Secure Microsoft 365 with Automatic User Block and Remediation
Cyber attacks come from many vectors, businesses can take many actions to reduce risk of account compromise but the inevitably it will happen, users will get compromised.
What counts in these situations is how both users and organisations react when that occurs.
From users, you want security training and honest non-judgemental reporting and reactions from your cyber security team and/or management. Building a culture of education and openness ensures users are able to identify issues and feel confident in reporting them to allow fast remediation, containment and incident management.
From the organisation you need fast objective analytics of user activity and automatic security to lock down accounts. Once accounts are locked, you need ways for users to get back online quickly and securely.
Microsoft User Risks
Microsoft monitors users in real time with every action they take, these action build profiles on user security, normal behaviours and normal working processes. This allows Microsoft to identify Risky behaviours such as Logins from VPN’s or Proxys, Impossible Travel between locations, Mass access to sensitive files etc etc, Microsoft then build a risk profile on a user and manage that user according to the assigned risk level.
Microsoft Risk Remediation
Microsoft EntraID Plan 2 allows administrators to configure automatic conditional access policies that block users at higher risk levels from accessing data, and then require the user remediate that risk before gaining access again, this could be by changing a password or other appropriate actions.
Small Business Benefits
Rapid response to incidents
Immediate lock down of compromised accounts
Self remediation ensures users can quickly regain access.
Microsoft Licensing Requirements
Unfortunately this feature is limited to licenses including EntraID P2 plans such as:
- Entra ID P2
- Microsoft Entra Suite
- Microsoft 365 E5
- Microsoft 365 E5 Security
- Microsoft Entra Suite add-on
Summary
This is a great new security feature bringing fast security lock down and remediation to business, however the licensing requirements may be inhibitive for some small businesses. If your interest in this for your business you can speak to our expert team anytime on 0330 900 1066 and we can create a personalise proposal for you
