--- title: Optimise your SOC with distributed detection in Office 365 description: The number of events related to the Microsoft 365 environment is unlimited. IT teams are saturated and security teams under-staffed for growing threat image: https://blog.idecsi.com/hubfs/Blog%20Images/Office-365-monitoring.png --- [![Logo-Idecsi-Black-tagline](https://blog.idecsi.com/hs-fs/hubfs/LOGOS%20IDECSI/LOGOS%20OFFICIELS/Logo-Idecsi-Black-tagline.png?width=1010&height=319&name=Logo-Idecsi-Black-tagline.png)](https://www.idecsi.com/) - Solutions DETOX® pour M365 Audit, Remediation & ROI [Discover DETOX](https://info.idecsi.com/detox-m365?hsLang=en) ![Audit, Remediation & ROI](https://blog.idecsi.com/hubfs/ILLU-4.png) Solutions IDECSI gives security and IT teams full control over their data — across DSPM, Data Access Governance, Human Risk Management, and Data Volume Management. - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) M365 Data Security Platform](https://www.idecsi.com/solution/mydatasecurity/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Data storage optimization](https://www.idecsi.com/solution/mydatamanagement/) - Challenges M365 Checklist 15 Warning Signs Your M365 Data Is at Risk [Get the checklist](https://info.idecsi.com/checklist-15-warningsigns?hsLang=en) ![Checklist risques M365](https://blog.idecsi.com/hubfs/Frame-2147255341.png) Your 2026 Challenges Address your most critical data security and governance challenges - across your M365 environment - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Gain visibility accross M365](https://www.idecsi.com/challenges/visibility-microsoft-365) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Get Ready For Copilot M365](https://www.idecsi.com/challenges/m365-copilot/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Control external user access](https://www.idecsi.com/challenges/external-access-microsoft-365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Prevent Sensitive Data Exposure](https://www.idecsi.com/challenges/sensitive-data-m365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Gain visibility across Microsoft 365](https://www.idecsi.com/challenges/visibility-microsoft-365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Ensure regulatory compliance](https://www.idecsi.com/challenges/compliance-m365/) - Resources Is Your Tenant Ready for Copilot? A Security & Governance Playbook [Download](https://info.idecsi.com/whitepapper_copilot?hsLang=en) ![Copilot guide](https://blog.idecsi.com/hubfs/Frame-2147255339.png) Our resources Check out our useful resources for improving data protection - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Blog](https://blog.idecsi.com) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Help Center](https://help.idecsi.com/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Ressources & News](https://blog.idecsi.com/resources?hsLang=en) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) About us](https://www.idecsi.com/about-us/) - [Customers](https://blog.idecsi.com/resources-customer?hsLang=en) - - [English](https://blog.idecsi.com/optimize-soc-microsoft-365) - [Français](https://blog.idecsi.com/fr/optimiser-soc-detection-distribuee-microsoft365) Search [Request a demo](https://info.idecsi.com/demo-idecsi?hsLang=en) Security 07 May 2019 # Optimise your SOC with distributed detection in Microsoft 365 ![The SOC team](https://f.hubspotusercontent40.net/hubfs/4272098/Blog%20Images/Office-365-monitoring.png) - [Home](https://www.idecsi.com/) - [Blog](https://blog.idecsi.com) - Optimise your SOC with distributed detection in Microsoft 365 Today, the number of events related to the Office 365 environment is effectively unlimited. IT teams are already saturated and security teams under-staffed in the face of this growing threat. The Security Operations Centre (SOC) is responsible for securing information – and this information is the core of Office 365’s communication and collaboration tools. - [The limits of the SOC in the context of Office 365](https://blog.idecsi.com/optimize-soc-microsoft-365#limits) - [Distributed detection for Office 365](https://blog.idecsi.com/optimize-soc-microsoft-365#detection) - [MyDataSecurity: the extended arm of the security team](https://blog.idecsi.com/optimize-soc-microsoft-365#PSG)   ## **The limits of the SOC in the context of Office 365** If the SOC had to analyse every unusual event generated by the Office 365 environment, it would be unmanageable. Consider only events such as a new device or connection from a new IP address – and then multiply this by the number of employees. This gives an idea of the number of events to manage on a daily basis – and yet there is obvious interest in tracking these events as potential threat vectors. And now add in all other important events… Contextualization and responsiveness are two essential components of a SOC. However, with current security methods and tools, it is almost impossible to react quickly to Office 365 events. Therefore, due to lack of visibility, these thousands of operations can jeopardize the integrity of the entire information system. The difficulty lies in not being able to identify what is fraudulent, malicious or illegitimate from what is usual, normal or unthreatening in the life of an organization. If a person in the company accesses a sensitive file, is it legitimate? Are SOC resources well aware of the sensitive issues related to Office 365? Do more exposed people (executives, privileged account holders) receive more attention? Solving Office 365 security issues is a major challenge for the information system. **How to effectively detect and respond to Office 365 threats in this environment?**   ## **Distributed detection for Office 365** Given the volume operations in Office 365, the SOC will not be able to absorb and manage every alert that a SIEM may identify. To process these issues and risks, it is necessary to **change the relationship of security to the rest of the company and gain in efficiency**. The user must play a key role. Detecting a compromise in the information system is a good start. We then need the user to participate in the management of non-threatening cases. The user should automatically receive reports of who is accessing their account or files. They can follow their own security and notify the security team in case of abnormal or malicious events. At the same time, Security decides what to monitor and prioritizes alerts according to risk and context. Alerts or reports are sent directly to those who have the information and/or need the information as part of their job. This allows - Users to become autonomous in the management of their own account and access to information - Administrators to visualize and control the configuration of Office 365 - Security to analyze and protect sensitive areas, accounts and people. Detection becomes collaborative and **multiplied**, like the Office365 environment.   ## **MyDataSecurity: the extended arm of the security team** IDECSI has developed a solution that detects in real time any unauthorized or suspicious access in Office 365, along with malicious configuration changes. Inspired by the way employees actually work, MyDataSecurity allows direct interaction with the user to **minimize detection and resolution times on simple and routine cases**. Its major advantage: **improving the user’s digital experience around security** – security becomes a positive experience for the user, without additional constraints. Distributed detection thus makes it possible to **improve operational efficiency** within the SOC. The security team focuses on high-risk alerts, optimizing the use of this highly valuable resource. Recent articles [Microsoft 365 SharePoint Storage Costs in 2026: What's Changing](https://blog.idecsi.com/microsoft-365-sharepoint-storage-costs-2026?hsLang=en) [Zero Trust Data Governance for Microsoft 365: CISO Guide](https://blog.idecsi.com/zero-trust-data-governance-microsoft-365?hsLang=en) [Cybersecurity Awareness Month: A CISO's M365 Action Plan](https://blog.idecsi.com/cybersecurity-awareness-month-ciso-action-plan-m365?hsLang=en) [Microsoft Foundry: Complete Guide and Data Security Implications (2026)](https://blog.idecsi.com/microsoft-foundry-guide-security?hsLang=en) Best practices to improve Microsoft Teams security [![Download the infographic ](https://no-cache.hubspot.com/cta/default/4272098/825ad7d1-e961-4a7a-a6b3-6e380b22285f.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/825ad7d1-e961-4a7a-a6b3-6e380b22285f) Share this article Subscribe to our newsletter and receive new contents every month Our articles These articles may interest you ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Microsoft%20Foundry%20_%20guide%20complet%20et%20enjeux%20pour%20la%20s%C3%A9curit%C3%A9%20%282026%29.png) Microsoft 365 Security Microsoft Foundry: Complete Guide and Data Security Implications (2026) [Lire l'article](https://blog.idecsi.com/microsoft-foundry-guide-security?hsLang=en) ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Illus-Blog-Supervision.png) Microsoft 365 Security Microsoft 365 Phishing: Why Oversharing Makes a Compromised Account Far More Dangerous [Lire l'article](https://blog.idecsi.com/fr/phishing-microsoft-365-risques-donnees-partagees-1?hsLang=en) ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/image%20%2858%29.png) Microsoft 365 Security Securing AI Agents in Microsoft 365: Best Practices for 2026 [Lire l'article](https://blog.idecsi.com/securing-ai-agents-microsoft-365?hsLang=en) ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Exposition%20des%20donn%C3%A9es%20dans%20Microsoft%20365%20_%20risques%20et%20controle%202.png) Security Data Exposure in Microsoft 365: Understanding the Risks and Taking Back Control [Lire l'article](https://blog.idecsi.com/microsoft-365-data-exposure?hsLang=en) ### Data protection, let's discuss your project?   [![Contact us](https://no-cache.hubspot.com/cta/default/4272098/bea4f372-c84f-4ec4-980c-ca663747fbfe.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/bea4f372-c84f-4ec4-980c-ca663747fbfe) ![video background](https://idecsi2a-dev-idecsi.pf27.wpserveur.net/wp-content/uploads/2022/02/video-background-idecsi-responsive-1.png) [![Logo-Idecsi-White-Ss-ES](https://blog.idecsi.com/hubfs/LOGOS%20IDECSI/LOGOS%20OFFICIELS/Logo-Idecsi-White-Ss-ES.svg)](https://www.idecsi.com/) +33 1 84 79 38 30 - - - - [Why choose IDECSI?](https://www.idecsi.com/user-security/) - [About us](https://www.idecsi.com/about-us/) - [Join the team](https://www.welcometothejungle.com/fr/companies/idecsi) - Solutions - [Visibility](https://www.idecsi.com/challenge-data-visibility/) - [Detection](https://www.idecsi.com/challenge-threat-detection/) - [User engagement](https://www.idecsi.com/challenge-involve-user/) - [Access review](https://www.idecsi.com/challenge-rights-review/) - [Remediation](https://www.idecsi.com/challenge-remediation/) - [Sensitive data](https://www.idecsi.com/challenge-sensitive-data/) - [Products](https://www.idecsi.com/solution/) - [MyDataSecurity](https://www.idecsi.com/solution/mydatasecurity/) - [Advanced Monitoring](https://www.idecsi.com/solution/advanced-monitoring/) - [MyDataManagement](https://www.idecsi.com/solution/mydatamanagement/) - Resources - [Resources & News](https://blog.idecsi.com/resources?hsLang=en) - [Blog](https://blog.idecsi.com) - [Customer success](https://blog.idecsi.com/resources-customer?hsLang=en) - [Extranet](https://extranet.idecsi.com?hsLang=en) © IDECSI ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mona Piquet", "url" : "https://blog.idecsi.com/author/mona-piquet" }, "dateModified" : "2021-12-22T15:09:42.109Z", "datePublished" : "2019-05-07T12:34:00.000Z", "headline" : "Optimise your SOC with distributed detection in Office 365", "image" : [ "https://blog.idecsi.com/hubfs/Blog%20Images/Office-365-monitoring.png" ], "mainEntityOfPage" : { "@id" : "https://blog.idecsi.com/optimize-soc-microsoft-365", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.idecsi.com/hubfs/Logo-Idecsi-Black-tagline.png" }, "name" : "IDECSI" } } ```