SharePoint Governance Execution

(1)

SharePoint Governance Execution

by Edward Cedeno

(2)

Agenda – SharePoint Governance Execution

Principles

for

Successful

SharePoint

Governance

Execution

1 SharePoint Governance Execution Challenges

2 SharePoint

Governance

Execution

Challenges

Tools

to

help

you

succeed

3 Content

Shield

A

proactive

approach

to

ensuring

that

content

is

compliant

4 Auditor

(3)

Principles for Successful Governance Execution

• Procedural Rigor

–

make compliance part of the

system and as automatic and unobtrusive as possible;

system, and as automatic and unobtrusive as possible;

Automated controls are preferred.

• Auditing and Logging

enables visibility transparency

• Auditing and Logging

–

enables visibility, transparency,

and accountability to system activities. Can catch flaws,

understand it, and take corrective action

“Not only do you have to do it, but you have to

prove it”

(4)

Governance Execution Challenges

Tools to help you succeed

• Permissions

– Administration

T

• Taxonomy

– Content Management

• Retention

– Storage Optimization

• Content monitoring

C

t

t Shi ld

– Content Shield

• Prove compliance

(5)

Content Shield User Scenarios

Block

known

non

‐

compliant

data

from

being

added

to

SharePoint

1 E.g.

Copyrighted

material

will

not

be

added

to

the

portal

without

the

proper

licensing

or

approval

Content policies can be specific in scope

2 Content

policies

can

be

specific

in

scope

granular

control

of

content

shield

policies

3 Content

polices

can

set

to

the

right

level

of

responsiveness

Real

‐

time

or

scheduled

content

shield

protection

(6)

Content Shield Scans for Patterns

Upload

/

New

Item

Block

SharePoint

Quarantine

Also

performs

d

f

SharePoint

Central Admin

Content

and

metadata is

SharePoint

periodic

scans

of

data

already

in

SharePoint

Central

Admin

metadata

is

checked

against

customizable

dictionaries

(7)

Auditor User Scenarios

Know

who

has

accessed

what

when

1 Record

and

track

all

user

interactions,

security

changes,

and

search

queries

in

any

or

all

of

your

Microsoft

SharePoint

environments.

Track Employees’ SharePoint Usage

2 Track

Employees

SharePoint

Usage

See

everything

an

individual

employee

or

group

of

employees

has

done

and

is

doing

in

your

SharePoint

environment.

3 Track

an

Item

Through

its

Entire

Life

See

what

happened

to

a

document,

including

when

it

was

created

and

by

whom;

who

has

viewed

it

when;

and

when

it

was

deleted

and

by

whom.

4 Audit

SharePoint

Search

See

who

has

performed

a

search,

for

what,

and

when.

See

how

often

an

(8)

DocAve Auditor

Granular

Auditing

Site

‐

deletion

can

also

be

audited

_Periodically

_offloads

_Audit

_data

SQL

Content DB

to

file

system,

minimizing

load

on

SQL

server.

Create

reports

with

advanced

SharePoint

E i

t

SharePoint

E i

t

SharePoint

E i

t

Content

DB

p

filtering,

search,

and

browsing

functions.

Schedule

Periodic Reports

Environment

User Access

Can

directly

create

reports

from

file

system.

Report

creation

will

be

done

completely

outside

of

the

SQL

server,

minimizing

drain

on

performance.

Periodic

Reports

for

monitoring

User

Access

User

Access

(9)

Strategies and Tools

DocAve Auditor

• Single console for specifying enterprise-wide

audit policies and parameterized reports for all

Web applications and site collections

• Enable auditing at a coarse or granular level

• Obtain critical metrics on asset usage such

as time-viewed, modified, deleted, etc.

• Extracts data to media server for optimal

storage

• Easily search or filter audit reports to

simplify analysis

(10)

(11)

Q&A

Thank You!

(12)

Globally

Case Studies