QA Cyber Security Technical Consultant, Graeme Batsman, lists five tips to enhance security for Office 365 email.
Office365, other SaaS email services and other Clouds in general can be more secure than having it on-premise, however security is also dependent on an important factor… you the end user. You can spend £1,000 on a physical high security certified safe and set the PIN as 00000 or put a Post-it note near it with the PIN on, and hey presto the high security product or service is greatly weakened by a human being.
The admin account
Go back ten years and usernames were not email addresses but a letter followed by a few random numbers. Now everything is This email address is being protected from spambots. You need JavaScript enabled to view it. or initialsurname as login. This has made password cracking, guessing or phishing easier.
Let’s start off in 2015 with something rather trivial. I ordered two small books; one on ISO 27001 and one on PCI-DSS. They were purchased from a well-known, though not big, IT services firm which sells consulting services, books and training courses. The books arrived, I read them and forgot about everything. Not long after, I started working at Capgemini, which has no relation to this story.
