22 Nov Microsoft: Office 365 will boost default protection for all users

Microsoft is rolling out Built-In Protection to Defender for Office 365, a new feature that would automatically enable recommended settings and policies to make sure all new and existing users get at least a basic level of protection.

Microsoft Defender for Office 365 (previously known as Office 365 Advanced Threat Protection or Office 365 ATP) provides Office 365 enterprise email accounts with automated attack remediation and defends them from various threats, including business email compromise and credential phishing.

“Some security controls are inadvertently overlooked, and as a result some or all users are left with incomplete protection,” said Defender for Office 365 Senior Program Manager Sundeep Saini.

“Not turning on these key protection features can lead to unintentionally allowing malicious messages, such as phishing messages, to be delivered to their inbox.”

“We are introducing Built-In Protection for Microsoft Defender for Office 365 to automatically elevate all users within your organization to the base level of security protection,” the company explains on the Microsoft 365 roadmap.

Once enabled, it will protect all existing and new end users across tenants from phishing emails with malicious attachments and links using Safe Attachments and Safe Links without requiring any actions from admins.

Rolling out to tenants worldwide

This new default security preset is designed to patch gaps in enterprise protection coverage and improve an organization’s overall security posture by reducing the risk of a breach.

After rollout, Built-In Protection will also automatically protect uses in new domains added to a tenant with a base level of Safe Links and Safe Attachment, thus reducing the time needed to protect the newly enrolled users.

“We will also release the option to configure exceptions in the Microsoft 365 Defender portal ahead of enabling the Built-In-Protection policy,” Saini added.

“Although we do not recommend it, we recognize the need for some organizations to exclude certain users or groups from Built-In-Protection and admins will have the opportunity to configure these exceptions.”

The rollout for this new default security preset is starting this month and will continue to standard multi-tenants worldwide through the end of the year, reaching general availability in December.

Managing your IT landscape so you don’t have to

We are a Cloud services provider, so we understand the apprehension that many feel before making the leap to Cloud computing. We take the reins when conducting your transition, allowing your company to enjoy the advanced opportunities it has to offer. We are proud to provide top quality services to our customers, preventing business disruption that can be caused by tech problems. We can assist you in deciding what approach is best for you, a full transition to Cloud computing and all the positives that come with it, an on-premise managed solution, or a hybrid of the two – whatever the case we will be sure to establish the right solution for you. Alongside our expertise in Cloud computing, our experienced and knowledgeable team at Apogee Solutions perform proactive monitoring of servers and workstations, fixing problems remotely, and dealing with security issues.

Get in contact now and see how – with the right tools, and education around their use – you and your team can take your next step into the future of IT.

Source: https://www.bleepingcomputer.com/