--- title: Feedback from 2 companies on M365 Data Security - Les Assises 2023 description: [Conference] Feedback from 2 large companies on how to master Data Access and Sharing in Microsoft 365 during the cybersecurity show, Les Assises (October 2023) image: https://blog.idecsi.com/hubfs/Les%20Assises%202023%20BPCE-IT%20et%20Action%20Logement%20RETEX.png --- [![Logo-Idecsi-Black-tagline](https://blog.idecsi.com/hs-fs/hubfs/LOGOS%20IDECSI/LOGOS%20OFFICIELS/Logo-Idecsi-Black-tagline.png?width=1010&height=319&name=Logo-Idecsi-Black-tagline.png)](https://www.idecsi.com/) - Solutions DETOX® pour M365 Audit, Remediation & ROI [Discover DETOX](https://info.idecsi.com/detox-m365?hsLang=en) ![Audit, Remediation & ROI](https://blog.idecsi.com/hubfs/ILLU-4.png) Solutions IDECSI gives security and IT teams full control over their data — across DSPM, Data Access Governance, Human Risk Management, and Data Volume Management. - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) M365 Data Security Platform](https://www.idecsi.com/solution/mydatasecurity/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Data storage optimization](https://www.idecsi.com/solution/mydatamanagement/) - Challenges M365 Checklist 15 Warning Signs Your M365 Data Is at Risk [Get the checklist](https://info.idecsi.com/checklist-15-warningsigns?hsLang=en) ![Checklist risques M365](https://blog.idecsi.com/hubfs/Frame-2147255341.png) Your 2026 Challenges Address your most critical data security and governance challenges - across your M365 environment - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Gain visibility accross M365](https://www.idecsi.com/challenges/visibility-microsoft-365) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Get Ready For Copilot M365](https://www.idecsi.com/challenges/m365-copilot/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Control external user access](https://www.idecsi.com/challenges/external-access-microsoft-365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Prevent Sensitive Data Exposure](https://www.idecsi.com/challenges/sensitive-data-m365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Gain visibility across Microsoft 365](https://www.idecsi.com/challenges/visibility-microsoft-365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Ensure regulatory compliance](https://www.idecsi.com/challenges/compliance-m365/) - Resources Is Your Tenant Ready for Copilot? A Security & Governance Playbook [Download](https://info.idecsi.com/whitepapper_copilot?hsLang=en) ![Copilot guide](https://blog.idecsi.com/hubfs/Frame-2147255339.png) Our resources Check out our useful resources for improving data protection - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Blog](https://blog.idecsi.com) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Help Center](https://help.idecsi.com/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Ressources & News](https://blog.idecsi.com/resources?hsLang=en) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) About us](https://www.idecsi.com/about-us/) - [Customers](https://blog.idecsi.com/resources-customer?hsLang=en) - - [English](https://blog.idecsi.com/conference-m365-data-security-assises2023) - [Français](https://blog.idecsi.com/fr/assises-2023-maitrise-donnees-m365) Search [Request a demo](https://info.idecsi.com/demo-idecsi?hsLang=en) Idecsi News 19 December 2023 # \[Conference\] How to master Data Access and Sharing in Microsoft 365 ![Conference Cybersecurity Show Les Assises 2023 on Data Protection M365](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Les%20Assises%202023%20BPCE-IT%20et%20Action%20Logement%20RETEX.png) - [Home](https://www.idecsi.com/) - [Blog](https://blog.idecsi.com) - \[Conference\] How to master Data Access and Sharing in Microsoft 365 For this 23rd edition of the Cybersecurity event, Les Assises in Monaco, IDECSI invited two of its clients to speak at its conference on [**data protection**](https://blog.idecsi.com/data-security-microsoft365?hsLang=en) and how to master Data Access and Sharing in Microsoft 365 and collaborative tools.  Our guests of honour were:  - Vincent Rey, Deputy Manager Leader and Head of data protection solutions at BPCE IT, managed IT services & technologies in **Groupe BPCE**, the 2nd largest banking group in France, pursues a full range of banking and insurance activities. ![Logo de l'entreprise BPCE IT](https://blog.idecsi.com/hs-fs/hubfs/BPCE%20IT.png?width=201&height=35&name=BPCE%20IT.png) - Jean-Paul Joanany, CISO at **Action Logement**, a leading player in social and intermediate housing in France with more than one million properties.            ![Logo de l'entreprise Action Logement](https://blog.idecsi.com/hs-fs/hubfs/logo-action-logement.png?width=180&height=113&name=logo-action-logement.png) The agenda for this conference covers: - [**Objectives and major challenges of Microsoft 365 Data protection**](https://blog.idecsi.com/conference-m365-data-security-assises2023#objectives) - [**How IDECSI helped BPCE-IT reducing the risk of data exposure**](https://blog.idecsi.com/conference-m365-data-security-assises2023#exposure) - [**Action Logement: making users responsible for file sharing**](https://blog.idecsi.com/conference-m365-data-security-assises2023#exposure) ## Objectives and major challenges of Microsoft 365 Data Protection This conference focuses on the [**governance of access, rights and sharing**](https://blog.idecsi.com/microsoft-365-governance-strategy?hsLang=en) of information, with a focus on the M365 environment and pursuing two main objectives: **→** to stay in control of the M365 environment, which is evolving and very dynamic; **→** to prevent unauthorised, malicious, obsolete or usurped access and sharing from compromising the security and confidentiality of our data.  As a reminder, companies have to tackle **six major challenges around Data Protection**:  - Users are often administrators of their own data, allowing them to create and share freely. - Sharing, particularly external sharing, must be better monitored and controlled. - The volume of data on M365 is growing exponentially, making it difficult to manage and monitor. - Users are not security experts, which can lead to poor adoption of best practices. - M365 is constantly evolving, which requires optimal configuration adapted to needs. - The security of users and sensitive data is enhanced by the complexity and diversity of data sources. The potential consequences and risks to be covered include: **excessively open sharing** (thus exposing data to unauthorised persons), **poor control of guests** accessing information assets, **a non-respected access life cycle** (which makes rights obsolete or unnecessary).  **Identity theft** is a serious risk, as it allows an attacker to pose as a legitimate user. Also, **a data leak** can compromise the confidentiality and integrity of information, while a **compliance problem** exposes you to sanctions or prosecution. Finally, **the overexposure of sensitive data** and **the compromise of rights by malicious or illegitimate parties** increases the risk of theft or espionage, which can result in harm to our organisation. These were the factors that prompted **Action Logement** and **BPCE-IT** to choose the [**MyDataSecurity**](https://www.idecsi.com/solution/mydatasecurity/) solution from IDECSI to master data access and file sharing.     ## BPCE-IT: reduce the risk of data exposure on Microsoft 365 **BPCE-IT** is a key player in the BPCE Group, which ensures the proper functioning of IT services for customers and employees of the Banques Populaires and Caisses d'Epargne **(\>110,000 employees).** The Valkyrie programme aims to strengthen the group's cybersecurity, particularly in terms of **data protection on the M365 platform**.   Deployment of the [MyDataSecurity](https://www.idecsi.com/fr/solution/mydatasecurity/) solution responds to the challenges linked to the exponential growth of collaborative use and the volume of data on the M365 tenant, as well as the risk of data leaks. In fact, the group has more than **150,000 Sharepoints, more than 100,000 Teams and the number of external shares is constantly rising.  ** → To do this, the BPCE group's IT EIG wishes to simply launch and manage sharing review campaigns by involving the managers of the data concerned *(owners of OneDrive, owners of Teams/SharePoint)*, including reminder and escalation mechanisms. → A communications plan has also been launched to present and inform employees about the approach. The group's employees now benefit from a tool which informs them of the focal points for their data *(extensive sharing of the 'company link' type, external sharing)*, particularly the most sensitive aspects, thanks to the integration of the BPCE-IT classification model to directly correct access rights from an interactive user-friendly interface.  **Users were enthusiastic and engaged in the rights review processes and sharing on their personal dashboard.  ** The solution was deployed gradually to reach more than 20,000 users in 2023. SAAS mode makes it very easy to activate the platform. Vincent Rey highlights in particular:  - the adaptability of IDECSI in response to technical and security requirements due to the scale of BPCE's O365 tenant (adapted sizing on the SaaS)  - the implementation of a hybrid architecture meeting Group security constraints (LEM on-premise)  - the customisation of interfaces for BPCE (graphic charter, SSO, URLs)  The tool thus makes it possible to **reduce the risk of exposure of data shared from M365** and to **promote the adoption of best practices in terms of governance and information security** for the group.  ![Vincent REY, Manager Adjoint protection de la donnée chez BPCE-IT](https://blog.idecsi.com/hs-fs/hubfs/Vincent%20REY.jpg?width=606&height=483&name=Vincent%20REY.jpg) *Vincent REY, BPCE-IT during the IDECSI Conference, Les Assises, October 2023, Monaco* [*![MyDataSecurity : the essential dashboard for every user](https://blog.idecsi.com/hs-fs/hubfs/Signature-Video-MDS-5-EN.png?width=550&height=180&name=Signature-Video-MDS-5-EN.png)*](https://www.idecsi.com/fr/solution/mydatasecurity/) ## Action Logement: making users responsible for M365 shares For Jean-Paul Joanany, CISO at Action Logement, **empowering users is essential for the management and governance of access to data on M365**.  The group, a major player in social and intermediate housing in France, manages a portfolio of more than 1 million housing units. The Action Logement Service division is a financing company which processes large amounts of sensitive data (personal and financial data), which is subject to fraud. The objective is therefore twofold: **to secure the resources of each user, to reassure them and to make them responsible: who accesses what? ** On the one hand, there are **difficulties with M365 administration**, according to Jean-Paul Joanany, to properly manage M365 roles, associated rights. On the other hand, there is a real **lack of user ownership over the management of rights / sharing of their data**, which leads to a significant increase in risks (illegitimate, malicious operations, information leaks, unauthorised access, incorrect settings, etc.). → And as Jean-Paul Joanany likes to remind us: **cybersecurity is everyone's business**, we need to know how to provide users with the right tools so that they can participate in this governance, to confront them with their responsibilities. With IDECSI, Action Logement users are informed of important events requiring verification on their M365 account and shared spaces (Teams): new user, new device, new share, synchronisation, rights, etc.   For Action Logement, the IDECSI solution made it possible to: - increase the visibility of the CISO, the actions put in place;  - improve interaction and communication with users;  - reduce risk on M365;  - identify cases of fraud and notify users in the event of malicious operations.  ![Jean-Paul Joanany Action Logement témoigne sur la sécurité données M365](https://blog.idecsi.com/hs-fs/hubfs/T%C3%A9moignage%20Jean-Paul%20Joanany%2c%20Action%20Logement.jpg?width=523&height=608&name=T%C3%A9moignage%20Jean-Paul%20Joanany%2c%20Action%20Logement.jpg) Jean-Paul Joanany, Action Logement, *during the IDECSI Conference, Les Assises, October 2023, Monaco* Read feedback from previous years: [**The 2022 Conference: Feedback from L'Oréal on M365 Data Protection**](https://blog.idecsi.com/assises-2022-idecsi-loreal?hsLang=en)   Recent articles [Microsoft 365 SharePoint Storage Costs in 2026: What's Changing](https://blog.idecsi.com/microsoft-365-sharepoint-storage-costs-2026?hsLang=en) [Zero Trust Data Governance for Microsoft 365: CISO Guide](https://blog.idecsi.com/zero-trust-data-governance-microsoft-365?hsLang=en) [Cybersecurity Awareness Month: A CISO's M365 Action Plan](https://blog.idecsi.com/cybersecurity-awareness-month-ciso-action-plan-m365?hsLang=en) [Microsoft Foundry: Complete Guide and Data Security Implications (2026)](https://blog.idecsi.com/microsoft-foundry-guide-security?hsLang=en) Best practices to improve Microsoft Teams security [![Download the infographic ](https://no-cache.hubspot.com/cta/default/4272098/825ad7d1-e961-4a7a-a6b3-6e380b22285f.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/825ad7d1-e961-4a7a-a6b3-6e380b22285f) Share this article Subscribe to our newsletter and receive new contents every month Our articles These articles may interest you ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/BLOGPOST-DETOX-EN.jpg) Microsoft 365 Idecsi News \[NEW\] DETOX to get rid of M365 risky sharing and data access [Lire l'article](https://blog.idecsi.com/detox-data-access-sharing-m365?hsLang=en) ![MyDataSecurity evolutions and vision](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Blog%20Images/BLOG-ITW-THIBAULT_J-4.jpg) Idecsi News MyDataSecurity: Interview and vision of the Product Manager [Lire l'article](https://blog.idecsi.com/mydatasecurity-interview-product-manager?hsLang=en) ![feedback from L'Oréal - Assises ](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Blog%20Images/MicrosoftTeams-image%20%285%29.png) Idecsi News Case-Study L'Oréal and IDECSI Conference on Data Protection [Lire l'article](https://blog.idecsi.com/assises-2022-idecsi-loreal?hsLang=en) ### Data protection, let's discuss your project?   [![Contact us](https://no-cache.hubspot.com/cta/default/4272098/bea4f372-c84f-4ec4-980c-ca663747fbfe.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/bea4f372-c84f-4ec4-980c-ca663747fbfe) ![video background](https://idecsi2a-dev-idecsi.pf27.wpserveur.net/wp-content/uploads/2022/02/video-background-idecsi-responsive-1.png) [![Logo-Idecsi-White-Ss-ES](https://blog.idecsi.com/hubfs/LOGOS%20IDECSI/LOGOS%20OFFICIELS/Logo-Idecsi-White-Ss-ES.svg)](https://www.idecsi.com/) +33 1 84 79 38 30 - - - - [Why choose IDECSI?](https://www.idecsi.com/user-security/) - [About us](https://www.idecsi.com/about-us/) - [Join the team](https://www.welcometothejungle.com/fr/companies/idecsi) - Solutions - [Visibility](https://www.idecsi.com/challenge-data-visibility/) - [Detection](https://www.idecsi.com/challenge-threat-detection/) - [User engagement](https://www.idecsi.com/challenge-involve-user/) - [Access review](https://www.idecsi.com/challenge-rights-review/) - [Remediation](https://www.idecsi.com/challenge-remediation/) - [Sensitive data](https://www.idecsi.com/challenge-sensitive-data/) - [Products](https://www.idecsi.com/solution/) - [MyDataSecurity](https://www.idecsi.com/solution/mydatasecurity/) - [Advanced Monitoring](https://www.idecsi.com/solution/advanced-monitoring/) - [MyDataManagement](https://www.idecsi.com/solution/mydatamanagement/) - Resources - [Resources & News](https://blog.idecsi.com/resources?hsLang=en) - [Blog](https://blog.idecsi.com) - [Customer success](https://blog.idecsi.com/resources-customer?hsLang=en) - [Extranet](https://extranet.idecsi.com?hsLang=en) © IDECSI ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mona Piquet", "url" : "https://blog.idecsi.com/author/mona-piquet" }, "dateModified" : "2024-01-17T13:37:34.125Z", "datePublished" : "2023-12-19T14:12:24.000Z", "headline" : "Feedback from 2 companies on M365 Data Security - Les Assises 2023", "image" : [ "https://blog.idecsi.com/hubfs/Les%20Assises%202023%20BPCE-IT%20et%20Action%20Logement%20RETEX.png" ], "mainEntityOfPage" : { "@id" : "https://blog.idecsi.com/conference-m365-data-security-assises2023", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.idecsi.com/hubfs/Logo-Idecsi-Black-tagline.png" }, "name" : "IDECSI" } } ```