Kudos to the Edmodo team: A graduation with honors

This article is contributed. See the original author and article here.

Connecting the Education Community


The Education community thrives on the never-ending quest for information, and the ability to share that information with others.  It strengthens us, enlightens us, and can be harnessed and used for positive change in each of our lives.  In today’s world, we have so many options on HOW we educate ourselves, and HOW we share that information with others.  And in this digital age, the access to information and knowledge is abundant, but oftentimes can be overwhelming.


 


The technologies that help us enable our education are also changing, and they have become increasingly important in keeping us connected with those we teach and those who teach us.  In fact, the importance that technology has in creating new ways to make information more accessible, more inclusive, and more comprehensive is at the core of what drives this tech community.  As technology evolves, it’s our collective goal to ensure it changes for the better.


 


The End of an Era


This past month saw the industry exit of one of true pioneers in the education industry, Edmodo.  For almost 15 years, Edmodo has helped strengthen the education community by creating tools that have enabled teachers to share content, distribute assignments, and manage communication with students, colleagues, and parents worldwide.  And while we’d like to say a tremendous “Thank You” to the Edmodo team, we also wanted to reach out to the community to help fill the void that the loss of some of these tools may have on your classrooms.


 


How Teams Can Help


While technologies in this industry change, the connected classroom is still an essential part of our educational environment, and the tools and support teachers and students can utilize are important to our overall success. The entire team at Microsoft Education is dedicated to the continued support of the education community and offers a host of solutions that can help get the most out of in-person and hybrid learning environments.


 


For example, Microsoft Teams for Education is part of a product suite designed to empower every learner and bring everyone and everything together in one powerful communication application. It’s built with tools and features to support the evolving needs of students and teachers in both small classrooms and larger educational institutions. Microsoft Teams for Education has both free and paid subscription plans that can fit the needs of any school and provides the necessary tools and support to help you get started right away.


 


By combining a classroom’s communication and productivity tools in one place, Microsoft Teams enables you to:



  • Collaborate seamlessly by making it easy for educators to set up virtual classrooms, keep assignments and grades organized, and collaborate on any number of files in real time.

  • Connect virtually to make remote and hybrid learning fun and engaging. Chat, video, file sharing, and other features help students and educators connect and communicate more naturally.

  • Communicate securely with the ability to reach out to students, staff, parents, and guardians in a safe and secure environment, including supervised chats for students.


 


In addition to providing collaboration, connection and communication tools, Teams can also greatly enhance the learning experience by:



  • Encouraging independent learning by providing access to personalized tools that allow students to practice and learn on their own, with the help from our AI-assisted digital learning coaches and built-in progress trackers.

  • Developing social skills by supporting students’ emotional and social well-being and providing a safe space to navigate feelings with age-appropriate activities that promote Social-Emotional Learning (SEL).

  • Enhancing hybrid education by bridging the gap between in-person and remote educational environments with easy-to-use tools that make blended learning more convenient and efficient for everyone.


 


We understand that the school year has already begun, and that the amazing tools Edmodo brought to your classroom are going to be missed. We hope Teams can help fill some of these gaps and provide you the solutions you need in the fastest and most efficient manner. From all of us at Microsoft, to the entire education community, best of luck with the new school year, and let’s make this the best one ever, together.


 


Mike Tholfsen


Group Product Manager


Microsoft Education

CISA Releases Three Industrial Control Systems Advisories

This article is contributed. See the original author and article here.

CISA has released three (3) Industrial Control Systems (ICS) advisories on September 27th, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations:

•    ICSA-22-270-01 Hitachi Energy AFS
•    ICSA-22-270-02 Hitachi Energy APM Edge
•    ICSA-22-270-03 Rockwell Automation ThinManager ThinServer

Where to Start with Microsoft Teams Apps in Gov Clouds

Where to Start with Microsoft Teams Apps in Gov Clouds

This article is contributed. See the original author and article here.

Customers in our Office 365 government clouds, GCC, GCCH, and DoD, are continuing to evolve how they do business in the hybrid workplace. As Microsoft Teams is the primary tool for communication and collaboration, customers are looking to improve productivity by integrating their business processes directly into Microsoft Teams via third-party party (3P) applications or line-of-business (LOB)/homegrown application integrations. 


 


Common business processes integrated into Microsoft Teams can range from Information Technology (IT) Service Management (ITSM), Content Approval Workflows, to Human Resources requests. Just know that your commonly used business processes and non-Microsoft software services are now surfacing inside of Microsoft Teams! 


 


The common scenario we’ve heard from our customers is: “There are some daily-used non-Microsoft applications that we would like to incorporate into Microsoft Teams. Is it accredited to use in our O365 government cloud? Where should I check?  


 


With current trends, we wanted to provide a reference on where to look when you are planning for integration within Teams. 


 


Option 1: 3P Applications in Teams for Government 


 


Step 1: Check the Teams App Store 


 


One of the first places most customers check is the Teams App Store for available apps suitable for their business needs. Searching the app store using keywords such as, ‘GCC’ or ‘government,’ you can find applications specifically built for the government industry. Applications in the Teams App Store have gone through the rigorous Microsoft Teams store validation process for compliance and testing.  


 


*Please note: GCC High and DoD tenants do not have a public Teams App Store but are able to side load apps into their Tenant specific app store 


 


Each app has a store tile which provides an app description, included capabilities and features, plus the permissions the app requires for use.  


 


RimaReyes_0-1664295393696.png


Image above depicts MyHub for GCC and the description of the MyHub product. 


 


RimaReyes_1-1664295393697.png


Image above depicts Adobe Sign for Government and the Adobe Sign app features. 


 


 


Step 2: Check Security & Compliance for the Teams App 


 


While the information from the Teams App Store might be enough for some organizations, there may be further investigation required on how the application handles data and up to security/compliance.  


 


The Microsoft Teams Apps Security and Compliance Docs page provides customers key information to assess and manage risk for the Microsoft Teams 3P app under consideration. By clicking on each topic in the screenshot below, it will display the related information. Below is an example showcasing the information for Adobe Acrobat Sign. 


 


RimaReyes_2-1664295393699.gif


 


 


 


Compliance 


While all sections are important, one of the most common tabs frequently visited by government agencies is the Compliance tab where one can check if a 3P app is FedRAMP-compliant. Link to an example of a FedRAMP-compliant Teams app. 


 


RimaReyes_3-1664295393699.png


 


 


Image referencing FedRAMP compliance above.  


 


 


Identity 


Another common tab is the Identity tab which provides information around Graph permissions. 


 


RimaReyes_4-1664295393700.png


 


 


Image showing the privileges under Identity tab above. 


 


 


Step 3: Validating Product Compliance on the FedRAMP website 


 


The Federal Risk and Authorization Management Program (FedRAMP), is a standardized approach to security assessment for cloud service offerings with the intent to deploy to Federal agencies. FedRAMP makes it possible for agencies and cloud service providers to reuse authorizations.  


 


*Please Note: Microsoft does not own or manage the FedRAMP site or program. FedRAMP is United States federal government-wide program (owned by GSA) that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services* 


 


Using the FedRAMP Marketplace, you can look up approved products/providers for your own and other agencies.  


RimaReyes_5-1664295393700.gif


Image depicting sorting/filtering options in FedRAMP marketplace above. 


 


 


Using the FedRAMP site: 


 


The left column in the Marketplace provides a search function to query based on your needs. For the Products tab, search based on the product name or company. For the Agencies tab, search by organization name.  


RimaReyes_6-1664295393701.png


Image depicting filter and search bar above. 


 


 


When filtering by product, key areas to consider are marked on the image below, which include, Impact Level, Current Status, etc. 


 


RimaReyes_7-1664295393703.png


Image depicting FedRAMP key focal areas above using ServiceNow as an example.  


 


Furthermore, other agencies using specific products will be listed under the FedRAMP site, as well. This provides a Agency-to-Agency reference when looking for deployment guidance and lessons learned. The Agencies using this product will be located at the bottom of the Product offering page. Example of FedRAMP product page. 


 


RimaReyes_8-1664295393705.png


Image depicting other Agencies using a specific product above. 


 


To filter by Product, use the Product Marketplace link. To filter by Agency, use the Agencies Marketplace link. 


 


Option 2: Line of Business (LOB)/Homegrown Teams Apps 


 


Microsoft Teams allows developers within your organization to build, test, and deploy custom apps for organization’s internal users. Such apps are called custom apps or Line of Business (LOB) apps. Your organization may commission the creation of custom apps for org-specific requirements. For more information, click here. 


 


Customers in GCC High and DoD do not have access to the Teams public app store and will therefore need to get app packages directly from software vendors. For example, ServiceNow is able to provide a Teams app package that points to their FedRAMP accredited environments.  In this type of scenario, customers wonder how they can validate this app package for security risks/requirements. Most of the app packages that customers are receiving from vendors point to FedRAMP accredited services and endpoints, just like the above ServiceNow example. If your agency has an existing Authority To Operate (ATO) with the vendor, sideloading that app into Teams may fall under the same ATO umbrella and may not need a separate review. Note, apps in Teams are simply connecting to an existing service endpoint that may already have been approved for use on your network.  


 


If your organization would like to build your own custom app, learn more by visiting our new Teams App Camp! 


 


Summary 


 


We covered looking at 3rd party applications from the Teams App Store, reviewing Microsoft Teams Apps Security and Compliance to assess and manage risk, and finally, reviewing the FedRAMP site for accreditation for Agency-to-Agency references.  


 


For customers that use non-Microsoft services today and would like to see those integrations brought into Teams, please contact your Product Vendor to request the application and express the desired supported cloud, as well as, your Microsoft account team for awareness and options. 


 


If your agency wants to build their own app Teams application and/or engage with Teams Engineering, please contact your Microsoft account team for coordination.  


 

CISA Releases Three Industrial Control Systems Advisories

This article is contributed. See the original author and article here.

CISA has released three (3) Industrial Control Systems (ICS) advisories on September 27th, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations:

•    ICSA-22-270-01 Hitachi Energy AFS
•    ICSA-22-270-02 Hitachi Energy APM Edge
•    ICSA-22-270-03 Rockwell Automation ThinManager ThinServer