The Inner Circle

Expand all | Collapse all

Office 365

  • 1.  Office 365

    Posted 24 days ago
    Hi
    Given the popularity of the service, it is no surprise that I see a lot of questions on guidance that is specific to Microsoft's Office 365 and associated services.

    Is there a guide that will help people with the risk assessment and compliance of the product? Or even a Circle community that considers this in their charter?

    BR

    ------------------------------
    Peter HJ van Eijk
    Cloud trainer
    ------------------------------


  • 2.  RE: Office 365

    Posted 23 days ago
    Hi
    Microsoft Security & Compliance Center is best place to see Office 365 scores, there are 3rd party products doing assessments too.

    ------------------------------
    Dipak Patel, CISSP
    Sr Security Architect
    W.R.Berkley Corp
    ------------------------------



  • 3.  RE: Office 365

    Posted 8 days ago
    The UK NCSC (National Cyber Security Centre) has some elements: https://www.ncsc.gov.uk/blog-post/securing-office-365-with-better-configuration.

    ------------------------------
    Guillaume Boutisseau
    CCSK Authorized Instructor , CCSP
    ------------------------------



  • 4.  RE: Office 365

    Posted 7 days ago
    Hi Peter,

    CIS has Microsoft 365 benchmark which includes a good set of security baselines.
    The guide offers also means to audit the setting on a client tenant. For risk/compliance I also refer to the Microsoft Trust Center.

    Hope it helps

    ------------------------------
    Saan Vandendriessche CCSP | CISSP | CRISC
    Cyber Security Manager
    Deloitte
    Brussels
    ------------------------------