What will we cover today?
• Security as a Service: one-time sale or a journey?
• On the horizon
• Defense in depth strategy
• Security beyond Office 365
• Windows as a Service
• What to do next?
ONE TIME SALE OR AJOURNEY?
Threat protection over time
P R O D U C T R E L E A S E
T H R E A T S O P H I S T I C A T I O N
T I M E
CA
PA
BIL
IT
Y
Disrupt and out innovate our
adversaries by design
Protection Gap
Attackers take advantage of
periods between releases
P R O D U C T R E L E A S E
T H R E A T S O P H I S T I C A T I O N
T I M E
CA
PA
BIL
IT
Y
Game change with Windows and Software as a Service
Protection Gap
https://info.microsoft.com/7StepstoaHolisticSecurityStrategy-Registration.html
https://oag.ca.gov/breachreport2016
ON THEHORIZON
“Make no mistake, the GDPR sets a new and higher bar for privacy rights, for security, and for compliance.
And while your journey to GDPR may seem challenging, Microsoft is here to help all of our customers around the world.”
Brad Smith
President & Chief Legal OfficerMicrosoft Corporation
>>Microsoft Trust Center
Providing clarity and consistency for the protection of personal data
Enhanced personal privacy rights
Increased duty for protecting data
Mandatory breach reporting
Significant penalties for non-compliance
The General Data Protection
Regulation (GDPR) imposes new
rules on organizations that offer goods
and services to people in the European
Union (EU), or that collect and analyze
data tied to EU residents, no matter
where they are located.
Microsoft believes the GDPR is an important step forward for clarifying and enabling individual privacy rights
Protecting customer
privacy with GDPR
DEFENSE IN DEPTHSTRATEGY
IntelligenceCollaborationTrust Mobility
Empower employees by creating a secure & productive business
DETECT
RESPOND
PROTECT
!
Our Defense in Depth Strategy
SECURE PRODUCTIVE ENTERPRISE SKU PLANS – CSP SPE E3
$34/user/
month
SPE E5
$61/user/
month
Authoring Word, Excel, PowerPoint, OneNote, Access X X
Sites & Content management SharePoint, OneDrive X X
Mail And Social Outlook, Exchange, Yammer X X
Meetings, Collaboration
& Voice
Skype for Business & Microsoft Teams
PSTN Conferencing, Cloud PBX
X X
X
Apps & Device Management Microsoft InTune, Azure Active Directory Premium P1
Windows Store for Business, Microsoft Desktop Optimization Package, VDA
X
X
X
X
Security & Compliance Office 365: Encryption, Data Loss Protection, Rights Management
Windows: Enterprise Data Protection, Windows Hello, Credential Guard, Device Guard, App Locker
EMS: Microsoft Advanced Threat Analytics, Azure Information Protection P1
Office 365: Advanced Threat Protection, Advanced Security Management, Customer Lockbox, Advanced
eDiscovery
Windows: Windows Defender Advanced Threat Protection
EMS: Azure Active Directory Premium P2, Microsoft Cloud App Security, Azure Information Protection P2
X
X
X
X
X
X
X
X
X
X
Analytics Power BI, Delve Analytics, Personal and Org Analytics X
Pricing is No Level – Final pricing may vary due to rounding and geo location
Healthcare providers and services
Financial services
Legal services
Any service that collects PII, SSNs, credit data etc.
Biotech, medicine, healthcare (FDA, HIPPA)
Insurance, investment services (SEC, SOX)
Food processing and manufacturing (FDA)
Toys and device manufacturing (CPSIA, FCC)
Software consulting and application development
Software-as-a-Service (SaaS) providers
Financial models
Architectural plans
SECURITY BEYONDOFFICE 365
Secure access
Single sign-on experience
augmented by self-service
capabilities.
Mobile management
Control how data within Office Mobile
apps (and other apps) is shared.
Advanced security
Protect against identity breaches
that can result in data loss.
Extending Office 365 capabilities through EMS
Shadow
IT
Data breach
Employees
Partners
Customers
Cloud apps
Identity Devices Apps & Data
Transition tocloud & mobility
New attack landscape
Current defenses not sufficient
Identity breach On-premises apps
SaaS
Azure
Secure access
Cloud HR
Web apps
(Azure Active Directory Application Proxy)
Integrated
custom apps
SaaS apps
HR and other directories
2500+ popular SaaS apps
Connect and sync on-premises directories
with Azure
Easily publish on-premises web apps via
Application Proxy + Custom apps
through a rich standards-based platform
Microsoft Azure AD
Account, apps and group management
Self-service password reset
Application access requests
Integrated Office 365 app launching
Self-service capabilities in EMS include:
Multi-Factor Authentication (Phone Call, Text, Email)
Mobile management
Protect Office Mobile app data with
• App encryption at rest
• App access control – PIN or credentials
• Save as/copy/paste restrictions
• App-level selective wipe
Extend protection to line of business and third-party apps
Personal apps
Corporate apps
MDM policies
MAM policies
MDM – optional (Intune or third party)
Azure Rights
Management
Microsoft Intune
Corporate data
Personaldata
Multi-identity policy
SECRET
CONFIDENTIAL
INTERNAL
NOT RESTRICTED
IT admin can set policies,
templates, and rules.
Classifications, labels and encryption can be applied automatically based on file source, context, and content.
EMS extends Office 365 manual protection of files
with automatic protection to ensure policy
compliance.
User can build on policies. User can track file and
revoke access if needed.
Revoke access in the case
of unexpected sharing
Track who accessed the data, when, and where
Sue
Bob
JaneJane Competitors
Jane’s access is revoked
Bob accessed from South America
Jane accessed from India
Joe blocked in North America
Jane blocked in Africa
Sue
Map View
Advanced security
Microsoft Advanced Threat Analytics brings the behavioral
analytics concept to IT and the organization’s users.
An on-premises platform to identify advanced security attacks and insider threats beforethey cause damage
Behavioral
Analytics
Detection of advanced
attacks and security risks
Advanced Threat
Detection
Shadow IT
Sanctioned
App Security
Visibility and
control
Compliance and
regulations
Integration with
existing systems and
workflows
Cloud security
expertise
Cloud Discovery
Enterprise Mobility + Security
Basic identity mgmt. via Azure AD for O365:
• Single sign-on for O365
• Basic multi-factor authentication (MFA) for O365
Basic mobile device management via MDM for O365
• Device settings management
• Selective wipe
• Built into O365 management console
RMS protection via RMS for O365
• Protection for content stored in Office (on-premises or O365)
• Access to RMS SDK
• Bring your own key
Advanced Security Management
• Insights into suspicious activity in Office 365
Azure Active Directory
• Risk based conditional access
• Advanced security reports
• Single sign-on for all apps
• Advanced MFA
• Dynamic Groups, Group based licensing assignment
• Privileged identity management
Identity and access management
Cloud App Security
• Visibility and control for all cloud apps
Advanced Threat Analytics
• Identify advanced threats in on premises identities
Identity-driven security
Intune
• Mobile app management
• Users self-service management
• Certificate provisioning
• PC management
Azure Information Protection
• Automated intelligent classification and labeling of data
• Tracking and notifications for shared documents
• Protection for on-premises Windows Server file shares
Information protection
Managed mobile productivity
Windows 10
96% of enterprise customers piloting
15% desktop management time savings*
33% reduction in security issues and time to resolve*
*“The Total Economic Impact(TM) Of Windows 10, a commissioned study conducted by Forrester Consulting on behalf of
Microsoft, June 2016. Results are for a risk adjusted composite organization based on customer interviews.
Traditional on-prem
Active Directory
Domain Join
Group Policy
System Center Configuration
Manager
Azure Active Directory
Azure AD Join
MDM Policies
Microsoft Intune
and other MDM
Traditional on-prem Cloud
Windows 10 designed for modern IT
Modern IT
Traditional IT Cloud
Safer and more secure
DESIGNED FOR DIGITAL TRANSFORMATION
Designed for modern IT Powerful, modern devicesMore Productive
Windows as a Service Subscription (via CSP)
$7 per user, per month
1 seat minimum, no seat limit
5 device installs per user
Rollback to Pro functionality when subscription lapses (90-day grace)
Standardize Windows 7/8.1 Pro desktops up to Windows 10 Pro
POST-BREACHPRE-BREACH
Breach detection
investigation &
response
Device protection
Identity protection
Information protection
Threat resistance
Safer and more secure
Windows 10 helps ensure that user experiences, identity
and data are safe, on the device and in the Microsoft
cloud.
Safely browse the web using virtualization-based
security
Block the latest malware threats including
ransomware
Detect and respond to advanced highly targeted
attacks
Easily deploy Windows Hello for Business with on-
premise Active Directory
Enable consistent enterprise-grade security for
mobile, PC, and IoT devices
Ransomware
CUSTOMERS CAN DEPEND ON WINDOWS 10 TO PROTECT, DETECT, RESPOND TO RANSOMWARE
Prevent users from encountering ransomware threats by blocking
delivery vectors
Isolate ransomware encountered in the browser away from the rest
of the operating system
Detect and block ransomware variants that make their way past
front lines of defense
Data impacted by ransomware can be recovered
Designed for modern IT
Windows 10 delivers the simplest, cost effective & yet
powerful IT lifecycle for every organization
Quickly prepare new devices for user productivity
Keep Windows up to date with no fuss
Reduce costs and increase productivity through
telemetry-based insights
Protect work apps and data on personal devices
Manage PCs through deeper, more granular MDM
settings
More productive
People can increase their productivity using modern
devices and interacting with apps and data naturally and
from anywhere
Naturally create, edit and share digital content with
touch and pen
Reach new levels of productivity and creativity with
Office
Collaborate easier with people directly from the
desktop
Empower everyone to create, share and experience
in 3-D
► http://aka.ms/EMSPartnerJourney
► http://aka.ms/WindowsPartnerJourney
Office 365 CSP
First 30 Days FREE for all net new end user customers;
cannot be Additional to current customers. Monthly
billing only.
Azure CSP
First 30 Days FREE for all net new tenants; must be
ongoing use/12 months of consumption. Credit will be the amount consumed during first 30 days.
Enterprise Mobility +
Security CSPFirst 30 Days FREE for all net new seats
Dynamics 365 for
Financials First 30 Days FREE for all net new seats
Windows 10 Enterprise
Subscription (WES)First 30 Days FREE for all net new seats
Register to qualify >
Additional Details:
• Must be registered to earn. Deadline to register is June
16th.
• All net new seats (O365, Azure, D365 for Financials, EMS,
WES)
must stay with Ingram Micro for at least 12 months;
one-time
project based does not qualify.
• 30 Days Free will be issued as an Ingram Micro Cloud
Marketplace Credit Memo.
• Microsoft qualified SMB customers only; no major
accounts.
• Promotion may change without notice.
Questions? Contact: [email protected]
April 3rd - June 30th 2017
T&Cs: ©2017 Ingram Micro Inc. All rights reserved. Products available while supplies last. Prices subject to change without notice. Promotions are subject to Ingram Micro
Prize Winner Qualifications and Terms as published on http://corp.ingrammicro.com/Terms-of-Use.aspx. All applicable taxes are the responsibility of the winner.
Get the first
30 DAYS FREEon ALL Microsoft CSP via the Ingram Micro Cloud Marketplace.
Training & Enablement
• In person events
• 300-level lab/scenario based technical
training for partners that currently transact
Azure through the Ingram Micro Cloud
Marketplace or intend to transact through
the Cloud Marketplace.
• Upcoming events:
• June 5-7- Buffalo, NY
• June 7-9- Buffalo, NY
*new schedule pending, 8 more workshops to
come next half!
Azure Practice Development
Workshops
Azure Workload Virtual
Workshop Webinars
• Virtual webinar, on demand
• Take a deeper dive on Azure workloads in
our technical 200-300 level virtual
workshops.
Get an overview
Understand the capabilities
View the solution in a demo
Price it out in a live fashion
Date Webinar Focus
6/9/2017 Microsoft + Acronis: Keep it in the Cloud, A Security Story
6/13/2017 What is Hybrid Cloud?
6/14/2017 Azure Workload Virtual Workshop: EMS Uncovered
6/21/2017 Azure Workload Virtual Workshop: Windows 10 as a Subscription
6/23/2017 Microsoft + Acronis: Converting to Azure, A Migration Story
Visit the Microsoft microsite for registration links and more:
http://www.ingrammicrocloud.com/microsoft/
Are you ready to accelerate your Azure practice?
Get a jump start with the Azure Acceleration Kits.
The Azure Acceleration Kits include:
Free 30-Days Advanced Support from Microsoft
Free migration and assessment services
Ingram Micro “Easy Azure” configuration guides
Lucrative promotions and discount offers
Sales and technical in person and virtual workshops
IaaS expert led 1:1 consulting and trainings
Azure Acceleration Kits
Easy Azure Starter KitAre you ready to get started with IaaS
but aren’t quite sure how? Or do you
need a simple service like backup?
Azure Enablement KitLearn not just the “how” but the “why”
and the “when” to incorporate an IaaS
solution like Azure into your business.
Azure Expert KitEngage a team of Azure technical experts and
post-sales solutions architects. Advanced
Support for Partners, migration/assessment
promotions, VIP training, and consult services
are all included.
Get started at the Azure Expert Zone:
http://www.ingrammicrocloud.com/microsoft/
Just LaunchedWe are pleased to announce Ingram
Micro’s newly revamped microsite solely
dedicated to all things Microsoft!
Our new Microsoft Microsite includes:
• Upcoming webinars and past webinar
recordings/presentation decks
• Event information such as Cloud Summit,
Azure Practice Development Acceleration
Workshop, and Microsoft Inspire
• Partner promotions
• Information on programs such as Azure
Starter Kit and the Cloud Referral Program
• ...and a chance to win a Surface Studio!!!
Visit now and enter
our raffle for a chance
to win a Surface Studio!
http://www.ingrammicrocloud.com/microsoft/