Company about to move to Office 365 / Exchange Online
Discussion
The company I work for intends to move away from the current Exchange on-prem platform to join the Office 365 bandwagon.
We are now discussing how to handle encryption and the topic is getting more and more complicated each passing day.
Has anyone here gone through this ordeal before, and chosen a different alternative than the default encryption provided by Microsoft ? In other words our security is pushing to have some sort of control over the encryption keys.
The company I work is a financial institution (private equity), I wonder what other companies in similar industry have done ?
Would be nice to hear of other experiences with this situation.
We are now discussing how to handle encryption and the topic is getting more and more complicated each passing day.
Has anyone here gone through this ordeal before, and chosen a different alternative than the default encryption provided by Microsoft ? In other words our security is pushing to have some sort of control over the encryption keys.
The company I work is a financial institution (private equity), I wonder what other companies in similar industry have done ?
Would be nice to hear of other experiences with this situation.
Has "your security" read the sodding great big FAQ that goes into excruciating detail on exactly how this works and what you need to do to set up your own key vault? If so, what exactly are their concerns?
https://docs.microsoft.com/en-us/office365/securit...
https://docs.microsoft.com/en-us/office365/securit...
Customer key and BYOK are the same thing.
As you can no doubt tell, providing and looking after your own keys is far from trivial - it's not at all hard to get it wrong and either massively reduce your level of security, or (even worse) lose access to your own data. My advice would be to look long and hard at the requirement to control your own keys to see if it a) really is a requirement, and b) actually increases your security in any meaningful way.
As you can no doubt tell, providing and looking after your own keys is far from trivial - it's not at all hard to get it wrong and either massively reduce your level of security, or (even worse) lose access to your own data. My advice would be to look long and hard at the requirement to control your own keys to see if it a) really is a requirement, and b) actually increases your security in any meaningful way.
There is also hybrid where the keys stay in an RMS server in your own network and only the cipher text aka unreadable crap goes into the cloud.
Microsoft say it's easy so no doubt it's a complete cluster fk on anything other than a green field organisation who is willing to mould their business processes around exactly how Microsoft has designed their products.
Microsoft say it's easy so no doubt it's a complete cluster fk on anything other than a green field organisation who is willing to mould their business processes around exactly how Microsoft has designed their products.
Customers usually bleat on about BYOK and then see the legal addendum that says that the managed service provider is absolved of all responsibility, should the customer lose their keys (rightly so). It takes a very organised customer to manage all the duties around looking after keys properly. Many customers retreat on that stance when given the legals.
It’s not an area I know lots about, but I do know a number of PE and FS clients who use these guys after migrating to Office365: https://www.torsionis.com/
(I have no affiliation BTW)
(I have no affiliation BTW)
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff