Ride the Lightning

Cybersecurity and Future of Law Practice Blog
by Sharon D. Nelson Esq., President of Sensei Enterprises, Inc.

Ignoring Microsoft 365 Security Features? Shame on You!

February 2, 2022

Help Net Security reported February 1 that nearly half of organizations are not using the full set of features and applications available in Microsoft 365, as research from Ensono reveals. Most critical, many businesses are not utilizing the cybersecurity features of Microsoft 365, leaving them open to vulnerabilities.

Key findings:

  • 38% are not using multi-factor authentication (MFA)
  • Only 43% have Conditional Access Controls in place (CAC)
  • 46% do not have data loss prevention (DLP) or data classification configured

Of those surveyed that reported a Microsoft 365-related breach, 42% were linked to files being shared with external parties and 37% were due to the impersonation of a compromised account. Clearly, organization would be better protected against with the correct implementation of MFA and CAC.

Simon Ratcliffe, Principal Consultant at Ensono, said: “While Microsoft 365 has proven invaluable for enterprises undergoing rapid transformation, not all companies have set up the platform in an optimal manner for their business. Microsoft 365 licensing inefficiencies remain a persistent problem in the market today, with firms creating additional costs by investing in third party tools already available as part of their Microsoft 365 package. With optimization and the implementation of key security features, the platform can provide a better and more secure experience for its users.”

What’s mind-boggling is that we see this all the time in law firms. We keep explaining why multi-factor authentication is critical – and often still get the answer that it’s too inconvenient. Wait until they experience the inconvenience of a data breach!

Sharon D. Nelson, Esq., President, Sensei Enterprises, Inc.
3975 University Drive, Suite 225, Fairfax, VA 22030
Email: Phone: 703-359-0700
Digital Forensics/Cybersecurity/Information Technology
https://senseient.com
https://twitter.com/sharonnelsonesq
https://www.linkedin.com/in/sharondnelson
https://amazon.com/author/sharonnelson