MIC02 - Securing your connected environment with a M365 security model

• Know the features offered by the E3 and Business Premium versions of Microsoft 365
• Explore the different security bricks
• Understanding the M365 Security Model

DAY 1: Microsoft 365 Overview

Part 1 - Introduction :

• Tour de table
• Introduction to the Cloud environment (reminders)

Part 2 - Microsoft 365 Basics:

• Managing users and groups in M365
• Identity and access management
• Active Directory synchronization ⇋ Microsoft 365

Part 3 - Security Fundamentals :

• Introduction to security with M365
• Microsoft 365 Security Solutions (Defender)
• The "Zero Trust" security model

Part 4 - Audit, logs and monitoring :

• Azure AD Connect Health
• Audit log inquiries

DAY 2: M365 Advanced Security

Part 5 - Advanced Threat Protection :

• MFA & SSPR
• Password protection
• [...]

Part 6 - Device Management :

• Endpoint Manager (compliance policies, configuration profile)
• Mobile Device Management Deployment

Part 7 - Classification and Protection of Information :

• Microsoft Compliance Center
• Sensitivity labels (Azure Information Protection)

Part 8 - Data Loss Prevention :

• Custom DLP policies
• Create a DLP policy to protect documents

DAY 3: Microsoft 365 Security Model

Part 9 - Tiering Model:

• Layer model
• Layer administration
• Using PAW
• Establishment of privileged access

Part 10 - Using Harden 365

Part 11 - Backup Security :

• 90 day retention M365 (OneDrive, SharePoint, Exchange, Teams)
• Third party solution for outsourced backup (Veeam...)

PREREQUISITE:

• Be familiar with the Microsoft Cloud environment
• Microsoft 365 Business Premium or Microsoft 365 E3 subscriptions

INTENDED PUBLIC:

• CISO
• Security Engineer
• M365 Engineer
• Architect M365