{"id":17478,"date":"2022-12-20T09:31:59","date_gmt":"2022-12-20T14:31:59","guid":{"rendered":"https:\/\/www.sherweb.com\/blog\/?p=17478"},"modified":"2022-12-21T14:47:34","modified_gmt":"2022-12-21T19:47:34","slug":"microsoft-365-security-features","status":"publish","type":"post","link":"https:\/\/www.sherweb.com\/blog\/microsoft-ecosystem\/office-365\/microsoft-365-security-features\/","title":{"rendered":"Top Microsoft 365 security features you should know"},"content":{"rendered":"

It doesn\u2019t matter whether you run a small business or are part of the IT team at a multinational corporation\u2014if your organization has data in the cloud, attackers will eventually try to target it<\/a>. Fortunately, Microsoft 365<\/a> has you covered.<\/p>\n

Many people know Microsoft 365 for its suite of business productivity and collaboration tools. Not as many are familiar with its equally powerful security tools, however. Let\u2019s explore some of the Microsoft 365 security features you should definitely know whether you\u2019re shopping around or you\u2019re an existing business user looking to upgrade your security program.
\n <\/p>\n

Microsoft Defender<\/h2>\n

Microsoft Defender takes a modern \u201cdefense in depth\u201d approach to protect your Microsoft 365 apps and data. Instead of relying on just strong perimeter security, it applies multiple security layers, making it capable of catching a much broader range of threats than purely perimeter security.<\/p>\n

That starts with email analysis and filtering at your network’s edge. On average, Microsoft Defender blocks over 25% of all malicious messages<\/a> before they even touch your network. Then all mail inside your perimeter is scrutinized using tools that scan for malicious content and the sender’s authenticity.<\/p>\n

Sophisticated attackers know that security tools<\/a> carefully scrutinize mailboxes, so they look to get a toehold on your network by compromising other applications. That\u2019s why Microsoft Defender also includes OneDrive, SharePoint, Teams and Office applications<\/a> protection layers. If Defender detects malicious activity in any of those apps, it immediately locks down the compromised files so users can\u2019t open or share them.
\n <\/p>\n

Microsoft 365 Data Loss Prevention (DLP)<\/h2>\n

Your data is one of your business\u2019s most valuable assets. Its compromise could have long-term devastating effects on both your revenue and reputation. Several Microsoft 365 security features are available to help protect your data integrity.
\n <\/p>\n

DLP policies<\/h3>\n

These policies will help ensure that sensitive information such as credit card numbers or other identification stays secure. It allows you to flag and track sensitive data and set policies around how users can share it.<\/p>\n

Information protection<\/h3>\n

This Outlook feature allows you to set policies for how you and your employees share sensitive data over email. For example, you can set policies to prevent copying and pasting into or out of emails or prevent the ability to forward certain messages outside your organization.<\/p>\n

Theft protection<\/h3>\n

With BitLocker encryption, Microsoft 365 ensures that your information remains safe even if a device is stolen. You can also remotely wipe any lost device or reset it to its factory settings if you pass it on to a new employee.
\n <\/p>\n

Multi-factor authentication (MFA)<\/h2>\n

Your data is only as safe as your employees’ credentials to access it. Unfortunately, too many people still choose weak, vulnerable passwords<\/a>. That\u2019s why Microsoft 365 supports multi-factor authentication<\/a>. When you enable MFA, your users must use two or more authentication methods, including passwords, text security codes or verifying requests in a mobile app. You can even use the Microsoft Authenticator app<\/a> to secure other business services, like Salesforce, Google Workspace<\/a> and Dropbox.
\n <\/p>\n

Built-in mobile device management (MDM)<\/h2>\n

The rise in remote and hybrid working<\/a> has only expanded popular employer Bring Your Own Device (BYOD) programs, where employees use their own laptops and mobile devices to connect to company apps and shared folders.<\/p>\n

You might have the most trustworthy employees in the world, but even the most diligent ones might lose their phones, which can still put your data at risk. That\u2019s why Microsoft 365 offers MDM built right into its cloud platform for employees to access corporate email from their devices. Beyond email, Microsoft InTune secures access from BYOD endpoints to other corporate applications and data.
\n <\/p>\n

Privileged Identity Management (PIM)<\/h2>\n

Privileged Identity Management<\/a> allows you to manage how and when users can access different cloud-based resources. For example, you can set time-limited or approval-limited roles for different users, so they receive elevated privileges only under certain conditions. That helps prevent accidental misuse or malicious use of resources by normal users.
\n <\/p>\n

Email archiving<\/h2>\n

All businesses must abide by data retention regulations that dictate how email communication is handled and retained. Microsoft 365 Business<\/a> works to address even the most stringent regulations with these email archiving features:<\/p>\n

Litigation holds<\/h3>\n

You can use a litigation hold<\/a> to lockdown and retain a user\u2019s mailbox, including deleted items. This will preserve all their inbox content, including original versions of items they may have modified.<\/p>\n

Retention policies<\/h3>\n

Exchange allows you to customize your own retention policies according to your regulatory and business needs. For example, you can delete things permanently after a set period or keep them in a separate storage area. These Microsoft 365 security features can also be of tremendous help in case of a security breach or accidental deletion of important data.
\n <\/p>\n

Azure Information Protection (AIP)<\/h2>\n

This cloud-based solution works similarly to Microsoft Defender Information Protection, but for data in your company\u2019s Azure<\/a> cloud computing tenant. It allows you to apply labels to tag and manage files. Labels can be applied automatically, or users can be given suggestions for how to label certain data.<\/p>\n

Some options include:<\/p>\n