Hi Technet Junkie and thanks for posting here.
Cloud App Security is a critical component of the Microsoft Cloud Security stack. It is a comprehensive solution that helps organizations take full advantage of the promise of cloud applications while maintaining control with improved visibility into activity.
It also increases protection of critical data across cloud applications. With tools to help uncover Shadow IT, assess risk, enforce policies, investigate activities and stop threats, organizations can safely move to the cloud while maintaining control of critical
data.
Microsoft Cloud App Security provides following key features: Discovery, Data control and Threat protection.
Discovery:
Cloud discovery uses your traffic logs to discover and analyze which cloud apps are in use. You can manually upload log files for analysis from your firewalls and proxies, or you can choose automatic upload.
Then it provides a risk score by evaluating each discovered service against more than 60 parameters: evaluating the service provider, security mechanisms, and compliance certifications. These details help determine and assess the credibility and reliability
of each cloud service discovered, represented by a risk score.
Gain visibility by discovering apps, activities, users, data and files in your cloud environment as well as third-party apps that are connected to your cloud.
Data Control:
You can use out-of-the-box policies or build and customize your own. Every insight is actionable, allowing you to remediate with a single click or implement data sharing and granular usage policies.
You can govern data in the cloud, such as files that are stored in cloud drives, as attachments, or within cloud application fields. Use pre-defined fields or extend existing enterprise DLP policies to your SaaS applications. Dynamic reports can run on DLP
violations, sensitive file sharing, and data- sharing violations.
Threat protection:
You can identify anomalies in your cloud usage that may be indicative of a data breach. Cloud App Security advanced machine learning heuristics learn how each user interacts with each SaaS application and, through behavioral analysis, assesses the risks in
each transaction. This includes simultaneous logins from two countries, the sudden download of terabytes of data, or multiple failed login attempts that may signify a brute force attack.
There are really good MS articles published, please check them:
Cloud App Security:
https://www.microsoft.com/en-us/cloud-platform/cloud-app-security
What is Microsoft Cloud App Security?
https://technet.microsoft.com/en-US/library/mt489024%28TechNet.10%29.aspx?f=255&MSPPError=-2147217396
Getting started with Cloud App Security:
https://technet.microsoft.com/en-us/library/mt668458.aspx?f=255&MSPPError=-2147217396
Hope these help you,
Regards,
-Tomi
Tomi Pietilä
Please remember to mark the replies as answers if they help and unmark them if they provide no help.
Blog
Twitter
LinkedIn
