MS CAS is a cloud-based service that aims to protect the work of cloud services, but it also allows you to monitor employees' personal devices, obtains information about the security of these devices, vulnerabilities, attempts to hack devices, the possibility of credentials being compromised, and suspicious activity. This service has convenient data visualization capabilities, can analyze data to identify threats, has flexible management policies, and automates security monitoring processes. All these features minimize the security specialist's workload while maintaining a high level of control and protection. MS CAS transparently integrates into the work of employees and does not create problems in their daily routine.

With this service, we are focused on using MS CAS in the Microsoft Cloud services protection scenario

1. Data protection and privacy, including the use of the Conditional Access App Control
2. Prevention of information theft
3. Forced data encryption and control of the device network location
4. Detection of suspicious and viral activity, possible attacks
5. Bringing cloud infrastructure to match industry-standard requirements, including analysis of used applications and potential risks, user risk assessment, and data access restriction

Your company may have personalized requirements for customizing this solution and we will take these into consideration while implementing Microsoft Cloud App Security, allowing you to attain a reliable and secure, yet easy to manage, work environment.

IT Partner responsibilities #

1. Gain an understanding of Client's cloud security objectives and requirements toward cloud usage and verify this against real usage of cloud applications and services
2. Provide a prioritized and actionable road map for the customer containing proposed actions based on user impact and implementation cost
3. Develop a plan and scenario of MS CAS
4. Configure the Cloud App Security portal
5. Configure integration with cloud services
6. Deploy Microsoft Defender ATP using Group Policy or Microsoft Intune
7. Configure the integration of Cloud Discovery and Windows 10 operating systems by integrating Microsoft Defender with Cloud App Security
8. Configure Access Policies and Suspicious Activity Detection Policies
9. Configure data management policies
10. Configure application detection
11. Configure reporting of Cloud App Security data
12. Configure notifications of potentially dangerous and dangerous actions

Client responsibilities #

1. Coordinate Client resources and staff schedules
2. Provide a dedicated point of contact responsible for working with IT Partner
3. Provide all the necessary information for the statement of work preparation
4. Coordinate any outside vendor resources and schedules
5. Configure all network equipment, such as load balancers, routers, firewalls, and switches
6. Review and approve engagement deliverables in a timely manner

Additional cost items not provided by the project #

1. Employee training (administrators, security professionals) to work with Cloud App Security
2. Regular monitoring of reports and actions, as well as reaction to incidents
3. Purchase of required product licenses

Please note that the client's refusal to purchase licenses that may be required for the implementation of the tasks set by the client is the responsibility of the client and cannot be considered as a reason for refusing to confirm the success of the project. In such a situation, a demo license for the appropriate product can be used; afterward, the client purchases a working license for the product independently or with the help of IT Partner.

Upon completion of the project, we will provide a project closeout report. This document will indicate the final project status including acceptance criteria matching, outstanding issues, and the final budget. If you require more extensive documentation, it can be provided for an additional fee. 

Prerequisites #

1. Microsoft 365 tenant and Microsoft Cloud App Security service. Either customer production Office 365 tenant with CAS (through E5 license) or trial Office 365 tenant and CAS trial (for up to 30 days)
2. Windows 10 Corporate E5
3. Microsoft 365 E5 (M365 E5) including Windows 10 Corporate E5

Plan #

The plan may vary depending on your needs.

1. Kickoff meeting
2. Collecting information about current infrastructure, users, applications, and devices
3. Cloud App Security implementation planning
4. Configuring the Cloud App Security portal
5. Configuring integration with cloud services
6. Deploying Microsoft Defender ATP using Group Policy or Microsoft Intune
7. Configuring the integration of Cloud Discovery and Windows 10 operating systems by integrating Microsoft Defender with Cloud App Security
8. Configuring policies and reports according to Cloud App Security data
9. Configuring notifications of potentially dangerous and dangerous actions
10. Verifying and fixing issues

Success Criteria #

1. Client requirements for MS CAS operations defined
2. A statement of work matching the implementation of customer requirements developed and provided (if they are able to be implemented in the current environment)
3. MS CAS services configured according to the statement of work
4. Administrators can view operative and analytic information from the MS CAS dashboard