32. 検出:
スコープ内:
•
•
•
•
•
•
•
•
•
•
インベントリ:
•
•
•
•
•
•
•
Microsoft Azure
Microsoft Azure Data Catalog
Enterprise Mobility + Security (EMS)
Microsoft Cloud App Security
Dynamics 365
データおよびユーザー アクティビティの監査
レポートと分析
Office および Office 365
データ損失防止
Advanced Data Governance
Office 365 eDiscovery
SQL Server および Azure SQL Database
SQL クエリ言語
Windows および Windows Server
Windows Search
ソリューションの例
1
33. 2
ソリューションの例
管理:
データ ガバナンス:
•
•
•
•
•
•
•
•
データ分類:
•
•
•
•
•
•
•
Microsoft Azure
Azure Active Directory
Azure ロールベースのアクセス制御 (RBAC)
Enterprise Mobility + Security (EMS)
Azure Information Protection
Dynamics 365
セキュリティの概念
Office および Office 365
Advanced Data Governance
ジャーナリング (Exchange Online)
Windows および Windows Server
Microsoft Data Classification Toolkit
34. 3
ソリューションの例
データ攻撃の阻止:
•
•
•
•
•
•
•
•
侵害の検出と対応:
•
•
•
•
•
•
Microsoft Azure
Azure Key Vault
Enterprise Mobility + Security (EMS)
Azure Active Directory Premium
Microsoft Intune
Azure AD Identity Protection
Office および Office 365
Advanced Threat Protection
Threat Intelligence
SQL Server および Azure SQL Database
Transparent Data Encryption
Always Encrypted
Windows および Windows Server
Windows Defender Advanced Threat Protection
Windows Hello
Device Guard
保護:
35. 4
ソリューションの例
レポート:
記録保持:
•
•
•
•
•
レポート ツール:
•
•
•
•
•
•
Microsoft Trust Center
Service Trust Portal
Microsoft Azure
Azure 監査とログ
Microsoft Azure Monitor
Enterprise Mobility + Security (EMS)
Azure Information Protection
Dynamics 365
レポートと分析
Office および Office 365
サービス アシュアランス
Office 365 の監査ログ
Customer Lockbox
Windows および Windows Server
Windows Defender Advanced Threat Protection
37. GDPR 製品マッピング
検出
Right to Erasure
Right to Data Portability
管理
Documentation
Privacy by Design
保護
Data Security
Data Transfer
レポート
Documentation
Breach Response and Notification
Security & Compliance Center
A one-stop portal for protecting your data in Office 365. Grant permissions to people who perform compliance tasks.
Data Loss Prevention
Unified policies covering client end-points, empowering IT pros
Advanced Data Governance*
Classify, preserve and/or purge data based on automatic analysis and policy recommendations
Content search
run very large searches across mailboxes, public folders, Office
365 Groups, Microsoft Teams, SharePoint Online sites, One Drive
for Business locations, and Skype for Business conversations
Data Governance
archive and preserve content in Exchange Online mailboxes,
SharePoint Online sites, and OneDrive for Business locations, and
import data into your Office 365 organization.
Threat Management
helps you control and manage mobile device access to your
organization's data, help protect your organization from data
loss, and help protect inbound and outbound messages from
malicious software and spam
Audit Logs
record and search desired user and admin activity
across your organization
eDiscovery
use cases to manage access, place a hold on content locations
relevant to the case, associate multiple Content Searches with the
case, and export search results
Mail Flow Rules
look for specific conditions in messages that pass through your
organization and take action on them.
Advanced Threat Protection
provides security functions that protect user environments that
contain consumer data including Safe Attachments & Safe Links
Service Assurance
deep insights for conducting risk assessments
with details on Microsoft Compliance reports and
transparent status of audited controls.
Advanced eDiscovery*
significantly reduce cost and effort to identify relevant documents
& data relationships by using machine learning to train the
system to intelligently explore large datasets
Azure Information Protection
prevent sensitive information from being printed, forwarded,
saved, edited, or copied by unauthorized people
Threat Intelligence*
analyze and understand their local threat environment, including
malware detected, targeted users, and links to global security
stats
Customer Lockbox*
control how a Microsoft support engineer
accesses your data during a help session
Cloud Application Security
gain enhanced visibility and granular security controls and
policies including the ability to block access to unmanaged cloud
applications
Journaling in Exchange Online
respond to legal, regulatory, and compliance requirements by
recording inbound and outbound email communications.
Advanced Security Management*
gain enhanced visibility and granular security controls and
policies including the ability to suspend user accounts, revoking
access to personal data
Information management policies
With SharePoint Online, control how long to retain content, to
audit what people do with content, and to add barcodes or labels
to documents
Secure Score
insights into your security position and what features are available
to reduce risk while balancing productivity and security
Azure Identity Protection
advanced risk based identity protection with alerts, analysis, &
remediation.