Microsoft 365 Audit & Investigation Training – All You Need to Know

Microsoft 365 Audit & Investigation Training – All You Need to Know2022-04-22T13:28:17+01:00

Project Description

Course Training Dates

Book more than one course and receive a 10% discount.

LocationTrainerStart DateEnd Date CostBook
VirtualNoleen Schenk18/Jul/2221/Jul/22£1000 + VATBook

Course Overview

This Microsoft 365 Audit and Investigation training course will guide you through the Microsoft 365 environment tools that you will need to run an internal audit and investigation within your organisation. This course will give you the confidence to identify what information is being shared in your organisation and how to search for information inside your Microsoft 365 tenant. You will learn how to use the Investigation Analytics, Configuring Polices, Alerts and Triage experiences, Remediation and Litigation procedure.

What you will learn from the course:

  • To gain an understanding of the Audit functionality of Microsoft 365 
  • To gain an understanding of how the Audit functionality can be used for your organisation 
  • To gain an understanding of how to do a Basic Audit in Microsoft 365  
  • To understand how to interpret the audit logs to support investigations 
  • To gain an overview of the M365 platform 
  • Thinking about how audit investigations can be undertaken  

The course will cover the following topics:

  • Section 1 – Investigation Analytics

You will see how to use the scan function to quickly get an understanding of the insider risks an organization is exposed to, show suggested policies, and, see how to customize built-in policies as part of setup and deployment.

  • Section 2: Configuring Policies

You will use the Microsoft 365 compliance centre to create an insider risk policy for the data theft by departing employee use case. We will create policies to trigger events on specific risk activities we want to detect and investigate.

  • Section 3 – Alerts and Triage Experience

We will look at the steps involved to triage alerts, investigate to determine the actual event or issue, and drill down to determine validity by creating a case and preparing for remediation.

  • Section 4 – Remediation

We will look at available escalation paths such as inviting others, sending a notice, and escalating to Advanced eDiscovery. We will also take a quick look at Power Automate, Teams integration, and SIEM integration and see how easy it is to package up relevant details and send to others for review.

  • Section 5 – Litigation Procedure

We will look at connecting an investigation to litigation proceedings through an Advanced eDiscovery experience. We will take a look at how information collected through events will be packaged for investigations and packaging for submitting evidence for litigation events. E.g. Court proceedings.

Who should attend?

This course is for members of an Audit Team within the Police or anyone associated with a type of role that provides an audit function for internal investigations at all levels. The ideal delegate will be one who needs both a broad understanding of Microsoft 365 features, functions and security along with an in depth understating of Microsoft 365 audit features


Will I get a recognised qualification?2021-01-22T14:17:00+00:00

As part of our accreditation with the CPD accreditation group, you will receive 6 or 12 CPD points for each course attended.

The Certificate in Managing Data Protection Compliance is the second qualification of a suite of 3 data protection qualifications.

Do you offer any course discounts?2021-01-22T14:17:13+00:00

Yes we offer a 10% discount for the primary delegate if you book more than one person from the same organisation at the same time.

We offer 20% off on selected course for promotional offers.

What happens if the course is cancelled?2021-01-22T14:17:37+00:00

To try to avoid cancelling face to face courses, however if the number of delegates is below 5 we will offer this a virtual course instead.

See full terms and conditions.

When will I be advised of the venue location?2021-01-22T14:17:49+00:00

Exact location are sent out via email, two weeks before the course, we would therefore advise you not to book accommodation until the venue is confirmed.

Pre Paid Option

If you have a training budget and have not yet identified your organisations broad training requirements our prepayment option may give you the flexibility you require as we can offer the facility to purchase places in bulk on our All You Need to Know Courses without the need to choose which courses at the time of purchase. This can be a much more cost effective way of training.

What our clients said about the course

The course was fantastic. Discussion between the attendees was useful, hands on aspects were great.

Head of Information Compliance

The hands on aspect of the course was essential to understanding the concepts. I really enjoyed playing the game during the course! such a great idea.

Planning Officer

Customised In House Training

Why not try our bespoke in house training courses that are custom made to your needs?

FREE Online Training Webinars

We run many free online webinar courses on a variety of subjects.

Pre Paid Option

Our prepayment option gives you flexibility and cost savings.

Go to Top