Respond with confidence with Microsoft 365 Discovery Solutions

1. Respond with confidence with Microsoft 365 Discovery Solutions Technical overview deck

2. Discovering the information you need when you need it is expensive and difficult • 20x • Increase in average data created in day to day job at Microsoft over the last ten years • 70% • Of the costs of eDiscovery are in the review process • 85% • Reduction in cost of eDiscovery per custodian at Microsoft using M365 eDiscovery capabilities

3. The 3 pillars of Microsoft built-in compliance Compliance Manager Assess Manage tenant compliance from one place with actionable insights & simplification Service Trust Portal ASSESS PROTECT RESPOND Protect Protect and govern sensitive data across devices, apps and cloud services Built-in compliance Data Governance Auditing Encryption Respond Efficiently respond to regulatory requests leveraging AI to find the most relevant data eDiscovery Access Control

4. Respond effectively • Respond to regulatory requests with confidence with built-in, suite-wide search and discovery tools Search Across Locations EXO SPO, ODB,, Teams Other 1st Party • Harness intelligence to reduce data toonly the most relevant • Reduce time and cost of common discovery requests with advanced analytics • Non-Office 365 Data • Granular permissions • Case management • Put custodial and shared locations on hold • Tenant wide search • Refine with conditions and advanced analytics • Search & tag case documents for follow up • Export prepared load file • Reduce risk with data in place • File shares, sites and other apps • eyond litigation with scenarios like Data Subject Requests in GDPR, Investigations, …

5. Cost vs. volume per custodian Milestone averages at Microsoft 100 81 76 48 44 20x data creation increase compared to 10 years ago 30 27 27 17 15 11 85% reduction in cost/custodian 7 4

6. DSAR solution spotlight The challenge: “Give me everything you have on me!” With less than seven days’ notice, we were tasked to review and categorize all internalcommunications referencing a particular data subject. The solution: O365 Advanced eDiscovery • How did we do this? • AED themes were used to group similar documents based on content. • We had the system distill the top 20 themes, so we could review a sample of each thematic category and provide a simplified description of the types of content represented. • The export list spreadsheet was the only review organization tool necessary to manage the actual review work for the case. • 2,611 parent-level items • After extraction, the 2,611 items expanded to a total of 9,202 individual reviewable items • Review attorney can review 400 items per 8-hour day, so this would have taken 23 days for linear review • After threading and deduplication, there were 1,340 unique items to manage • Reductionof 89%

7. eDiscovery model implemented in Office 365 Search for and collect content that might be relevant Identify andpreserve data Rank documents by relevance, organize docs by similarity, & identify themes Iteratively search and tag within collected documents Export a relevant subset of documents that are tagged for further action Do all of these activities within a case that you create for the new matter

8. Principles for eDiscovery in Office 365 Quickly find what’s relevant and reduce risk with intelligent eDiscovery in Office 365 Reduce complexity Reduce effort to preserve data, manage legal holds, and manage data for a case Reduce time, effort, cost Analytics help you organize unstructured data to reduce time and effort involved in reviewing documents Enable coordination Case workspace with roles, data permissions, and built-in auditing enable different roles & personas to collaborateon a case – across organizations

9. Beyond litigation: investigations Wide range of scenarios Regulatory compliance, employment law, HR, financial, internal business requirements Secure access Provide access based on role, delegated access and enable security filters to scope access Self-service case management tools Investigators can create & manage cases, put data on hold, perform searches and export Identify subjects, witnesses, custodians Search for relevant subjects or witnesses or custodians Identify relevant data Search for data relevant to the investigation across Office 365 and imported data Enable collaboration Between investigators & attorneys overseeing the case

10. eDiscovery in Office 365 Quickly find what’s relevant and reduce risk with intelligent eDiscovery in Office 365 Create a case Create a case, add stakeholders and manage case execution Put holds on users and content Identify relevant content locations and users and place on hold Search for content in place Search by keyword, date range, users, labels and more criteria to get a handle on relevant data

11. Actionable intelligence with Advanced eDiscovery Intelligently explore and analyze unstructured data to quickly identify what’s relevant Minimize Use predictive coding to train the system to find likely relevant documents and reduce what’s sent to review Organize Use near duplicate detection to organize the data and email threading to reconstruct email conversations Recognize Use Themes to understand the topics represented in the unstructured data set Search and tagging Ad-hoc searches, ability to save search queries, and tag search results with case specific labels

12. Available over the last year Discovery investments • Ingestion of non-Office 365 data • Indexing improvements • Optical character recognition • RMS decryption • Export to container • UI modernization • Compliance boundaries • Search & tagging

13. A look ahead

14. Custodian and hold management Preview – Dec’18 Manage holds, data sources & notification workflows Manage custodians and legal holds Add and remove custodians into a case, and apply legal holds to their data in-place if needed Custodian notifications Manage legally required workflows around notifications to custodians and their acknowledgments Custodian intelligence Identify shared data e.g. SharePoint sites/Teams that custodians had access to or was active on. Identify likely custodians based on criteria. Dynamic holds Automatically expand legal holds to shared data locations based on continued activities of custodians

15. Data collection and content processing Preview – Dec’18 Search for and collect content from Office 365 & beyond • Pre-collection analytics • Scope content to be collected within a case, and tune queries to minimize collection volumes • Deep crawling and indexing • Deep processing (e.g. much higher size limits, file types, …)to extract and index text & metadata • Collection into document working sets • Manage static sets of documents within a case, that can be independently searched, analyzed, shared, and acted upon. • Support additional Office 365 workloads & content types • First class support for Teams, Yammer, Planner, Forms, Stream, … • Defensible process • Static working sets, transparency (e.g. error reporting, item level auditing, …) and additional controls (e.g. error remediation, …)

16. Analyze and search a working set Preview – Dec’18 Intelligently explore and analyze unstructured data to quickly identify what’s relevant • Increase productivity • Use predictive coding to train the system to find likely relevant documents and reduce what’s sent to review • Organize and minimize • Use near duplicate detection to organize the data and email threading to reconstruct email conversations from unstructured data • Recognize • Use themes to understand the topics represented in the data set • ML based content classification • Let the system identify potential high value content such as attorney client privilege or offensive language

17. Acting on documents Preview – Dec’18 Explore, review, tag, and take actions on documents with approval workflows Native, near-native and text viewer Built in document viewers for Microsoft & Non-Microsoft file types, viewing options so users can fully understand a document, and easy navigation for search hits within a document Annotations and redactions Manual annotations and redactions, with automated redactions for sensitive content Document level insights Information panels e.g. duplicates & near-duplicates, email threads & family, conceptually similar, history, ‘who knows this’, metadata & properties, … etc. Document coding, screening & approvals Tag documents with issue coding, automated privilege screening, and multi-level approval workflows, …

18. Demo eDiscovery

19. Progress towards and end to end solution In Product Now |In Development|Not on Roadmap

20. Real time indexing in Office 365 Significant enhancements to increase limits across Exchange Online andSharePoint Online Index Limit Changes (EXO) Index Limit Changes (SPO)

21. Export options 3rd party tools to extend the Office 365 eDiscovery process Option 2: Browse the export Option 3: Export into review tool Option 1: Native export Light weight tagging Best for single-investigator cases Best for simple investigations Full review tools Collaboration on tagging & review All types of investigations Download to PST or native folder Best for manual data review Best for moving data between locations

22. Scenario comparison summary: 1TB case Outsource All, No Analytics TargetedCollections AdvancedeDiscovery Cost: $445,613 Technical Savings: 50% Overall Savings: 18% Improved Security Cost: $251,987 Technical Savings: 63% Overall Savings: 53% Improved Security Faster More Consistent Cost: $537,389 Savings: 0%

23. M365 Data Governance and Discovery features by plan

24. Questions and Discussion Smart cities Sensors Energy systems Vehicles Partners Cloud Citizens Marketplaces Equipment Customers Mobile devices On-premises Supply chains Manufacturers

25. title Thank you! Learn more at aka.ms/eDisco Discovery Solutions in Microsoft 365