Why: How: Not On The Agenda - Wa
What is: “The Tenant” Cloud Strategy. M365, Dynamics 365,Azure, 3rd Party High Level - What is Microsoft 365Agenda Why: Business alignment/Priority Budget – Licensing and redundant spend How: Partner Ecosystem Fast Track Premier Not on the agenda: Technical Architecture
What is the tenant, really?
THE WORLD BEFOREMOBILITY & CLOUDusersOn-premises /Private clouddevicesappsdata
CLOUD APPS & SAAS SERVICESOn-premises /Private cloud
MOBILE AND PERSONAL DEVICESOn-premises /Private cloud
ORGANIZATION & SOCIAL IDENTITIESOn-premises /Private cloud
On-premises /Private cloud
On-premises /Private cloud
MICROSOF T CLOUD
Microsoft 365 Licensing and Roadmap
Microsoft Internal & Partner Use OnlyA complete, intelligent, secure solution to empower employeesUnlocksCreativityBuilt forTeamworkWindows 10 EnterpriseIntegratedfor SimplicityIntelligentSecurityEnterprise Mobility & Security14
Microsoft 365 E5 valueMicrosoft 365 E5 adds incremental value to Microsoft 365 E3 across these solution areasMicrosoft 365 E5SecurityComplianceVoiceAnalyticsExtends identity andthreat protectionto help stop damagingattacks with integratedand automated securityBrings together informationprotection & advancedcompliance capabilities toprotect and govern data whilereducing riskAdds audio conferencing andcalling capabilities in thecloud to enable your teamsAdds Power BI capabilitiesthat help you realizesignificant business valuefrom your data
Office 365 Enterprise CapabilitiesAPPSSERVICESSECURITYCloud Productivity &MobilityRich Communication andCollaborationAdvanced EnterpriseProtectionOffice Pro Plus:Office apps on up to 5 PCs &MacsMobile Office Apps:Exchange :Business-class email & CalendarOneDrive:Cloud Storage and file sharingSharePoint:Team sites & internal portalsOffice Apps for Tablet &SmartphonesSkype for Business:Online Meetings, IM, video chatFlowPower AppsMicrosoft Teams:Chat-based CollaborationStreamYammer:Private social networkingOffice 365 E3Advanced Threat Protection:Zero-day threat and malwareprotectionAdvanced SecurityManagement:Enhanced visibility and controlANALYTICSInsights for EveryonePower BI Pro:Live business analytics andvisualizationVOICEComplete CloudCommunicationAudio Conferencing:Worldwide dial-in for youronline meetingsPhone System:Business phone system in thecloudThreat Intelligence:Actionable insights to globalattack threatsAdvanced Compliance:Advanced eDiscovery, AdvancedData Governance and CustomerLockbox bundled together toprovide an intelligent solution tomeet compliance needsOffice 365 E5Microsoft Internal & Partner Use Only16
Office 365 Government Roadmap
EMS E5EMS E3Enterprise Mobility & Security CapabilitiesIdentity and access managementIdentity Driven SecurityManaged Mobile ProductivityInformation ProtectionAzure Active DirectoryPremium P1Advanced Threat AnalyticsMicrosoftIntuneAzure InformationProtection Premium P1Identify suspicious activities &advanced attacks on premises.Updated on an annual cadence.Mobile device and appmanagement to protect corporateapps and data on any device.Single sign-on to cloud and onpremises applications. Basicconditional access securityEncryption for all files and storagelocations. Cloud based filetrackingExisting Azure RMS capabilitiesAzure Active DirectoryPremium P2Advanced risk based identityprotection with alerts, analysis, &remediation.Microsoft Internal & Partner Use OnlyAzure Advanced ThreatProtectionIdentify suspicious activities &advanced attacks on premises.Integrated with our IntelligentSecurity Graph. Updates on a cloudcadence. Integration with MicrosoftThreat Protection.MicrosoftCloud App SecurityBring enterprise-grade visibility, control,and protection to your cloud applicationsand cloud data.Azure InformationProtection Premium P2Intelligent classification, &encryption for files shared inside &outside your organizationSecure Islands acquisition18
What is the differencebetween Azure AD P1 & P2?Only in Azure AD P2FeaturesDirectoryP1Objects1No Object LimitUser/Group Management (add/update/delete). User-based provisioning, Device registrationAvailableSingle Sign-On (SSO). Free, basic tiers self-service app integration templates5No LimitB2B Collaboration7AvailableSelf-Service Password Change for cloud usersAvailableConnect (Sync engine that extends on-premises directories to Azure Active Directory)AvailableSecurity/Usage ReportsIdentity Protection Detecting vulnerabilities and risky accounts: Providing custom recommendations to improve overall securityposture by highlighting vulnerabilities Calculating sign-in risk levels Calculating user risk levels Investigating risk events: Sending notifications for risk events Investigating risk events using relevant and contextual information Providing basic workflows to track investigations Providing easy access to remediation actions such as password reset Risk-based conditional access policies: Policy to mitigate risky sign-ins by blocking sign-ins or requiringmulti-factor authentication challenges Policy to block or secure risky user accounts Policy to require users to register for multi-factor authenticationAdvanced Identity Governance Privileged Identity Management (PIM) Access ReviewsAdvanced ReportsGroup-based access management/provisioningAvailableSelf-Service Password Reset for cloud usersAvailableCompany Branding (Logon Pages/Access Panel customization)AvailableApplication ProxyAvailableSLAAvailablePremium FeaturesAdvanced group features8AvailableSelf-Service Password Reset/Change/Unlock with on-premises writebackAvailableDevice objects 2-way sync between on-premises directories and Azure AD (Device writeback)AvailableMulti-Factor Authentication (Cloud and On-premises (MFA Server))AvailableMicrosoft Identity Manager userCloud AppCAL4Discovery9AvailableAvailableConnect Health6AvailableAutomatic password rollover for group accountsAvailableConditional Access based on group and locationAvailableConditional Access based on device state (Allow access from managed devices)Available3rd party identity governance partners integrationAvailableTerms of UseAvailableSharePoint Limited AccessAvailableOneDrive for Business Limited AccessAvailable3rd party MFA partner integrationAvailablePreviewMicrosoft Cloud App Security integrationAvailable
What is the differencebetween AIP P1 & P2?Only in AIP P2 Configure conditions for automatic andrecommended classification Azure Information Protection scanner forautomated classification, labeling, andprotection of supported on-premises files Hold Your Own Key (HYOK) that spansAzure Information Protection and ActiveDirectory (AD) Rights Managementfor highly regulated scenariosFeaturesP1Azure Information Protection content consumption by using work or schoolaccounts from AIP policy-aware apps and servicesAvailableProtection for Microsoft Exchange Online, Microsoft SharePoint Online, andMicrosoft OneDrive for Business contentAvailableBring Your Own Key (BYOK) for customer-managed key provisioning life cycle2AvailableCustom templates, including departmental templatesAvailableProtection for on-premises Exchange and SharePoint content via RightsManagement connectorAvailableAzure Information Protection software developer kit for protection for allplatforms including Windows, Windows Mobile, iOS, Mac OSX, and AndroidAvailableProtection for non-Microsoft Office file formats, including PTXT, PJPG, and PFILE(generic protection)AvailableAzure Information Protection content creation by using work or school accountsAvailableOffice 365 Message EncryptionAvailableAdministrative control3AvailableManual, default, and mandatory document classificationAvailableAzure Information Protection scanner for content discovery of on-premises filesmatching any of the sensitive information typesAvailableAzure Information Protection scanner to apply a label to all files in an on-premisesfile server or repositoryAvailableRights Management connector with on-premises Windows Server file shares byusing the File Classification Infrastructure (FCI) connectorAvailableDocument tracking and revocationAvailable
Windows 10 Enterprise CapabilitiesWindows 10 Enterprise E3Windows 10 Enterprise E5The most trusted platformMore productiveMore personalEnterprise Data ProtectionPrevent accidental leaks by separatingpersonal and business dataAzure Active Directory JoinStreamline IT process by harnessing thepower of the cloudUser Experience Virtualization (UX-V)OS and app settings synchronized acrossWindows instancesWindows Hello for BusinessEnterprise grade biometric andcompanion device loginMDM enablementManage all of your devices with thesimplicity of MDMGranular UX ControlEnterprise control over user experienceCredential GuardProtects user access tokens in ahardware-isolated containerWindows Store for Business,Private CatalogCreate a curated store experience foremployee self-serviceAppLockerBlock unwanted and inappropriateapps from runningDevice GuardDevice locked down to only run fullytrusted appsThe most versatile devicesWindows 10 for Industry DevicesTurn any inexpensive, off-the-shelfdevice, into an embedded, handheld, orkiosk experienceApplication Virtualization (App-V)Simplify app delivery and managementCortana ManagementCreate, personalize, and manage Cortanaprofiles through Azure Active DirectoryMicrosoft Threat Protection (See slide 15-18)Behavior-based, attack detectionBuilt-in threat intelligenceForensic investigation and mitigationBuilt into WindowsMicrosoft Internal & Partner Use Only21
Three simple paths to Microsoft 365 E5Microsoft 365 E5Step up for 25Compliance 10Information Protection & Complianceor(Office 365 Advanced Compliance, Azure Information Protection Plan 2)SecurityVia Identity & Threat ProtectionAudioConferencing 4Phone System 8Power BI3or 12(Microsoft Cloud App Security1, Azure Active Directory Plan 2, Office 365 ATPPlan 22, Azure ATP, Windows Defender ATP)Microsoft 365 E312Consolidates O365 CAS and MCAS valueConsolidates O365 Threat Intelligence and O365 ATP Plan 1 value*Pricing for Microsoft 365 E3 customers before volume discounts.43MyAnalytics is now included in all O365 E3 and M365 offerings 10
Microsoft’s Enterprise Class Security TechnologyIdentity & ionSecuritymanagementSecure identities toreach zero trustHelp stop damagingattacks with integrated andautomated securityLocate and classifyinformation anywhereit livesStrengthen your securityposture with insightsand guidanceInfrastructure security
Intelligent Securityin Microsoft 365Cloud-powered security solutions help you protect users,data, and everything in between6.5 trillion signals analyzed daily3,500 Microsoft security professionals 1B Annual Security Investment
IdentitiesSecure yourorganization againstadvanced threatsacross your entiredigital estateEndpointsMicrosoft 365 E5SecurityInfrastructureEmail andDocumentsCloud Apps
Conditional AccessAzure ADADFSConditionsMSAControls40TBGoogle IDAndroidiOSMacOSEmployee & PartnerUsers and RolesTrusted &Compliant 3LimitedaccessWindowsWindowsDefender ATPRequireMFAReal timeEvaluationEngineGeo-locationPhysical &Virtual LocationCorporateNetworkBrowser appsClient apps******PoliciesClient apps &Auth MethodEffectivepolicyForcepasswordresetBlock legacyauthenticationMicrosoftCloud App Security
Holistic Identity ProtectionSCENARIO: A third-party site is hacked and usercredentials are exposed on the dark web.Active DirectoryMicrosoftIntelligent SecurityGraphMicrosoftCloud App SecurityDetects anomalous behaviorand reduces threats by limitingaccess to data and applicationsAdvanced Threat ProtectionRecognizes compromised accounts andlateral movement, alerts you, andvisualizes the attack timelineAzureProactively identifiessuspicious login attempts andchallenges them with MFAAzure
Microsoft Cloud App SecurityProtection across the attack kill chainOffice 365 ATPMalware detection, safe links,and safe attachmentsPhishingmailAzure AD IdentityProtectionIdentity protection & conditional accessBrute force account or usestolen account credentialsOpenattachmentClick a URLExtends protection & conditionalaccess to other cloud appsExploitation& InstallationExfiltrate dataAttacker accessessensitive dataAttacker collectsreconnaissance &configuration dataCommand& ControlBrowse toa websiteUser accountis compromisedAttacker attemptslateral movementPrivileged accountcompromisedWindows Defender ATPAzure ATPEndpoint Detection and Response(EDR) & End-point Protection (EPP)Identity protectionDomaincompromised
Because Minutes MatterMalicious emailsfoundThreat signalshared withWDATP for autoremediationUser anomaliessuggest identitycompromiseAutomaticremediationactions complete
Centralized security managementMicrosoft 365 Security Center Dedicated security workspace for securityadministration and operations teams Centralized visibility, control andguidance across Microsoft 365 security Actionable insights help securityadministrators assess historic and currentsecurity postures Centralized alerts and tools helpsecurity operations better manageincident response
Integrated Compliancein Microsoft 365Microsoft’s trust principles & compliance expertiseBuilt-in information protection and governance capabilitiesacross devices, apps, and cloud servicesIntelligent tools to simplify risk assessment and regulatory response
Microsoft’s Integrated Compliance TechnologyAssessProtectRespondSimplify assessment of compliancerisk and posture with actionableinsightsIntegrated protection andgovernance of sensitive data acrossdevices, apps and cloud servicesIntelligently respond to datadiscovery requests by leveraging AIto find the most relevant data
Discover &Classify DataAssess RiskProtect and governsensitive datathroughout itslifecycle andeffectively meetcompliancerequirementsMicrosoft 365 E5ComplianceRespondIntelligentlyAutomaticallyapply policiesControl access
Actionable Intelligence with Advanced eDiscoveryIntelligently explore and analyze unstructured data to quickly identify what’s relevantMinimizeUse predictive coding to train the system to find likelyrelevant documents and reduce what’s sent to reviewOrganizeUse near duplicate detection to organize the dataand email threading to reconstruct emailconversationsRecognizeUse Themes to understand the topics represented inthe unstructured data setSearch and TaggingAd-hoc searches, ability to save search queries,and tag search results with case specific labels
Advanced eDiscovery 2.0
Advanced Data Governance in Office 365Leverage intelligence to automate data retention and deletionAutomatic ClassificationClassify data based on automatic analysis(age, user, type, sensitive data and user providedfingerprints)Intelligent PoliciesPolicy recommendations based on machine learningand cloud intelligenceTake ActionApply actions to preserve high value data in-placeand purge what’s redundant, trivial or obsolete.
Data growing at exponential rateUnified approachComprehensive policies to protect and govern yourmost important data – throughout its lifecycleDiscoverUnified approach to discover, classify & labelApply policyGovernanceProtectionAutomatically apply policy-based actionsProactive monitoring to identify risksBroad coverage across locationsLabelClassify EncryptionRestrict AccessWatermarkHeader/Footer RetentionDeletionRecords ManagementArchivingMonitor Sensitive data discoveryData at riskPolicy violations Policy recommendationsProactive alerts
Why move to Microsoft 365 now?(Not later)
Cloud EconomicsProductivity Firstline Workers save 140 minuet per week Reduce the time to deliver new services by 14 Days Mobile workers save 24 minuets per day Reduced downtime by 15 hours annually/user Decision Makers improve time to decision by 15% Online meetings replace travel costs
Cloud EconomicsSecurity 400k/Year reduction in breach communication 4M Reduction in remediation effort (3 year) 4 hours/user reduction of security related downtime 220k reduction in compliance related costs 1M year PV third Party tool replacement
Redundant Spend ReductionCapabilityWeb/Audio/Video ConferencingEmail Anti-Virus/Anti-SpamArchivingeDiscoveryEncrypted EmailAnnual CostProviderTypeUsersWebEx/GoToMeeting, Blue Jeans, etc.Eliminate Cost17,458 288,229Proofpoint, TrendEliminate Cost17,458 117,317Symantec Enterprise VaultEliminate Cost17,458 958,596Symantec VaultEliminate Cost17,458 5,222,196Secure MailEliminate Cost17,458 147,948Eliminate Cost17,458 1,895,714*Rights Management, Data LossPrevention, Information Classification,Automated Information ClassificationVoicemailAvayaEliminate Cost17,458 802,370Threat IntelligenceSplunkEliminate Cost17,458 268,984Hosted PBXAvayaEliminate Cost17,458 4,608,912Multiple VendorsEstimate Cost17,458 3,394,863TableauEliminate Cost17,458 26,021RSAEliminate Cost17,458 284,688Meraki EnterpriseEliminate Cost17,458 162,920McAfeeEliminate Cost17,458 116,906Eliminate Cost17,458 17,901Telephony PRIBusiness IntelligenceMutli-Factor AuthenticationMobile Device/App ManagementClient Anti-Virus Protection**Self Service Password ResetTotal Annual Costs 14,310,266
Intelligent securityIdentity & access managementInformation protectionThreat protectionSecurity management
Compliance – Shared ResponsibilityHITRUST CSF Requirement StatementResponsibilityMicrosoft ResponsibilitiesThe organization creates and documents theprocess/procedure the organization intendsto use for deleting data from hard-drivesprior to property transfer, exchange, ordisposal/surplus.Office 365Office 365 is responsible for managing harddrive data deletion prior to disposal, transfer,or exchange.Visitor and third-party support access isrecorded and supervised unless previouslyapproved.Office 365Office 365 is responsible for implementation,configuration, management, and monitoring ofphysical access control methods andmechanisms in relation to its service provisionenvironment.Repairs or modifications to the physicalOffice 365components of a facility which are related tosecurity (e.g., hardware, walls, doors andlocks) are documented and retained inaccordance with the organization's retentionpolicy.A visitor log containing appropriateOffice 365information is reviewed monthly andmaintained for at least two years.Office 365 is responsible for implementation,configuration, management, and monitoring ofsystem maintenance methods and mechanismsin relation to its service provision environment.Physical authentication controls are used toauthorize and validate access.Office 365Office 365 is responsible for implementation,configuration, management, and monitoring ofphysical access control methods andmechanisms in relation to its service provisionenvironment.An audit trail of all physical access ismaintained.Office 365Office 365 is responsible for implementation,configuration, management, and monitoring ofphysical access control methods andmechanisms in relation to its service provisionenvironment.Visible identification that clearly identifies the Office 365individual is required to be worn byemployees, visitors, contractors and thirdparties.Office 365 is responsible for implementation,configuration, management, and monitoring ofphysical access control methods andmechanisms in relation to its service provisionenvironment.Physical access rights are reviewed everyOffice 365 is responsible for implementation,Office 365Office 365 is responsible for implementation,configuration, management, and monitoring ofphysical access control methods andmechanisms in relation to its service provisionenvironment.
O365 Compliance Manager
Built for teamworkCollaborate in a chat-based workspaceStay in sync with group email and calendarsCreate content and intranets in a central locationConnect openly across the organizationCo-author with others using Office apps
Integrated for simplicityModern DesktopFlexible device managementIntegrated administrationBuilt-in compliance
Unlocks creativityCreate compelling content with intelligent appsWork naturally with ink, voice, and touchVisualize insights from data setsFind what you need with personalized searchConnected experiences across devices
“I think it is the golden age of beingable to build products foreveryone. And that's our mission.”Satya NadellaMicrosoft Ability SummitMay 2018
Microsoft 365 enables creating moreproductive, inclusive and compliant workplaceswith built-in accessibilityUnlocks creativityBuilt for teamworkIntegrated for simplicityIntelligent securityInclusively designed capabilitiesbuilt-in: Learning Tools andDictate to aid in reading andwriting and enhanced Windows10 Ease of Access settings topersonalize experiencesIntuitive controls in Office 365such Accessibility Checker andAutomatic alt-text to efficientlycreate accessible contentAvailability of assistivetechnologies for all without theneed to disclose or ask foraccommodationsOffice 365 designed tomeet global accessibility standards,verified by DHS Trusted Testercode-based inspection processAutomatic captions for videos andrecorded meetings with MicrosoftStream, live subtitles with the freePresentation Translator add-in forPowerPointReduced spend on add-ons tocreate accessible content & toaccommodate people with printdisabilitiesBetter support for 3rd partyassistive technologies
Microsoft customers are creating moreproductive, inclusive and compliant workplaceswith Microsoft 365 accessibilityUnlocks creativityBuilt for teamworkIntegrated for simplicityIntelligent security“I have a computer without ascreen, and that’s intentionalbecause all I need is a keyboardand some headphones.“Group projects are really easynow. If everyone createsaccessible documents by usingstyles and the check accessibilityfeature, I can work really easilywith them.“By providing tools where peoplecan self-accommodate, it doesn’tforce someone to put up theirhand.“We see Microsoft as a leader ininclusive technology and a greatpartner.I can now open up Excel orPowerPoint or Word and I canproduce content that someoneacross the world would look atand never know a blind personhad a role in that production.”Jack MendezInstructor & Director of Technology,Louisiana Center for the Blind,Inclusion in Action SeriesWith Immersive Reader I’m ableto change the way I read text tosuit me – so I don’t hold anyoneup. It’s really, really cool.”JacobUlladulla High School student,NSW Dept of Education StoryIt allows them to find ways tomake their own computingexperience much morecomfortable so they can beproductive.”Bert FloydAssistive Technology Lead,TD Bank (Canada) Customer StoryIn fact, we now take it for grantedthat the experiences withinMicrosoft 365 are going to workwell for our employees.”Stephen CutchinsCIO Accessibility Lead,Accenture Customer Story
How do I begin the cloud journey?
DeploymentResources Fast Track Premier Partners (SI)
FastTrack Benefit - ServicesSupporting you through onboarding, migration, and driving adoption ofMicrosoft 365Office 365Exchange OnlineSharePoint OnlineSkype for Business OnlineMicrosoft TeamsYammer EnterpriseDirect assistance provided by Microsoft experts who will assist with various onboardingactivities using a combination of tools & guidance.Office 365 ProPlusAutomated checks and configuration tools to assess your current state, chosen identitysolution, and domain configuration.Project OnlineData migration services & experienced experts assigned to help you transition data withyou to Microsoft 365.Adoption and change management experts engaged to help transform your organizationthrough workshops, communications, guidance and coaching.End User training & excitement through online, classroom sessions, documentation andvideo collateralOneDrive for BusinessMicrosoft StaffHubEnterprise Mobility SuiteIntuneAzure Active Directory PremiumDesktop DeploymentWindows 10
comGraham.Naeseth@Microsoft.com
Enterprise Mobility & Security Capabilities Microsoft Intune Mobile device and app management to protect corporate apps and data on any device. Managed Mobile Productivity Advanced Threat Analytics Identify suspicious activities & advanced attacks on premises. Integrated with our Intelligent Security Graph. Updates on a cloud cadence.
May 02, 2018 · D. Program Evaluation ͟The organization has provided a description of the framework for how each program will be evaluated. The framework should include all the elements below: ͟The evaluation methods are cost-effective for the organization ͟Quantitative and qualitative data is being collected (at Basics tier, data collection must have begun)
Silat is a combative art of self-defense and survival rooted from Matay archipelago. It was traced at thé early of Langkasuka Kingdom (2nd century CE) till thé reign of Melaka (Malaysia) Sultanate era (13th century). Silat has now evolved to become part of social culture and tradition with thé appearance of a fine physical and spiritual .
On an exceptional basis, Member States may request UNESCO to provide thé candidates with access to thé platform so they can complète thé form by themselves. Thèse requests must be addressed to esd rize unesco. or by 15 A ril 2021 UNESCO will provide thé nomineewith accessto thé platform via their émail address.
̶The leading indicator of employee engagement is based on the quality of the relationship between employee and supervisor Empower your managers! ̶Help them understand the impact on the organization ̶Share important changes, plan options, tasks, and deadlines ̶Provide key messages and talking points ̶Prepare them to answer employee questions
Dr. Sunita Bharatwal** Dr. Pawan Garga*** Abstract Customer satisfaction is derived from thè functionalities and values, a product or Service can provide. The current study aims to segregate thè dimensions of ordine Service quality and gather insights on its impact on web shopping. The trends of purchases have
Chính Văn.- Còn đức Thế tôn thì tuệ giác cực kỳ trong sạch 8: hiện hành bất nhị 9, đạt đến vô tướng 10, đứng vào chỗ đứng của các đức Thế tôn 11, thể hiện tính bình đẳng của các Ngài, đến chỗ không còn chướng ngại 12, giáo pháp không thể khuynh đảo, tâm thức không bị cản trở, cái được
Le genou de Lucy. Odile Jacob. 1999. Coppens Y. Pré-textes. L’homme préhistorique en morceaux. Eds Odile Jacob. 2011. Costentin J., Delaveau P. Café, thé, chocolat, les bons effets sur le cerveau et pour le corps. Editions Odile Jacob. 2010. Crawford M., Marsh D. The driving force : food in human evolution and the future.
Le genou de Lucy. Odile Jacob. 1999. Coppens Y. Pré-textes. L’homme préhistorique en morceaux. Eds Odile Jacob. 2011. Costentin J., Delaveau P. Café, thé, chocolat, les bons effets sur le cerveau et pour le corps. Editions Odile Jacob. 2010. 3 Crawford M., Marsh D. The driving force : food in human evolution and the future.
