Security Confidential S3 E9 Chris Auger

The Microsoft 365 environment is complex to administer from a cybersecurity perspective. There are very expensive options from Microsoft that add advanced security elements to the 365 environment. In addition to cost, ease of use and knowledge can become limiting factors dependant on the capability of the organization when implementing Microsoft’s advanced security. Dark Rhino Security and Infocyte partnered to build a managed service offering that dramatically simplifies the evaluation, compilation, and remediation of security gaps present in a companies Microsoft 365 environment. Chris Auger from Infocyte and Tyler Smith, a co-founder of Dark Rhino Security, host this episode of Security Confidential and explain how to benchmark against the CIS standards a Microsoft 365 environment and how to remediate the gaps in a simplified manner. The end result is a highly secure Microsoft 365 environment.

Chapter Titles:

00:14 Introduction

03:10 Microsoft 365 Security Overview

04:50 Why Microsoft 365 is difficult

05:30 Why set it and forget is the wrong answer

08:00 Anatomy of an attack, attack chain

13:20 The attack vectors

15:33 Cost structure of M365 tools

20:15 Dark Rhino Security Microsoft 365 Security Assessment .

23:48 Security controls analyzed as part of assessment

25:08 Value of Dark Rhino Security in the Process

26:15 Is Tenable used under the hood?

27:15 Does MFA solve the security gaps?

29:35 What is out of domain forwarding and will they block it?

32:47 Does Small Business really have the risk

42:35 Timeline for Assessments

To get the free vulnerability scan of up to 10,000 nodes in your network call Dark Rhino Security at 614.401.3025 or visit http://51.79.98.38 or email info@darkrhinosecurity.com

Dark Rhino Security’s “Security Confidential” is a weekly Cybersecurity podcast where Host, Manoj Tandon, talks to Infosec and Cybersecurity professionals about the current issues going on in our industry. Guests are able to share their stories about how they began their journey into cybersecurity and connect with our audience. Listeners are able to tune in through Spotify, Apple Podcasts, Google Podcasts, Amazon Music, iHeartRadio, Youtube, LinkedIn, and more.