Data Collection Disclosure - Trend Micro Cybersecurity Assessment Service

Trend Micro Security Assessment Service Data Collection Disclosure

- Updated:
- 24 Mar 2020
- Product/Version:
- Apex One as a Service
- Cloud App Security
- Platform:

Registration

The Assessment Service uses the information to:

Identify users
Assign a confirmation number to each user (The number is used to log on to the portal.)
Assign an ID to the company (The ID is embedded in the ATTK package.)
Send status updates
Generate email and endpoint reports

The information will automatically be deleted 30 days after the report is generated.

Data collected	First name Last name Company name Country State/Province/Region Email address
Console location	Registration page
Console settings	Click Start

Office 365 Access

The Assessment Service needs permission to access mailboxes for scanning. Trend Micro does not access and store users’ Office 365 credentials.

Granted permissions expire one month after you click “Accept” on the Office 365 permissions page. If you want to revoke permissions before the expiration date, contact Trend Micro Support.

Data collected	Azure Active Directory: Domain, user, and group information Exchange Online: Mailbox information Global administrator email address used to grant permissions to the Assessment Service
Console location	Registration page > Click START
Console settings	Click Grant Permission

Email Assessment

Email Assessment combines machine learning, document exploit detection, and behavior analysis to protect Exchange Online users from BEC, ransomware, advanced phishing, and other high-profile attacks.

The information will automatically be deleted 30 days after the report is generated.

Data collected	Email senders Email recipients Email locations Email subjects Email attachments File modifiers File locations File names URLs in email body URLs in email attachments URLs in files Suspicious executable files and scripts in cloud storage services Suspicious executable files and scripts in email attachments Metadata of suspicious executable files and scripts in cloud storage services Metadata of suspicious executable files and scripts in email attachments IP addresses of upstream MTAs for IP rating query Domain, user, device and group information in Azure Active Directory
Console location	Registration page > Click START > Click Grant Permission
Console settings	Click Start Email Assessment

Endpoint Assessment

Endpoint Assessment includes Smart Feedback, a feature that shares anonymous threat information with the Trend Micro Smart Protection Network. Smart Feedback is automatically enabled when you start the Endpoint Assessment.

Information shared with the Trend Micro Smart Protection Network will automatically be deleted after three years.

Data collected	IP addresses Logon names Computer names Operating systems Names and paths of detected files and processes (malicious and suspicious)
Console location	There are two entries for endpoint assessment.
Console settings	Email assessment report > Click Start Endpoint Assessment Registration page > Choose “Potentially Compromised Endpoints Only" > Click Next

Need More Help?

Trend Micro Security Assessment Service Data Collection Disclosure

Registration

Office 365 Access

Email Assessment

Endpoint Assessment