Keeping your collaboration safe while working remotely

Niraj Gopal, Frank Lynn
April, 2020
Webex Security and Compliance
Keeping your collaboration safe
while working remotely

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential
Secure development lifecycle and data privacy
• Processes, platform operations, 3rd
party certifications and regulations
Securing your users and devices
• SSO, MFA, MDM, MAM controls
Securing your content and meetings
• End-to-end encryption for Teams and Meetings, key security policies, meeting controls
Sensitive data and Data Loss Protection (DLP)
• Cross-company collaboration, compliance partner ecosystem
Built-in compliance
• Retention, eDiscovery, Legal Hold
Cisco-on-Cisco advantage : Extended Security Pack for Cisco Webex
• Cloudlock, Talos Anti-malware, Duo*
Agenda

Open Collaboration Secured
Anywhere Access
Fully Searchable
Data / App Integrated
Cloud Managed
Discoverable
Enterprise Integrated
Encrypted
Compliant
No compromise collaboration
Security challenge
End-user vs. Corporate IT
Secure remote workers

360 degree approach to security and compliance
Secure user
identity and
access
Encrypted Media
Streams
Global DDoS with
Active Scrubbing
Encryption of
Data at Rest
eDiscovery and
Legal Hold
Powerful Admin &
Host Controls
General
Data
Protection
Regulation
Protect against Data
Loss & malware
Secure Search

The Cisco Webex single platform advantage
SecureManageableOpenGlobal
Enabling
frictionless global
collaboration
Encrypts user
generated
content
Scalable
Flexible options
for your
business needs
Single point
of IT Admin
App integration
for increased
productivity

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Commitment
to privacy

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public
Webex
Three Security Principles:
Privacy, Security and Transparency
• Committed to the privacy of your data
• Secure by design and by default
• Transparent about security
“Privacy is a
fundamental human
right and we need
security and
transparency to
protect it.”
Chuck Robbins
Chairman and CEO, Cisco
February 7, 2019
Privacy TransparencySecurity

Privacy at Cisco
International transfers
of personal data
Data protection &
privacy program
Third-party
reviews
More information on:
https://www.cisco.com/c/en/us/about/trust-center.html

Dedicated and independent Security & Trust Organization
Cisco Secure development lifecycle
Training and education
• 35,000 employees with continuous security education
• 10 years of SecCon, the Cisco Security Conference
Threat modeling
• 1,000+ features per quarter
• Identify, assess and mitigate risk
• Whitehat hacking
Vulnerability testing
• Leverages several automated vulnerability testing tools
• Checks protocol robustness
Product security baseline
• 200+ specific security requirements

Privacy data sheets and data maps for all Webex services and the MDPA are publicly accessible on trust.cisco.com
Privacy by design deliverables
Privacy data sheets
Master data
protection agreementData maps

Webex certifications & compliance
11
Information Security + Privacy
• ISO 27001 / 27017 / 27018
• SOC 2 Type II and SOC 3
• Cloud Computing Compliance
Controls Catalog (C5)
• HITRUST for Teams
• FedRAMP
Cisco’s Quality Management
System
• ISO 9001
Cross-Border Transfers
• Binding Corporate Rules
• EU-US privacy shield
• Swiss-US privacy shield
• APEC cross-border
privacy rules
• EU Standard Contractual
Clauses
Regulatory
• HIPAA
• GDPR
• FERPA
• COPPA
• PIPEDA
• PHIPA
• CCPA
• Continually assessing regs
International & Local

Securing
your users
and devices

• Accurate on- and off-boarding with AD Connector
• SCIM support for Azure Active Directory, Okta, etc.
• Single sign-on with customer’s choice
of identity provider
• Standard Oauth 2.0-based authorization
• Role-based access control
• Hide original identity
• Cisco Duo integration for MFA and Zero Trust
Secure user identity
and access

• Interop with MDM solutions
• Self-wrap all Webex mobile applications with your
favorite Mobile Application Management (MAM) solution
• Built-in MAM controls for personally managed devices
Secure the apps
and devices

Control Hub provides built-in controls for mobile devices not managed by MDM
Transcode
Enforce PIN lockAbility to terminate session and remotely wipe data
Secure personally managed devices for Webex Teams
iOS Android

Securing your
content and
meetings

Recordings
• Recordings are automatically encrypted with AES
256 bit keys from HSM and are password
protected
Optional end to end encrypted meetings
• For businesses or users requiring a higher level of
security, Cisco Webex also provides end-to-end
encryption. With this option, Cisco Webex Cloud does
not decrypt the media streams.
• See Webex Meeting Security whitepaper
Security by default
All communications between Webex Applications, Webex Room devices
(cloud-registered) and the Webex Cloud occur over TLS encrypted channels.
Meetings encryption

End-to-End Encrypted Content
Secure Search
Content
server
Stores
encrypted
content
Index
server
Builds
and queries
search index
Key
server
Creates
and manages
keys
Cisco Webex
Teams users
Keys can also be stored and managed on
customer premises for maximum security and
previews can be disabled
Provides unprecedented privacy and protection from attacks on data in-transit and at rest
Webex Teams: end-to-end encryption
Search encrypted content without compromise

• Unique password protected link for users with invitation only (default)
• Automatically lock rooms (default)
• Automatically put external attendees in waiting room (default)
• Enforce password or sign-on for phone, video devices (optional)
Prevent unauthorized attendees from hijacking
meetings

Worried about disruption
• prevent join before host
• prevent share grabbing
Limit to internal users only
Enforce SSO for join or Personal
Meeting Room entry
Prevent invite forwards
• Invite only users
Controls to safeguard your meetings
Enable hosts to manage meetings
• entry + exit tones
• visual difference in internal/external
users in roster
• lock rooms
• expel, lock, mute etc.
• define available functions, chat,
video, voice options

File Share controls
C97-741239-00 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• Customer can choose to selectively
enable or disable file sharing
• Teams granular controls can limit it
based on Client type and both upload
and download
Meetings
Teams

Block external communication
Teams
Admins can control external communication
• Users within the org cannot add users outside the approved
domains or join spaces created by non-approved domains
• Use Attendee role and “Require login before site access”
control to block participants external to your Meetings site
Meetings
Meetings

Transcode
Integrations management
• Visibility and control over integrations available to
organization’s users
• Whitelist integrations and Bots to reduce data loss
risk
• Prevent 3rd party robot - gong.io - to join meetings

Sensitive data
and DLP

• Industry’s largest Compliance and DLP/CASB
partner ecosystem
• Public Compliance Events API for Teams
• DLP policies that follow your employees
Data loss prevention

Webex integrations compliance: Data loss
prevention and archival
(Cisco Advanced Services offering)
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Confidential.
Meetings Compliance support

Meetings compliance
partners
ThetaLake
• Regulatory compliance for Voice, Video and Shares
in Webex Meetings recordings
• Manage, detect and flag compliance issues and DLP
based on 40+ NLP, ML-based policies
• eDiscovery and search for recordings
• https://thetalake.com/integrations/webex/
AGAT
• Voice, Video and Shares compliance for recordings
• Sentiments detection : positive / negative
• Ethical Walls policy violation
• eDiscovery and search for recordings
• https://agatsoftware.com/webex-teams-compliance-
recording-and-analysis
• Both partners support Teams compliance also

Built-in
compliance
tools

Setup customized retention policy for
user generated content
• Messages/Files/Whiteboards
• Recordings
Retention policy

Compliance officers can add
exceptions to Teams retention
policies during investigations
• Create a matter and put custodians
(users) on legal hold
• View and download matters
• Release matters
Legal hold

eDiscovery
• Allow easy extraction of user-generated
content at scale
• Helps organizations remain compliant and
perform on-demand eDiscovery searches
• Easy integration with standard eDiscovery
solutions

Extended
security options

Webex security included with every subscription
Cisco Webex® Control Hub
Full lifecycle management and security (Existing)
Provisioning
Administration
Management
Compliance
Analytics
Security
End to end
encryption
Fast, simple
secure search
User Identity
and access
Device and
Browser
Protection
CASB
Integration
eDiscovery

250K
Customers
30%
Cost savings
5K
People
strong
170+
Ecosystem
partners
$2+ Billion
Product
revenues
Largest
Threat detection
network
19.7B
Threats
blocked daily
100x
Faster finding
breaches
99%
Security
effectiveness
88%
Fortune 100 use
Cisco security
Cisco security leadership

Additional security enhancement packages
Pro Pack (Existing)
Unlimited eDiscovery & Legal Hold
Extended Security Pack
Customized security controls
CASB/DLP
Talos Anti-malware
MFA*On-prem key management
* Duo Product integration exists today
Targeting bundle addition *CY2020

When sensitive data is on the line – customers trust Cisco
Global auto manufacturer
Case study: Cross-company collaboration in action
Critical challenge
• Protect secret product
planning data while
securely collaborating
with vendors and dealers
Result
Solution
• Extended Security Pack
of Webex with Cisco
Cloudlock DLP
120,000
users
11 day
implementation

• Cisco Umbrella Offer: 90-day trial offer
First line of defense against threats on the internet
wherever users go.
• Cisco Duo Offer*: 30-day trial offer
Verify the identity of all users before granting access
to corporate applications.
• Cisco AnyConnect Offer: 90-day trial offer
Enable secure access to the enterprise network for
any user, from any device, at any time, in any location.
(Head-end VPN termination required).
• Cisco AMP for Endpoints Offer: Existing customers
can exceed current licenses up to twice the amount to
ensure the last line of defense against threats.
• These security offers are available now through
1 July 2020.
Free remote worker offers
• Free Webex Meetings Offer: 90-day free trial for
Starter, Plus and Business accounts.
• Cisco Extended Security Offer: 90-day trial offer of
Cisco Cloudlock CASB and Cisco Talos ClamAV
anti-malware.
Collab Security

When sensitive data is on the line companies trust Cisco
Security and compliance
built from the ground up
Data
Privacy
Secure out
of the box
Compliance,
control and
visibility

Keeping your collaboration safe while working remotely

Keeping your collaboration safe while working remotely

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à Keeping your collaboration safe while working remotely

Similaire à Keeping your collaboration safe while working remotely (20)

Dernier

Dernier (20)

Keeping your collaboration safe while working remotely