Page 82 - Cyber Defense eMagazine for September 2020

All of this data is encrypted by Microsoft, both in transit between different devices, users, or data centers,
and at rest, with standard technologies.

Microsoft offers to encrypt your data, but that is exactly why Microsoft also remains in possession of the
keys to your data. This enables Microsoft to access all data stored and used in Microsoft Teams in plain
text. Theoretically, Microsoft employees with bad intentions could access sensitive company data. Apart
from that, Microsoft might be forced by authorities on the basis of laws such as the CLOUD Act to provide
access to sensible data. Companies that want to store their data according to the zero-knowledge
principle have only one choice; they must apply additional protection. Zero knowledge encryption does
not allow anyone except the owner of the data and authorized teams in an organization to access the
data in plain text. Files are already encrypted on the user's end device before being uploaded to the
cloud. So "readable" data never leaves your device.

The Boxcryptor App — Features and Functions

The encryption solution Boxcryptor offers end-to-end encryption based on a combination of AES-256 and
RSA. It has been on the security market for almost ten years. Since July 2020, the software solution is
available as an integration in Microsoft Teams, to Boxcryptor Company and Enterprise customers.

Through end-to-end encryption, your data is protected from prying eyes. Nobody can access the data;
neither Boxcryptor, nor Microsoft, or any other third party.

The software is cross-cloud, which makes it well suited for a multi-cloud strategy. In total, Boxcryptor
supports more than 30 cloud solutions besides OneDrive and SharePoint. NAS systems and local data
can be encrypted as well.

Boxcryptor can be directly integrated into Microsoft Teams, similar to other apps. The combination of
Boxcryptor and Microsoft Teams offers a user-friendly surface for secure and efficient collaboration in
teams and companies.

Three ways to Store End-to-End Encrypted Data in Microsoft Teams

Companies can use the app in Microsoft Teams in three different ways. First, as a so-called “Channel
App” in channels of different teams. Second, as a “Personal App” for the user’s individual data. Third,
employees can share encrypted files with their team directly in the chat area of a channel.

Bevor first usage company administrators have to download the Boxcryptor app on the website
www.boxcryptor.com/en/microsoft-teams/. Soon it will be also possible to install the app via Microsoft
AppStore.

Cyber Defense eMagazine – September 2020 Edition 82
Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.