SharePoint Defense in Depth

A community site for SharePoint security and compliance issues

About this community

SharePoint Defense in Depth is an open community site and resource for those interested in security, defense in depth, compliance, and SharePoint. This community site provides a place to pose questions to experts, and to learn how best to tackle your SharePoint security challenges.

For access to resources including a SharePoint Content Scanner, and SharePoint Risk Assessment, please create a login. Note that to limit spam and non-useful content on this site, we require either a valid corporate e-mail domain, or a legitimate LinkedIn profile for registrants before approving access.

Our simple goal is to provide the SharePoint community with tools and resources that enable you to more effectively secure your SharePoint environments. We encourage you to engage, and post your own tips, tricks, and resource to help make SharePoint sites more secure. If you have ideas as to how we can make the SharePoint Defense in Depth site a better community resource, please contact us on: info@sharepointdefenseindepth.com.

Blog Posts

Understanding file encryption in Office 365

Posted by Mike Fleck on March 8, 2016 at 12:01pm 0 Comments

In early 2015 Microsoft started rolling out per file encryption for SharePoint Online and OneDrive for Business in Office 365. Prior to that, the file encryption capability in Office 365 was simple BitLocker storage encryption. The newer approach, often referred to as Fort Knox, involved breaking files into fragments and encrypting each file fragment with a unique encryption key. Microsoft sometimes refers to this fragmenting of files as “shredded storage.” The fragment encryption keys (FEK)…

Continue

Reimagining a New Security Model for SharePoint

Posted by Peter Bradley on January 6, 2016 at 5:00pm 0 Comments

SharePoint's old security model was conceived in a different era. Let's imagine what a new security model might look like.

In my last post, we looked at the humble beginnings of SharePoint as Microsoft Tahoe, and pointed out that the security…

Continue

The free SharePoint Content Scanner is back

Posted by Mike Fleck on December 18, 2015 at 12:57pm 0 Comments

CipherPoint is once again providing free access to the content scanner.Yes, Office 365 has Data Loss Prevention but there are few reasons why you would be interested in this tool vs. the one from Microsoft.

  1. The CipherPoint scanner lets you create custom patterns to find.
  2. The CipherPoint scanner can search for sensitive content in on-premises AND Office 365 at the same time.
  3. The CipherPoint scanner is a lot easier to use.

To get the scanner you…

Continue

Microsoft Tahoe and the Evolution of SharePoint Security

Posted by Peter Bradley on December 14, 2015 at 4:01am 0 Comments

In my first post, I explained the biggest problems of SharePoint security model and how it creates risks. With so much change, so much growth, so many new threats - perhaps SharePoint's security model could use a rethink?

Microsoft Tahoe - Where…

Continue

Events

Videos

Forum

Take the CipherPoint's Annual State of Collaboration Security Survey

Started by Mike Fleck in General security topics Jul 14, 2014. 0 Replies

Each year, CipherPoint conducts a survey to understand businesses’ top security concerns relating to file…Continue

Government Agencies Deploying SharePoint Despite the Lack of FIPS 140-2 Level Validation

Started by K Nahbrha in Industry compliance. Last reply by Mike Fleck Dec 6, 2013. 1 Reply

How are government agencies deploying SharePoint 2010 despite the fact that SharePoint does not support FIPS 140-2 level validation as required by NIST?The operating system that hosts SharePoint must…Continue

Tags: DISA, Cryptography, NIST, 2010, SharePoint

Securing SharePoint

Started by Site Admin in General security topics Aug 16, 2013. 0 Replies

A reader posted this response to a blog we posted on the Snowden breach, and the SharePoint connection. What do you think...can SharePoint be securely deployed?JimOur blog is here:…Continue

Is anyone using RMS and SharePoint 2013?

Started by Mike Fleck in General security topics. Last reply by Kirk Hasty Jul 22, 2013. 1 Reply

One of our members just posted the above question in his status. Is anyone here using Windows Rights Management (or third party RMS provider) with *any* version of SharePoint? If so, please post your…Continue

Tags: 2013, sharepoint, management, rights

Latest Activity

Todd Colstrom is now a member of SharePoint Defense in Depth
22 hours ago
Hampton McNeil III is now a member of SharePoint Defense in Depth
May 12
Profile IconRobert Jones and DJSP joined SharePoint Defense in Depth
May 10
Bob Smith is now a member of SharePoint Defense in Depth
May 9
Jeanne McGaffigan is now a member of SharePoint Defense in Depth
Apr 19
Profile IconDan Bomgardner and Cara Gwinn joined SharePoint Defense in Depth
Apr 18
Geoff Talbot is now a member of SharePoint Defense in Depth
Apr 13
Ole is now a member of SharePoint Defense in Depth
Apr 12
Emily J Gaston is now a member of SharePoint Defense in Depth
Mar 28
Ronald Noorhoff is now a member of SharePoint Defense in Depth
Mar 16
Alex Pekler is now a member of SharePoint Defense in Depth
Mar 14
Mike Fleck posted a blog post

Understanding file encryption in Office 365

In early 2015 Microsoft started rolling out per file encryption for SharePoint Online and OneDrive for Business in Office 365. Prior to that, the file encryption capability in Office 365 was simple BitLocker storage encryption. The newer approach, often referred to as Fort Knox, involved breaking files into fragments and encrypting each file fragment with a unique encryption key. Microsoft sometimes refers to this fragmenting of files as “shredded storage.” The fragment encryption keys (FEK)…See More
Mar 8
Larry Leeth is now a member of SharePoint Defense in Depth
Feb 18
Peter Bradley posted blog posts
Feb 2
Mike Fleck posted a blog post

The free SharePoint Content Scanner is back

CipherPoint is once again providing free access to the content scanner.Yes, Office 365 has Data Loss Prevention but there are few reasons why you would be interested in this tool vs. the one from Microsoft.The CipherPoint scanner lets you create custom patterns to find.The CipherPoint scanner can search for sensitive content in on-premises AND Office 365 at the same time.The CipherPoint scanner is a lot easier to use.To get the scanner you first have to attend product training. The next session…See More
Dec 18, 2015
Mike Fleck commented on Mike Fleck's blog post We're bringing it back!
"Come and get it! If you want to get your hands on the Content Scanner, attend the product training and we'll email you a license file. It's that easy. Here's the registration link for the…"
Dec 18, 2015

Photos

Loading…
  • Add Photos
  • View All

Sponsored by CipherPoint

 
 
 

© 2016   Created by Jim.   Powered by

Badges  |  Report an Issue  |  Terms of Service