2023-135-E-IT Dept-Catapult Systems, LLC, a Quisitive Company-Fast Track Support

Browse Search

Statement of Work Orange County NC v20221005 March 8, 2023 p. 7 of 26 • Discovering and labeling files at rest using the Microsoft Purview Information Protection scanner (supported in P1 and P2). • Monitoring emails in transit using Exchange Online mail flow rules. • Migration guidance from Azure Information Protection add-in to built-in labeling for Office apps. • We also provide guidance if you want to apply protection using Microsoft Azure Rights Management Services (Azure RMS), Office 365 Message Encryption (OME), and data loss prevention (DLP). The following is out of scope: • Customer key. • Custom regular expressions (RegEx) development for sensitive information types. • Creation or modification of keyword dictionaries. • Interacting with customer data or specific guidelines for configuration of EDM- sensitive information types. • Custom scripting and coding. • Azure Purview. • Design, architect, and third-party document review. • Compliance with industry and regional regulations and requirements. • Hands-on implementation of recommended improvement actions for assessments in Purview Compliance Manager. Microsoft Defender for Identity Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization. We provide remote guidance for: • Running the sizing tool for resource capacity planning. • Creating your instance of Defender for Identity. • Connecting Defender for Identity to Active Directory. • Deploying the sensor to capture and parse network traffic and Windows events directly from your domain controllers, including: o Downloading the sensor package. o Configuring the sensor. o Installing the sensor on your domain controller silently. o Deploying the sensor to your multi-forest environment. o Configuring the Windows Event Collector. • Configuring the portal, including: o Integrating Defender for Identity with Microsoft Cloud App Security (Cloud App Security licensing isn't required). o Configuring entity tags. o Tagging sensitive accounts. o Receiving email notifications for health issues and security alerts. o Configuring alert exclusions. • Providing deployment guidance, configuration assistance, and education on: o Understanding the Identity Security Posture Assessment report. o Understanding the User Investigation Priority Score and User Investigation ranking report. o Understanding the inactive user report. o Explanation of the remediation options on a compromised account. DocuSign Envelope ID: 4F8CE7A2-004B-4516-AE7C-0C68141E2FF6