine if it's valid or relevant.
Now going back to my machine here I've actually got a folder
that's already pre-configured for me called Supervisory Review.
And all of the mail that's coming in and flowing in with that code name Redstone
are getting caught and sent to my inbox.
So I have a great view of everything in real time as it actually comes in my mailbox.
That's right and you have the ability to mock things as relevant or not relevant
with an Outlook menu that's available to you.
Can these notifications just come to me?
Yes, absolutely.
So we have a feature where the system works and your behalf.
And here you can see I requested the security and compliance digest
And it tells me that in my system an anomalous content
of Redstone has been shared.
And right within my email in line it asks me do I want to make sure that my users do not share this data?
So I select that and it takes me to the security and compliance center
to say, do i want to create a policy to prevent that kind of content from being shared?
And so here we've made it easier for the admin
to actually do that protection and enable it without visiting the portal.
Right, so a lot fewer clicks for me as the admin.
So beyond all this, what else is coming?
So we're going to build more insights and intelligence
where the system works on your behalf.
Additionally, eDiscovery enhancements to better search and identify exactly the data you need.
More connectors, so even more types of external data can be brought into the system.
And, of course more granular and flexible control
for that data inside Office 365.
Great, so if I've got Office 365 right now, how do I start trying this out?
You can go your Office 365 tenant
and select the app launcher Security and Compliance Center.
Or, you can set up an Office 365 E5 trial and get access to all these features.
So, really exciting things coming from a compliance standpoint
to the security compliance portal.
Of course, keep watching Microsoft Mechanics for the latest updates
for all the Microsoft technologies out there.
Thanks for watching and good bye for now.
Microsoft Mechanics
www.microsoft.com/mechanics