1
SharePoint Audit and Review
We take a snapshot of SharePoint and review permissioning.
- Review site and folder permissions
- Review external sharing for each site
- Decide whether external sharing needs to be turned off for any site
Sign in
Sign in with your Network Depot account
0%complete
Loading project progress…
The phases
How we get there
Four phases, each building on the one before. The bar at the top of the page shows how far along each one is.
2
Intune Audit and Review
We bring every company device under one source of truth, so protection follows the laptop wherever it goes.
- Review whether any device needs to be enrolled
- Review who is assigned to each device
- Plan to enroll any device that isn't enrolled
3
Defender and Purview Implementation
We design and switch on the protections for people, devices and data, testing quietly first so nothing gets in your team's way.
- Conditional Access policies, introduced in order of impact
- Sensitivity labels and Data Loss Prevention, run in audit mode for 14 days first
- Microsoft Defender for Office 365, Endpoint and Cloud Apps
- Design review and sign-off with you before rollout
4
Implementation and Training
With your sign-off, we roll everything out to the whole team and show everyone how it works day to day.
- Go/no-go check, then rollout to everyone
- Access moved to the new security groups
- Recorded training session: where files live, labels, DLP and sign-in rules in practice
People. Devices. Data.
Network Depot Data Security and Governance
What AI governance means, and the protections Network Depot puts in place so AI can be used safely.
1
People
One standard for every user
Network Depot sets a single standard for what any user can and cannot do with company data, so protection does not depend on individual judgment. In practice, a Teams conversation cannot be copied and pasted into Twitter or Instagram, but the same text pastes into Outlook or a Word document without friction. Screenshots of company data on a phone are blocked. The boundary follows the data, not the device.
Network Depot policies
Mobile App Protection PolicyKeeps company data secure inside Microsoft apps on phones and tablets.
Video coming soon: Mobile App Protection Policy
Conditional Access: allow only US sign-insSign-ins from outside the United States are blocked.
Conditional Access: block legacy authenticationOlder sign-in methods that can't enforce modern security are turned off.
Conditional Access: block legacy authentication clientsNo user can reach cloud applications through legacy authentication clients.
Conditional Access: modern authentication for managed devicesIntune-managed devices must use modern authentication methods to reach cloud applications.
Conditional Access: MFA defaultsMulti-factor authentication is required as the standard for every user.
Block Unauthorized App ConnectionsUsers can't connect unapproved third-party apps to company accounts or data. New app requests go to Network Depot for approval first.
Video coming soon: Block Unauthorized App Connections
2
Devices
A source of truth for your hardware
Intune controls and deploys the policies for device management, device security and device enforcement. Day to day, nothing changes for your team: same laptop, same login, no new steps. Wherever you take your device, security and peace of mind follow.
Network Depot policies
Microsoft Defender for Endpoint
AntivirusReal-time protection, program behavior monitoring, scheduled and on-demand scans, and tamper protection.
BitLockerFull disk encryption, TPM checks for device tampering, and data drive security.
Attack Surface ReductionBlocks the common behaviors attackers use to get malware onto a device.
3
Data
Protecting your information inbound and outbound
Network Depot protects client data in layers, starting with the email and files coming into the organization and extending to how sensitive information is shared and sent out. Together, these controls stop threats as they arrive, secure sensitive information as it moves, and limit how far data can travel beyond the organization, giving each user extra protection for data internally and externally.
Network Depot policies
External sharing turned off where it isn't neededSharePoint sites that don't need outside sharing can't share outside the organization.
Video coming soon: disabling external sharing
Office 365 Message Encryption (OME)Sensitive email is encrypted so only the intended recipients can read it.
Video coming soon: OME encryption
Data Loss PreventionSensitive information is encrypted as it leaves the organization.
Microsoft Defender for Office 365Anti-malware, anti-spam and anti-phishing, with attachment scanning and link scanning.
Controlled Microsoft 365 Group creationNot everyone can create new Microsoft 365 Groups, so shared spaces stay organized and governed.
Defender for Cloud AppsProtects your data and users across the cloud services they work in.
What this unlocks
A foundation AI can be built on
With those three in place, the foundation is built and AI can be deployed safely and securely.
AI Implementation
Rolling out AI at C
Loading the tracker…
Client setup
Sign-on and connectors
User licenses
Who gets which AI
Everyone here is kept in step with the Intune tab: people on either tab are added to the other.
Microsoft Intune
Device enrollment
Loading the device list…
Devices
Every C device
Add a device
Add a device to the list
App connections
Every app connected to C
Third-party and AI apps people have connected, C’s own app registrations, what each one is allowed to touch, who uses it, and the files it has opened. Every app gets a yes or a no, on the record.
Loading the last scan…
Microsoft Purview
Labeling and Data Loss Prevention
Loading the document…
Implementation and Training
Training with the C team
Book an hour with Network Depot to walk your staff through the governance changes and answer questions. Times already taken on the Project Team calendar show as busy. Sessions need to be booked at least 48 hours ahead.
Pilot group
Pilot Group Implement Date
Company go-live
Company Go-Live Date
Schedule a session
Pick a time
Loading the Project Team calendar…
Booked sessions
Upcoming training
Recordings
Training videos
Upload the recording after each session so the whole team can watch it. Videos are stored in the Training Videos folder in SharePoint.
Drop a video here or choose a file
MP4, MOV or WebM. Large recordings upload in parts.
0%
Loading videos…