Page 36 - Cyber Defense eMagazine - December 2017

5. Stay on Top of Third-Party Patching

In the cybersecurity industry, the focus has moved away from attacking operating

systems. It’s shifted to applications and mobile as well. So, application updates are no
longer about functionality, they’re also about security. Antivirus is critical, but it’s just

one of many third-party applications.

With tools like Configuration Manager or Intune, you can actually download the updates
from the vendors and then push them out to your users. However, both products are

limited to specific software vendors in different ways. That means administrators have to
do a lot of heavy lifting or find some other solution to keep third-party patching current.

3
You can learn more about the challenges in the E third-party patching podcast with
Duncan McAlynn at soundcloud.com/adaptiva/e3-podcast-duncan-mcalynn.

6. Office 365 Shops Should Check Their Secure Score

In a corporate environment, companies really are paying more attention to how they
lock down Office 365. They need to make sure data isn’t leaked and that business units

aren’t sharing data to other business units. Microsoft data loss prevention can help, but
it’s just another tool to configure. The question is: are your systems configured

correctly?

To this end, Microsoft has a piece of software called Secure Score. It analyzes the
security of Office 365 across your entire organization. The solution analyzes things like

users’ regular activities and security settings. Then it gives you a sort of “credit score for
security.”

You as an administrator can run Secure Score on your Office 365 portal. The higher the

score, the more secure you are. Microsoft gives you all of the security tools but doesn’t
necessarily configure them for you. You might go in and find that you have a horrible

score. At least you’ll know what to do to fix it!

36 Cyber Defense eMagazine – December 2017 Edition
Copyright © 2017, Cyber Defense Magazine, All rights reserved worldwide.