Microsoft have improved the Classification section in the Office 365 Security and Compliance centre. The change will help to reduce confusion and make it easier for records managers and security administrators to focus on their individual needs. Previous user interface The primary change is to the menu interface. The previous menu options, shown in the screenshot … Continue reading Office 365 Security and Compliance – classification label changes
Category: Information Security
Migrating to SharePoint Online – Part 1 (Planning)
We implemented SharePoint 2010 in early 2012 and then upgraded to SharePoint 2013 in early 2015. After acquiring Office 365 enterprise licences in April 2016 we began to play for the migration of our existing on-premise environment to SharePoint Online. After testing the migration process with inactive sites, we started to migrate active sites from … Continue reading Migrating to SharePoint Online – Part 1 (Planning)
Office 365 – Applying retention periods to SharePoint document libraries and disposal/disposition actions
Records retention policies are created in the Security and Compliance Admin portal, Classifications section of Office 365, as noted in my previous post of 9 March 2018 on the subject. This post describes how these are applied to document libraries and what happens when the records reach their disposal/disposition period. Note: In Australia we refer … Continue reading Office 365 – Applying retention periods to SharePoint document libraries and disposal/disposition actions
Changes to security classification and records retention in Office 365
In May 2016, I wrote about the creation of security classification labels in the Azure Information Protection (AIP) portal (old post here). Quite a bit has changed since that post, in particular the naming of policies, away from 'High' to 'Low' Business Impact (e.g., HBI - LBI) to real-world words such as 'General' and 'Highly … Continue reading Changes to security classification and records retention in Office 365
SharePoint Online and OneDrive for Business – Preventing external sharing of data
A recent (September 2017) article suggested that OneDrive for Business (ODfB) (and by extension SharePoint Online (SPO); ODfB is a SharePoint-based service), a key application in Office 365 was a potential source of data leaks and/or target for hacking attacks. I don't disagree that, if not configured correctly, any online document management system - not … Continue reading SharePoint Online and OneDrive for Business – Preventing external sharing of data
Office 365 – new data governance and records retention management features
At the September 2017 Ignite conference in Orlando, Florida, Microsoft announced a range of new features coming soon to data governance in Office 365. These new features build on the options already available in the Security and Compliance section of the Office 365 Admin portal. You can watch the video of the slide presentation here. … Continue reading Office 365 – new data governance and records retention management features
Applying (new) Retention Policies to Office 365 Content
From time to time I'm asked about the way records retention policies 'work' in SharePoint. A common criticism has been that SharePoint's retention model is based on applying retention policies to individual records (e.g., documents in a library or individual emails) rather than to aggregations of records, the most obvious of which is a document library. The idea … Continue reading Applying (new) Retention Policies to Office 365 Content