AGAT

Categories
blog

Challenges with federation of Skype for Business on premise with Skype for Business Online

Skype for Business online is part of the Microsoft Office 365 suite. It is a Cloud-based Skype for Business service hosted by Microsoft. Like Skype for Business on premise solutions, Skype for Business online allows a federation between Skype for Business environments. A federation is a trusted relationship between Skype for Business environments, allowing communication between the Skype for Business clients from one domain to another.

There is a key difference between the federation configuration of two on premise Skype for Business environments and the federation configuration of a Skype for business on-premise environment with a Skype for Business Online environment. When defining a federation between on-premise environments, you need to specify the exact domain you want to partner, but in an on-premise to Skype for Business online you partner with all Skype for Business domains.

The fact that a federation between Skype for Business on premise with Skype for Business Online opens a federation with over 85 million users and your domain, can be cause for alarm. This is since the outcome of such a federation includes that users from all of Skype for Business online domain can communicate with internal users and see sensitive data about internal users. Such sensitive data includes presence information, phone numbers, work titles, etc.

SkypeShield Ethical Wall Module mitigates this concern by allowing you to define the domain specific policy that protects the privacy of internal users. You can configure that only specific Skype for Business Online that are already in the internal users contact list can send Instant Messages. You can define that only chosen domains from the Skype for Business Online cloud can see the Contact Card information of your Marketing Staff. Thus, eliminating the security and privacy issues caused by federating with Skype for Business Online.

-Article written by Shai Eistein

Categories
blog

SphereShield Anti-harassment and Workplace Safety Policy Feature

Background

Workplace harassment can be a serious issue and an HR nightmare. Managers can bully employees, employees could insult one another and the dreaded sexual harassment may threaten the safety of the workplace. When bullying, insults, and sexual harassment occur in the workplace, a hostile work environment is created damaging morale and productivity. Organizations are liable to prevent any and all types of harassment.

In certain countries, there are laws directly against workplace arrestment. In 1993, Sweden was the first country to implement legislation specifically outlawing bullying at work. Bullying, which is called “moral harassment”, is prohibited under Article L. 1152-1 of the French Labor Code. The Labor Code defines moral harassment as “repeated acts leading to a deterioration of the working conditions and that are likely to harm the dignity, the physical or psychological heath of the victim or his professional career”. In Germany, employment-related laws are aimed at preventing workplace discrimination and ensuring health & safety for all employees. Some examples of employment related laws in Germany are, the General Equal Treatment Act of 2006 (ETA) (preventing discrimination at work), the Occupational Health and Safety Act of 1996 (implementing measures to improve the health and safety of employees), and the Works Constitution Act of 2001 (promoting workplace equality). According to the Unites States Federal Law, harassment becomes unlawful where 1) enduring the offensive conduct becomes a condition of continued employment, or 2) the conduct is severe or pervasive enough to create a work environment that a reasonable person would consider intimidating, hostile, or abusive. Other countries complied different laws regarding workplace safety as well.

Since the organization is considered liable to prevent the harassment, many organizations choose to implement an anti-bullying and anti-harassment workplace policy to ensure the conduct of the employees. Such organizations should consider that the harassment may be carried over the company’s IT infrastructure – e.g Skype for Business Instant Messaging.

Implementation

The SphereShield Anti-harassment and Workplace Safety Policy Feature enables IT administrators and HR management to block, monitor, or censure phrases and emoticons that could be inappropriate in a workplace. Using the DLP Rules in the AGAT DLP infrastructure, SphereShield implements two separate rules that together create the Anti-harassment and Workplace Safety Policy compliance. The first rule is “Badwords” which contains a list of profanities that would be used in a bullying or sexual harassment scenario. The second rule is “inappropriate emojis” which contains a list of emoticons that could be used in a bullying or sexual harassment scenario such as, kiss, swear, in-love, heart, broken heart, hug, wink, grin, devil, head-bang, and punch. By default, the rules are set to only log and monitor the suspected harassment, but could be changed by the Access Portal Admin to “block” which will prevent the harassing party from sending the inappropriate messages or to “update” which will change the content of the message. A notification about the violation of the policy may be sent to the IT administrator and HR department.

-Article written by Shai Eistein

Categories
blog Mobile Security Uncategorized

Gartner: Security seen as major obstacle to BYOD

Bring-your-own-device (BYOD) is gaining momentum in the workplace and the trend is expected to intensify in the coming years. BYOD growth is supported by a desire to cut IT costs and improve employee satisfaction.

A recent report by research company Gartner predicts that by 2017, half of all employers will require employees to supply their own device for work purposes.

The report, entitled “Bring Your Own Device: The Facts and the Future” indicates that security remains the top concern for BYOD.

“The risk of data leakage on mobile platforms is particularly acute,” Gartner analysts wrote. “Some mobile devices are designed to share data in the cloud and have no general purpose file system for applications to share, increasing the potential for data to be easily duplicated between applications and moved between applications and the cloud.”

The writers note, however, that IT is catching up with the phenomenon of BYOD and more than half of the organizations surveyed give themselves a high rating for securing corporate data on enterprise-owned mobile devices.

“We’re finally reaching the point where IT officially recognizes what has always been going on: People use their business device for nonwork purposes and often use a personal device in business,” said David Willis, chief of research at Gartner.

“Once you realize that, you’ll understand you need to protect data in another way besides locking down the full device. It is essential that IT specify which platforms will be supported and how; what service levels a user should expect; what the user’s own responsibilities and risks are; who qualifies; and that IT provides guidelines for employees purchasing a personal device for use at work, such as minimum requirements for operating systems,” added Willis.

Gartner notes that BYOD is most prevalent in midsize and large organizations ($500 million to $5 billion in revenue, with 2,500 to 5,000 employees). The report shows that American companies are twice as likely to allow BYOD as those in Europe, where BYOD has the lowest adoption of all the regions. But employees in India, China and Brazil are the most likely to be using their own mobile phones at work.