Addressing security concerns

As organizations move to the cloud, one of the concerns they face is security. Fortunately, Microsoft has invested in developing a full range of security controls that can be configured and deployed. We've already discussed multi-factor authentication briefly. In this section, we'll learn about how additional security controls and features, such as Conditional Access, access reviews, and Cloud App Security can improve an organization's overall security posture.

Conditional Access

Conditional Access is a set of security rules used to describe conditions for granting or blocking access to managed data and resources. Common conditions include network location (on or off a corporately managed network), geolocation to particular localities, using a managed or company-owned device, and group membership.

Using those types of conditions as factors for granting access can mean that a user can get access to a resource when meeting the parameters...