How a Large Law Firm Uses Microsoft to Protect and Defend Against Attacks

Introduction

The conversation in the video revolves around how a large law firm is using Microsoft products to protect and defend against attacks. The security operations manager of the firm, Joe, discusses the scale and complexity of their global operations and shares insights into the challenges they face and the strategies they employ to safeguard their organization.

Security Operations at a Global Scale

Joe, the security operations manager at the law firm, Hogan Levels, provides an overview of the firm's global scale and the challenges they face in protecting the organization from adversaries. With approximately 7,500 employees spread across 50 offices in a multitude of countries, the firm's security operations team has a monumental task in ensuring the safety and security of the organization.

Challenges and Nuances

The scale and size of the organization present unique challenges, particularly in the legal sector where technology choices are often dictated by clients. Joe discusses the complexity of the firm's IT environment and the need to keep security operations as simple as possible to mitigate additional complexity.

Using Endpoint Detection and Response (EDR)

The discussion then shifts to how the firm evaluated and implemented Endpoint Detection and Response (EDR) solutions, focusing on the challenges and factors that influenced their decision-making process. Joe highlights the importance of making the EDR experience intuitive and efficient for the security team, emphasizing the need for flexibility and adaptability in choosing the right solution.

Leveraging Microsoft Defender

Joe talks about their transition to Microsoft Defender and the significant impact it has had on simplifying and strengthening their security operations. He emphasizes the role of Defender in enabling their analysts to make informed decisions and the benefits of having a strong and supportive security community.

Proactive Security Measures

The conversation delves into the proactive security measures employed by the law firm, particularly in using threat intelligence to track adversaries and leading the firm's shift to the cloud. Joe discusses the power of Azure policies and how they have enabled the firm to enforce security controls and distribute threat intelligence across the organization, safeguarding their infrastructure in the cloud.

Embracing the Cloud

As the law firm transitions to the cloud, Joe talks about the opportunities and challenges it presents. He emphasizes the need to stay ahead of the technology curve and create a common security controls framework in the cloud while de-risking the adoption of Azure for the organization.

Conclusion

The discussion with Joe offers valuable insights into the strategic use of Microsoft products and cloud services to protect and defend a large organization, shedding light on the complexities and nuances of security operations in a global and dynamic environment. It serves as a compelling example of how modern organizations are leveraging technology to combat evolving security threats and adapt to the ever-changing landscape of cybersecurity.