{"id":16334,"date":"2018-07-05T22:36:57","date_gmt":"2018-07-06T02:36:57","guid":{"rendered":"https:\/\/www.sherweb.com\/blog\/?p=16334"},"modified":"2024-06-03T14:03:02","modified_gmt":"2024-06-03T18:03:02","slug":"microsoft-365-secure-office-protect","status":"publish","type":"post","link":"https:\/\/www.sherweb.com\/blog\/microsoft-ecosystem\/office-365\/microsoft-365-secure-office-protect\/","title":{"rendered":"Is Microsoft 365 secure?"},"content":{"rendered":"

Microsoft 365 (formerly Office 365<\/a>) is one of the most used software packages in the world. Now with the latest cloud technology integrated directly within users’ favorite Microsoft word processing and business apps, new features for online cloud storage\u2014including automatic backups, easy collaboration between staff and added security\u2014the Microsoft 365 productivity suite is more powerful than every before.<\/span><\/p>\n

However, like all new technologies, Microsoft 365<\/a> is not without its new vulnerabilities.\u00a0 Cloud-based technologies have unique security concerns<\/a> that need to be understood and taken into account by both IT providers and their customers, such as data being accessed from anywhere and, thanks to the cloud’s remote nature, susceptible to unauthorized access.<\/span><\/p>\n

A recent study<\/a> has shown that 71.4% of enterprise Microsoft 365 accounts have, at least, one compromised user each month.\u00a0 This includes accounts with unrevoked privileges (49.5%), ex-employees still having unauthorized access as well as malicious threats from outside the system. This therefore begs the question:\u00a0<\/span><\/p>\n

How secure is Microsoft 365?<\/span><\/h2>\n

Very secure. Microsoft has spent nearly a billion dollars<\/a> on securing their flagship product in the last year. Additionally, now with integrated cloud technologies, Microsoft is also providing a fleet of new security solutions, such as email encryption and threat protection. Plus, the physical data centers which store the raw data are highly secure, with biometric scanners for entry, unknown locations (but still located in the client’s region) and the workers themselves unable to access the data (known as \u2018Role Separation’).<\/span><\/p>\n

As more companies take full advantage of Microsoft 365’s powerful offerings and are moving their data to the cloud, the role of an MSP (Managed Service Provider) is to stay constantly informed on the key best practices<\/a> to manage the security of their 365 networks and ensure that client data remains secure.<\/span><\/p>\n

Remove redundant account privileges<\/span><\/h3>\n

As mentioned previously, 49.5% of all unauthorized access is caused by a user having account privileges that are significantly higher than what is necessary. This might be an intern having admin access to delete folders or a graphic designer being able to access financial data in the cloud. A full audit of the Microsoft 365 user base should be necessary every six months, with the highest privilege only available to the MSP.<\/span><\/p>\n

Revoke ex-employee access<\/span><\/h3>\n

When an employee has their contract suddenly terminated, there is a possibility they might (either consciously or unconsciously) sabotage files. An ex-employee might not be malicious at all, but in cleaning up their space accidentally decide to delete critical files that are shared through the cloud. They might also remove client emails, documents, calendars and more, which thanks to Microsoft 365, is synced throughout the network, to the cloud and might be critical for other departments. MSP’s and IT managers are advised to manage access for these scenarios and ensure any \u2018no longer active’ accounts are archived when an employee leaves. A common mistake is that many firms may keep an old profile active \u2018just in case’ they need to access the data when they should have proper processes to archive and restrict said data.<\/span><\/p>\n

Additionally, this principle would also include having a unique login for each employee. Even large firms have been guilty of having one default password for their entire network, which an employee can easily remember before and after they leave the firm. This leads nicely to the next point about passwords\u2026<\/span><\/p>\n

Avoid having a password file<\/span><\/h3>\n

All the encryption in the world will not matter if a user has access to a password. There has been a recent increase in the number of people having all of their passwords, including their Microsoft 365 cloud passwords, in an unprotected text file on their server and computer. In some situations, the file is even called \u2018passwords’. This is the first place that a hacker will look when gaining access to your system. The easy solution is to simply not have an unencrypted password file or any file at all.<\/span><\/p>\n

Enable multi-factor authentication<\/span><\/h3>\n

A quick way to ensure better security is to enable the included multi-factor authentication<\/a> that is provided by Microsoft 365. This service asks a user not just for a password, but to enter a special code that is sent to a mobile device (or another method nominated by the MSP). This is very popular for financial firms or when connecting to a sensitive system.<\/span><\/p>\n

Backup sensitive data offline<\/span><\/h3>\n

To prevent data from being deleted accidentally or tampered with maliciously (such as with a Ransomware virus that encrypts your data and only gives you a key to retrieve it if you pay the hackers), it’s worthwhile to have an offline backup of your sensitive data<\/a>. This is a failsafe measure just in case the cloud is compromised, or a user accidentally deletes a critical project and should be a cornerstone of a data recovery plan.<\/span><\/p>\n

Use OneDrive for Business’s per-file encryption <\/span><\/h3>\n

Microsoft 365’s OneDrive for Business<\/a> offers per-file encryption, not just encrypting all of the files on the server with one key. This means that all data can be separately encrypted and that if a malicious actor got hold of one of the system passwords, they would not be able to access all the files (apart from one).<\/span><\/p>\n

How Office Protect can help<\/span><\/h2>\n

One of the best ways to protect your files, system, and access to Microsoft 365 is the use of a security platform, such as Sherweb’s in-house solution, Office Protect<\/a>. Office Protect is a proactive Microsoft 365 solution that integrates into your Microsoft 365 network to prevent all the above threats and ensure simple security management for MSPs and IT managers.<\/span><\/p>\n

Office Protect<\/a> provides Microsoft 365 tenants with comprehensive, <\/span>useful features such as:<\/p>\n