What will we cover today?

• Security as a Service: one-time sale or a journey?

• On the horizon

• Defense in depth strategy

• Security beyond Office 365

• Windows as a Service

• What to do next?

ONE TIME SALE OR AJOURNEY?

Threat protection over time

P R O D U C T R E L E A S E

T H R E A T S O P H I S T I C A T I O N

T I M E

CA

PA

BIL

IT

Y

Disrupt and out innovate our

adversaries by design

Protection Gap

Attackers take advantage of

periods between releases

P R O D U C T R E L E A S E

T H R E A T S O P H I S T I C A T I O N

T I M E

CA

PA

BIL

IT

Y

Game change with Windows and Software as a Service

Protection Gap

http://businessandburgers.com/episodes/

https://info.microsoft.com/7StepstoaHolisticSecurityStrategy-Registration.html

https://oag.ca.gov/breachreport2016

ON THEHORIZON

“Make no mistake, the GDPR sets a new and higher bar for privacy rights, for security, and for compliance.

And while your journey to GDPR may seem challenging, Microsoft is here to help all of our customers around the world.”

Brad Smith

President & Chief Legal OfficerMicrosoft Corporation

>>Microsoft Trust Center

Providing clarity and consistency for the protection of personal data

Enhanced personal privacy rights

Increased duty for protecting data

Mandatory breach reporting

Significant penalties for non-compliance

The General Data Protection

Regulation (GDPR) imposes new

rules on organizations that offer goods

and services to people in the European

Union (EU), or that collect and analyze

data tied to EU residents, no matter

where they are located.

Microsoft believes the GDPR is an important step forward for clarifying and enabling individual privacy rights

Protecting customer

privacy with GDPR

DEFENSE IN DEPTHSTRATEGY

IntelligenceCollaborationTrust Mobility

Empower employees by creating a secure & productive business

DETECT

RESPOND

PROTECT

!

Our Defense in Depth Strategy

SECURE PRODUCTIVE ENTERPRISE SKU PLANS – CSP SPE E3

$34/user/

month

SPE E5

$61/user/

month

Authoring Word, Excel, PowerPoint, OneNote, Access X X

Sites & Content management SharePoint, OneDrive X X

Mail And Social Outlook, Exchange, Yammer X X

Meetings, Collaboration

& Voice

Skype for Business & Microsoft Teams

PSTN Conferencing, Cloud PBX

X X

X

Apps & Device Management Microsoft InTune, Azure Active Directory Premium P1

Windows Store for Business, Microsoft Desktop Optimization Package, VDA

X

X

X

X

Security & Compliance Office 365: Encryption, Data Loss Protection, Rights Management

Windows: Enterprise Data Protection, Windows Hello, Credential Guard, Device Guard, App Locker

EMS: Microsoft Advanced Threat Analytics, Azure Information Protection P1

Office 365: Advanced Threat Protection, Advanced Security Management, Customer Lockbox, Advanced

eDiscovery

Windows: Windows Defender Advanced Threat Protection

EMS: Azure Active Directory Premium P2, Microsoft Cloud App Security, Azure Information Protection P2

X

X

X

X

X

X

X

X

X

X

Analytics Power BI, Delve Analytics, Personal and Org Analytics X

Pricing is No Level – Final pricing may vary due to rounding and geo location

Healthcare providers and services

Financial services

Legal services

Any service that collects PII, SSNs, credit data etc.

Biotech, medicine, healthcare (FDA, HIPPA)

Insurance, investment services (SEC, SOX)

Food processing and manufacturing (FDA)

Toys and device manufacturing (CPSIA, FCC)

Software consulting and application development

Software-as-a-Service (SaaS) providers

Financial models

Architectural plans

SECURITY BEYONDOFFICE 365

Secure access

Single sign-on experience

augmented by self-service

capabilities.

Mobile management

Control how data within Office Mobile

apps (and other apps) is shared.

Advanced security

Protect against identity breaches

that can result in data loss.

Extending Office 365 capabilities through EMS

Shadow

IT

Data breach

Employees

Partners

Customers

Cloud apps

Identity Devices Apps & Data

Transition tocloud & mobility

New attack landscape

Current defenses not sufficient

Identity breach On-premises apps

SaaS

Azure

Secure access

Cloud HR

Web apps

(Azure Active Directory Application Proxy)

Integrated

custom apps

SaaS apps

HR and other directories

2500+ popular SaaS apps

Connect and sync on-premises directories

with Azure

Easily publish on-premises web apps via

Application Proxy + Custom apps

through a rich standards-based platform

Microsoft Azure AD

Account, apps and group management

Self-service password reset

Application access requests

Integrated Office 365 app launching

Self-service capabilities in EMS include:

Multi-Factor Authentication (Phone Call, Text, Email)

Mobile management

Protect Office Mobile app data with

• App encryption at rest

• App access control – PIN or credentials

• Save as/copy/paste restrictions

• App-level selective wipe

Extend protection to line of business and third-party apps

Personal apps

Corporate apps

MDM policies

MAM policies

MDM – optional (Intune or third party)

Azure Rights

Management

Microsoft Intune

Corporate data

Personaldata

Multi-identity policy

SECRET

CONFIDENTIAL

INTERNAL

NOT RESTRICTED

IT admin can set policies,

templates, and rules.

Classifications, labels and encryption can be applied automatically based on file source, context, and content.

EMS extends Office 365 manual protection of files

with automatic protection to ensure policy

compliance.

User can build on policies. User can track file and

revoke access if needed.

Revoke access in the case

of unexpected sharing

Track who accessed the data, when, and where

Sue

Bob

JaneJane Competitors

Jane’s access is revoked

Bob accessed from South America

Jane accessed from India

Joe blocked in North America

Jane blocked in Africa

Sue

Map View

Advanced security

Microsoft Advanced Threat Analytics brings the behavioral

analytics concept to IT and the organization’s users.

An on-premises platform to identify advanced security attacks and insider threats beforethey cause damage

Behavioral

Analytics

Detection of advanced

attacks and security risks

Advanced Threat

Detection

Shadow IT

Sanctioned

App Security

Visibility and

control

Compliance and

regulations

Integration with

existing systems and

workflows

Cloud security

expertise

Cloud Discovery

Enterprise Mobility + Security

Basic identity mgmt. via Azure AD for O365:

• Single sign-on for O365

• Basic multi-factor authentication (MFA) for O365

Basic mobile device management via MDM for O365

• Device settings management

• Selective wipe

• Built into O365 management console

RMS protection via RMS for O365

• Protection for content stored in Office (on-premises or O365)

• Access to RMS SDK

• Bring your own key

Advanced Security Management

• Insights into suspicious activity in Office 365

Azure Active Directory

• Risk based conditional access

• Advanced security reports

• Single sign-on for all apps

• Advanced MFA

• Dynamic Groups, Group based licensing assignment

• Privileged identity management

Identity and access management

Cloud App Security

• Visibility and control for all cloud apps

Advanced Threat Analytics

• Identify advanced threats in on premises identities

Identity-driven security

Intune

• Mobile app management

• Users self-service management

• Certificate provisioning

• PC management

Azure Information Protection

• Automated intelligent classification and labeling of data

• Tracking and notifications for shared documents

• Protection for on-premises Windows Server file shares

Information protection

Managed mobile productivity

Windows 10

96% of enterprise customers piloting

15% desktop management time savings*

33% reduction in security issues and time to resolve*

*“The Total Economic Impact(TM) Of Windows 10, a commissioned study conducted by Forrester Consulting on behalf of

Microsoft, June 2016. Results are for a risk adjusted composite organization based on customer interviews.

Traditional on-prem

Active Directory

Domain Join

Group Policy

System Center Configuration

Manager

Azure Active Directory

Azure AD Join

MDM Policies

Microsoft Intune

and other MDM

Traditional on-prem Cloud

Windows 10 designed for modern IT

Modern IT

Traditional IT Cloud

Safer and more secure

DESIGNED FOR DIGITAL TRANSFORMATION

Designed for modern IT Powerful, modern devicesMore Productive

Windows as a Service Subscription (via CSP)

$7 per user, per month

1 seat minimum, no seat limit

5 device installs per user

Rollback to Pro functionality when subscription lapses (90-day grace)

Standardize Windows 7/8.1 Pro desktops up to Windows 10 Pro

POST-BREACHPRE-BREACH

Breach detection

investigation &

response

Device protection

Identity protection

Information protection

Threat resistance

Safer and more secure

Windows 10 helps ensure that user experiences, identity

and data are safe, on the device and in the Microsoft

cloud.

Safely browse the web using virtualization-based

security

Block the latest malware threats including

ransomware

Detect and respond to advanced highly targeted

attacks

Easily deploy Windows Hello for Business with on-

premise Active Directory

Enable consistent enterprise-grade security for

mobile, PC, and IoT devices

Ransomware

CUSTOMERS CAN DEPEND ON WINDOWS 10 TO PROTECT, DETECT, RESPOND TO RANSOMWARE

Prevent users from encountering ransomware threats by blocking

delivery vectors

Isolate ransomware encountered in the browser away from the rest

of the operating system

Detect and block ransomware variants that make their way past

front lines of defense

Data impacted by ransomware can be recovered

Designed for modern IT

Windows 10 delivers the simplest, cost effective & yet

powerful IT lifecycle for every organization

Quickly prepare new devices for user productivity

Keep Windows up to date with no fuss

Reduce costs and increase productivity through

telemetry-based insights

Protect work apps and data on personal devices

Manage PCs through deeper, more granular MDM

settings

More productive

People can increase their productivity using modern

devices and interacting with apps and data naturally and

from anywhere

Naturally create, edit and share digital content with

touch and pen

Reach new levels of productivity and creativity with

Office

Collaborate easier with people directly from the

desktop

Empower everyone to create, share and experience

in 3-D

► http://aka.ms/EMSPartnerJourney

► http://aka.ms/WindowsPartnerJourney

Office 365 CSP

First 30 Days FREE for all net new end user customers;

cannot be Additional to current customers. Monthly

billing only.

Azure CSP

First 30 Days FREE for all net new tenants; must be

ongoing use/12 months of consumption. Credit will be the amount consumed during first 30 days.

Enterprise Mobility +

Security CSPFirst 30 Days FREE for all net new seats

Dynamics 365 for

Financials First 30 Days FREE for all net new seats

Windows 10 Enterprise

Subscription (WES)First 30 Days FREE for all net new seats

Register to qualify >

Additional Details:

• Must be registered to earn. Deadline to register is June

16th.

• All net new seats (O365, Azure, D365 for Financials, EMS,

WES)

must stay with Ingram Micro for at least 12 months;

one-time

project based does not qualify.

• 30 Days Free will be issued as an Ingram Micro Cloud

Marketplace Credit Memo.

• Microsoft qualified SMB customers only; no major

accounts.

• Promotion may change without notice.

Questions? Contact: Microsoft-Cloud@Ingrammicro.com

April 3rd - June 30th 2017

T&Cs: ©2017 Ingram Micro Inc. All rights reserved. Products available while supplies last. Prices subject to change without notice. Promotions are subject to Ingram Micro

Prize Winner Qualifications and Terms as published on http://corp.ingrammicro.com/Terms-of-Use.aspx. All applicable taxes are the responsibility of the winner.

Get the first

30 DAYS FREEon ALL Microsoft CSP via the Ingram Micro Cloud Marketplace.

Training & Enablement

• In person events

• 300-level lab/scenario based technical

training for partners that currently transact

Azure through the Ingram Micro Cloud

Marketplace or intend to transact through

the Cloud Marketplace.

• Upcoming events:

• June 5-7- Buffalo, NY

• June 7-9- Buffalo, NY

*new schedule pending, 8 more workshops to

come next half!

Azure Practice Development

Workshops

Azure Workload Virtual

Workshop Webinars

• Virtual webinar, on demand

• Take a deeper dive on Azure workloads in

our technical 200-300 level virtual

workshops.

Get an overview

Understand the capabilities

View the solution in a demo

Price it out in a live fashion

Date Webinar Focus

6/9/2017 Microsoft + Acronis: Keep it in the Cloud, A Security Story

6/13/2017 What is Hybrid Cloud?

6/14/2017 Azure Workload Virtual Workshop: EMS Uncovered

6/21/2017 Azure Workload Virtual Workshop: Windows 10 as a Subscription

6/23/2017 Microsoft + Acronis: Converting to Azure, A Migration Story

Visit the Microsoft microsite for registration links and more:

http://www.ingrammicrocloud.com/microsoft/

Are you ready to accelerate your Azure practice?

Get a jump start with the Azure Acceleration Kits.

The Azure Acceleration Kits include:

Free 30-Days Advanced Support from Microsoft

Free migration and assessment services

Ingram Micro “Easy Azure” configuration guides

Lucrative promotions and discount offers

Sales and technical in person and virtual workshops

IaaS expert led 1:1 consulting and trainings

Azure Acceleration Kits

Easy Azure Starter KitAre you ready to get started with IaaS

but aren’t quite sure how? Or do you

need a simple service like backup?

Azure Enablement KitLearn not just the “how” but the “why”

and the “when” to incorporate an IaaS

solution like Azure into your business.

Azure Expert KitEngage a team of Azure technical experts and

post-sales solutions architects. Advanced

Support for Partners, migration/assessment

promotions, VIP training, and consult services

are all included.

Get started at the Azure Expert Zone:

http://www.ingrammicrocloud.com/microsoft/

Just LaunchedWe are pleased to announce Ingram

Micro’s newly revamped microsite solely

dedicated to all things Microsoft!

Our new Microsoft Microsite includes:

• Upcoming webinars and past webinar

recordings/presentation decks

• Event information such as Cloud Summit,

Azure Practice Development Acceleration

Workshop, and Microsoft Inspire

• Partner promotions

• Information on programs such as Azure

Starter Kit and the Cloud Referral Program

• ...and a chance to win a Surface Studio!!!

Visit now and enter

our raffle for a chance

to win a Surface Studio!

http://www.ingrammicrocloud.com/microsoft/