Netskope > Case Studies > Global Retailer Safely Enables Office 365 for Corporate and Retail Store Use

Global Retailer Safely Enables Office 365 for Corporate and Retail Store Use

Customer Company Size

Large Corporate

Country

Worldwide

Product

Netskope for Office 365

Tech Stack

Office 365
Outlook
OneDrive
Yammer

Implementation Scale

Enterprise-wide Deployment

Impact Metrics

Productivity Improvements
Customer Satisfaction
Digital Expertise

Technology Category

Application Infrastructure & Middleware - API Integration & Management
Cybersecurity & Privacy - Cloud Security

Applicable Industries

Retail

Applicable Functions

Business Operation
Human Resources

Use Cases

Cybersecurity
Remote Collaboration

Services

Cloud Planning, Design & Implementation Services
Cybersecurity Services

About The Customer

The customer is a global retail company with over 200,000 employees. The company has a wide range of business units that had many uses for Office 365, including Outlook for email, OneDrive for file sync and share, and Yammer for its hourly employees. The company was planning a corporate-wide roll-out of Office 365 and had identified use cases for nearly every app in the suite. The company also planned to deploy Yammer to hourly employees so they could build community and share best practices across stores.

The Challenge

The company was undergoing a corporate-wide roll-out of Office 365, with use cases identified for nearly every app in the suite, from storage to email to collaboration and productivity. It even planned to deploy Yammer to hourly employees so they could build community and share best practices across stores. When the lines of business championing the deployment engaged the security team to bless the project, the latter identified a number of access and data requirements that needed to be put in place before the company could adopt the suite for all of its users. Those requirements included admin privileges on a per app basis, differing levels of access based on whether the device was corporate-issued or BYOD, controls for sensitive data like PCI and PII, and anomaly detection.

The Solution

Using Netskope for Office 365, the company was able to extend its corporate security policies into the cloud. IT enforced a “least-privilege” administrative model that segregated privileges over apps like Outlook and OneDrive so that no single administrator had admin rights in more than one app. For users, they were able to enforce granular access based on device type. For corporate-issued laptops and mobile devices, they provided full suite access, but for BYOD devices, they limited access to web only. For data governance, they developed a handful of custom DLP profiles using the Netskope policy wizard, including PCI, PII, and “confidential”, in order to identify and secure sensitive or confidential data. They set up monitoring and reporting for all of the apps within the suite, including for Yammer, which is used by in-store workers. This enabled them to not only comply with corporate and regulatory policies, but also prove compliance through robust, thorough audit trails. Finally, they used Netskope for Office 365 to understand, alert on, and drill down into the forensics surrounding risky or anomalous behavior, such as failed logins or excessive content downloads.

Operational Impact

Enforced a “least-privilege” administrative model that segregated privileges over apps like Outlook and OneDrive so that no single administrator had admin rights in more than one app.
Enforced granular access based on device type. For corporate-issued laptops and mobile devices, they provided full suite access, but for BYOD devices, they limited access to web only.
Developed a handful of custom DLP profiles using the Netskope policy wizard, including PCI, PII, and “confidential”, in order to identify and secure sensitive or confidential data.
Set up monitoring and reporting for all of the apps within the suite, including for Yammer, which is used by in-store workers.
Used Netskope for Office 365 to understand, alert on, and drill down into the forensics surrounding risky or anomalous behavior, such as failed logins or excessive content downloads.