Trust your security.
Trust your people.
With Lenovo.
How to keep your workforce
safe in an evolving cybersecurity environment

The irrevocable move towards hybrid
working has created a challenging
cyber security environment.
Today, most workers need to be equipped
for hybrid working. As a result, threatprotection needs to be extended acrossmultiple clouds and different platforms.
This creates a complex digital environment that can be a hidden
harbour of unknown threats. Enforcing security policies acrossdevices and different digital layers is a seriously daunting task.
It’s the stuff of sleepless nights for those charged withdelivering protection.
Secure hardware and Cloud equation – a unique partnership:
Lenovo has a unique partnership with Microsoft, in which
hardware powered by ThinkShield is combined with
Microsoft Cloud Security services.

2Security byDesign with
Lenovo ThinkShield
At Lenovo we understand the urgent
need for sweeping protection. Reflecting
best practice protection, we’re driving ourThinkShield security approach to increase
the security of our device portfolio by design.
This goes all the way from securing supply chains throughto developing new Lenovo products that are secure andengineered by the makers of the world’s most trusted
business PCs.
Our unique ThinkShield portfolio of hardware, services,software and processes deliver protection and reaches
all levels of the enterprise. Our partnerships withindustry-leading security providers enable sweeping
defenses that encapsulate, contain and drive a Zero
Trust strategy, powered by Microsoft security solutions.

3

Zero Trust. The futureof cyber protection.
The shape of a
new direction.
Zero Trust is a major departure from traditional
network security in which there is a ‘corporate
perimeter’, or devices connected via a VPN,
which is very much the norm today.

The need for Zero Trust has never been more urgent:81%

1,070%

increase in ransomware
between July 2020and June 20214

of enterprises have begun
the move to hybrid working1

reduction in the riskof a data breach3

55%

50%

50%

of organisations report
detecting a phishing attackin the last 18 months2

decrease in calls
placed to IT and help
desk analysts3

reduction in management
time due to improved
security processes3

The guiding principles of Zero Trust are, ‘Never trust.
Always verify.’
In today’s world of hybrid working, devices should not
be trusted by default, even if they are connected to a‘permissioned’ network.
Zero Trust assumes an attacker is inside the network. Trust isestablished based on context such as the user identity andlocation, the security status of the device and the app orservice being requested. There are policy checks at each step.
This ensures that only the right people with the rightresources on secure devices can access your data.

50%

Lenovo ThinkShield portfolio and Microsoft Security solutions are specifically andpurposefully designed help you implement an end-to-end Zero Trust strategy
and protect your business at all levels.
Microsoft Zero Trust Adoption Report, 2021
IBM Cost of a Data Breach Report 2021​
3	The Total Economic Impact™ of Zero Trust solutions from Microsoft, December 2021.
Study by Forrester Consulting, commissioned by Microsoft.
4
1H Global Threat Landscape Report from FortiGuard Labs
124

This is what Zero Trust architecture looks like.
The concept of Zero Trust is spread across many parts of IT, but protection starts
with Windows 11 modern devices, user identities, and endpoint device monitoring.
Policy Optimisation

DataIdentities

Zero Trust Policy

NetworkApps

Endpoints

Threat Protection

Infrastructure

Monitoring and Analytics
5Enhance and secure
the hybrid working
experience for youremployee with
Lenovo Windows 11
Pro devices
Windows 11 Pro – the most secure Windows
yet – helps you streamline management of
your hybrid workplace while you protect
data and access anywhere.
Designed for modern devices optimized for security, it gives
you the latest benefits of hardware-based protection, tightly
integrated with software. Windows 11 Pro is purpose-built
for secure hybrid work with a higher security baseline
than Windows 10. This includes new requirements forprotection – built-in and enabled by default.

ThinkPad X1 Carbon6Enhance thesecurity of yourLenovo Windows
11 Pro ThinkShield
Device with cloud
management
Protecting identities and endpoint devices
is the first critical step in setting up a Zero
Trust strategy. Identities and devices are thetwo main areas targeted by ID credential
thieves, phishing mails, ransomware, othertypes of malware and advanced threats.

Identity Management• Enables Multifactor Authentication (MFA) which can stop
99.9% of identity attacks.
• Delivers a Conditional Access ‘intelligent’ policy engine thatallows you to set specific rules for user ‘sign-in’. When pairedwith MFA it enables a muscular balance between security anduser productivity.

Endpoint Management• Ensure apps comply with your company’s security protocols
using Mobile Access Management (MAM).
• Ensure devices comply with your company’s security protocols
using Mobile Device Management (MDM) either on company
owned devices or BYOD.

Combine Lenovo Windows 11 devices withMicrosoft Cloud security solutions to rollout a Zero Trust Strategy.

7Control, Protect and Manage by leveraging
the benefits of Security Cloud solutions

Identity Management withAzure Active Directory• Azure Active Directory is a simple andefficient cloud-based identity and accessmanagement service that provides Multifactor
Authentication and Conditional Access.
• Combines core directory services, application
access management, and identity protection
into a single solution.
• Helps your employees securely accessexternal resources, such as Microsoft 365,
the Azure portal, and thousands of other
SaaS applications.
• Secures internal resources such as an
intranet and cloud apps developed byyour organisation.

Microsoft Defender for Endpoint

Microsoft Endpoint Manager

This industry-leading cloud powered
endpoint security solution:

Get endpoint device management andsecurity in a unified management platform:• Helps to secure against ransomware, file-lessmalware, and other sophisticated attacks on
Windows, Mac OS, Linux, Android, and iOS.

• Secures, deploys, and manages all users,
apps, and endpoint devices without
disrupting existing working processes.

• Discovers hidden threats by continuallymonitoring, in real time, code behavior andattacker techniques, enabling rapid detection
and response.

• Helps deliver the modern workplace andmodern management to keep data secure,in the cloud and on-premises.

• 24/7 automated incident response andremediation – helps security teams
immediately go from alerts to AI
driven remediation.

• Combines services you may know andalready be using, including Microsoft Intune,
Configuration Manager, Desktop Analytics,
co-management, and Windows Autopilot.

• Managed threat hunting service from‘on demand’ Microsoft experts.
8Right device, rightplace, right time withLenovo Zero Touch
deployment solution

With Windows Autopilot, IT departments no longer need to re-image or
set up new devices manually. It’s all done remotely. Lenovo Windows 11
devices come with Autopilot pre-configured. IT managers can customiseuser and apply configurations from any location.

Secure, modern technology is key to ensuring
the success of any business. But the traditional
manual approach to deployment is complex,
time-consuming and prone to error.

• Ready to go out of the box – User simply turns on device and witha few simple clicks, its business ready.

Now there’s an easier way to ensure your hybrid and remote
employees hit the ground running – Lenovo Zero-Touch
deployment with autopilot.

• Effortless transition to the cloud – Autojoin devices to Azure Active
Directory and enroll them in mobile device management.

It will galvanise hybrid working, increase productivity and free
your IT teams to focus on innovation to drive the business.

• Track progress – Using Autopilot users can track the progress ofdevice configuration.

• Simple profile management – Create manage and assign up to 350
different profiles to determine a user’s settings and PC experience.

• Problem free provisioning – Personalised and streamlined set up.

• Product registration – Devices automatically registered toAutopilot Cloud Deployment service.

9Adopt a “Better together” approach

Security out-of-the-box

Protect against evolving threats

Modern security management• Protect at the core with TPM 2.0
silicon-assisted security, and data andidentity safeguards.

• Protect credentials with enhanced phishingprotection in Microsoft Defender Smartscreen.

• Keep security features up to date with Windows
Update for Business.

• Sign in hands free with presence sensing – logs
you in when you approach, locks when you leave.

• Enable the adoption of Zero-Trust security frameworks.

• Simpler and more secure sign-in using
passwordless authentication methods like
Windows Hello for Business.
• Helps block malicious software with built-in
protection already enabled.
• To help keep you secure from the start,
Windows 11 prevents malware from loadingwhen you boot.
• Data and network protection supported byhardware-based root-of-trust that helps
maintain and verify device integrity.

• Protect your most sensitive data withSecured-core PCs from Lenovo.
• Get hardware-based credential protection withMicrosoft Pluton.
• Take advantage of intelligent threat detection
and rapid responses informed by 43 trillion
security signals analysed daily.

• Ensure policy compliance for onsite and remote
employees with Microsoft Endpoint Manager.
• Deploy devices preconfigured with corporate
security policies using Windows Autopilot andzero-touch deployment.
• Gain security and visibility by enabling secure single
sign-on across all your apps with Azure Active Directory.

• BitLocker encryption helps protect your businessinformation, even on lost or stolen devices.

• Cloud-first design enables easy extensibility withMicrosoft 365, Microsoft Defender for Cloud, andMicrosoft Defender for Endpoints.

• Get more protection from untrusted sources –open files and websites in an isolated container
with Microsoft Defender Application Guard.

• Help prevent malicious code and protect against
malware and other untrusted software with Windows
Defender Application Control.
10Lenovo – yourtrusted partner
for Zero Trust Strategy
implementationand hybrid working
Why choose Lenovo?
Experience, expertise, enterprise-strength
capability and a dedicated team of experts
to support your cloud adoptions, security
policy definition and implementations. As a
Microsoft Cloud Solutions Provider-authorised
partner (CSP), Lenovo offers the full portfolioof Microsoft Cloud services, including
Microsoft 365 and Azure services.

11Our cloud strategy: everything from one vendor
2022 Partner of the Year Winner
Device Award

Lenovo’s goal is a true hybrid organisation, able to deploy
on-premises, private and public cloud, meeting our customers’
needs for storage, software and solutions. That ties in with our ability
to offer hardware, services, software, device-as-a-service, and support– all from one vendor.

Microsoft Gold Partner andDevice Partner of the Year

Here’s how we make your Zero Trust
Strategy solution work for your business

Lenovo meets Microsoft’s strict requirements to berecognised as a Gold Partner which confirms that Lenovo
have the expertise and capabilities to provide you withhigh-end and secure solutions for your remote working.

Lenovo’s Managed and Professional Services put you on track for asmooth, problem-free, upgrade to Zero Trust defenses.

In addition to that, Lenovo has received the prestigious
Microsoft Device Partner of the Year Award. This recognises
excellence in building, marketing, or selling devices and IT
solutions that champion Microsoft-based technology.
The award came on the back of Lenovo’s track record indelivering integrated solutions and services, consistently,flexibly, and predictably, to meet its customers’ current digitaltransformation demand and future-proof their businesses.

• From solution design to onboarding to final migration Lenovo has
all your needs covered.
• If you have a Microsoft 365 license, we simply refresh Windows
11 devices and Microsoft 365 and include Azure Active Directory,
Microsoft Defender, and Endpoint Manager.
• Premier support – dedicated user hotline, 24/7, 365 days a year.
• Dedicated experts – locally-based experts primed to support yourmove to secure hybrid working.
• Enterprise grade security – top cyber security defenses that beatback the swelling tide of malware and targeted attacks.

12

Contact us today to see how
Lenovo can support you inbuilding your organisation’s
Zero Trust security strategy.
Book a meeting©2022, Lenovo Group Limited. All rights reserved.
All offers subject to availability. Lenovo reserves the right to alter product offerings,
prices, specifications or availability at any time without notice.
Models pictured are for illustration purpose only. Lenovo is not responsible for typographic orphotographic errors. Information advertised has no contractual effect. Lenovo, ThinkPad andThinkBook are trademarks of Lenovo. Microsoft, Windows and Vista are registered trademarksof Microsoft Corporation. All other trademarks are the property of their respective owners.

13