Source: helpnetsecurity.com
Nucleus Cyber Accepted into MISA
Nucleus Cyber, a data-centric security company focused on the modern workplace, announced in August 2019 that it had joined the Microsoft Intelligent Security Association (MISA). The membership recognises the company’s deepened integration with core Microsoft security technologies and its commitment to defending customers against sophisticated, fast-moving threats across collaboration platforms.
MISA is an ecosystem of independent software vendors and managed security service providers that have integrated their solutions with Microsoft’s security stack. Membership signals that a partner’s product meaningfully extends Microsoft’s security capabilities rather than simply coexisting alongside them.
What the Membership Means for Customers
The membership validates the expanded capabilities in Nucleus Cyber’s flagship product, NC Protect, which leverages Microsoft security technologies to deliver fine-grained, data-centric access control across Microsoft 365 applications — specifically Microsoft Teams, OneDrive, SharePoint Online, and Yammer. The immediate benefit for customers is improved conditional access and file-usage protection across every collaboration scenario.
Kurt Mueffelmann, CEO of Nucleus Cyber, commented on the announcement:
“Our membership in Microsoft Intelligent Security Association is great validation of the work that we have done to integrate with and extend core Microsoft security technologies and underlines our joint commitment to provide customers with secure collaboration.”
Kurt Mueffelmann, CEO, Nucleus Cyber
NC Protect and Azure Information Protection Integration
A central element of Nucleus Cyber’s MISA qualification is NC Protect’s integration with Azure Information Protection (AIP). The integration allows AIP labels to be applied and enforced dynamically — at the precise moment a user attempts to access a file — rather than being statically baked in at creation time. This approach supports multiple, context-sensitive protection policies for a single file classification.
Mueffelmann elaborated:
“NC Protect’s integration with Azure Information Protection provides customers with a solution that can dynamically apply AIP labels and protection at time of access right down to the individual file level. This allows us to support multiple protection policies for a single file classification in order to protect the data across every conceivable collaboration scenario.”
Kurt Mueffelmann, CEO, Nucleus Cyber
AIP Label Integration Capabilities
NC Protect’s AIP label integration enables two primary security workflows:
- Conditional access via Dynamic Access Rules: AIP labels can serve as an attribute within NC Protect’s rules engine. These rules control which files are visible to a given user within the SharePoint Online, Teams, Yammer, and OneDrive user interfaces — effectively filtering the UI layer based on label-driven policy.
- Dynamic encryption and usage rights: AIP labels can also act as conditions for applying encryption and defining usage rights (such as print, copy, or forward restrictions). Crucially, rules are evaluated at access time, meaning a single file classification can trigger different protection outcomes depending on who is accessing it and under what circumstances.
Dynamic Watermarking for Sensitive Documents
NC Protect also introduces dynamic watermarks that can be embedded into editable documents. These watermarks are configurable to display any combination of document metadata or user-specific information drawn from Azure Active Directory and the Microsoft Graph — such as the accessing user’s name or email address.
Because the watermarks are unmodifiable, they serve two practical security functions:
- User awareness: Reminding the person viewing the file of its sensitive classification and handling requirements.
- Chain-of-custody tracking: Providing an audit trail that ties document access to a specific user, supporting forensic investigation and compliance reporting if a file is improperly shared or leaked.
Microsoft’s Perspective
Ryan McGee, Director of Security Product Marketing at Microsoft Corp., welcomed the partnership:
“We are pleased to have Nucleus Cyber join the Microsoft Intelligent Security Association in our mission to protect customers against growing external and internal threats. Secure collaboration is always top priority for our customers, and Nucleus Cyber’s integrations can help customers with highly sensitive data to ensure it remains protected as it is shared through the collaboration lifecycle.”
Ryan McGee, Director, Security Product Marketing, Microsoft Corp.
About NC Protect
NC Protect is Nucleus Cyber’s centralised security platform that delivers content- and context-aware data protection for unstructured files and enterprise social data. It dynamically adjusts access permissions and applies protection policies across a range of platforms, including:
- Microsoft SharePoint (on-premises and Online)
- Microsoft 365 (Office 365) applications
- Microsoft Teams
- Yammer
- Dropbox
- Windows file shares
The platform is designed to ensure that sensitive information is accessed, used, and shared in line with an organisation’s regulatory obligations and internal policies — adapting its enforcement in real time rather than relying on static, creation-time controls.
Key Takeaways for Security and DevOps Teams
- MISA membership is a meaningful signal of deep Microsoft security stack integration, not merely a partner directory listing.
- Dynamic, access-time policy enforcement addresses the limitations of static labels applied only at file creation — a common gap in information protection programmes.
- The combination of AIP label inheritance, conditional access rules, and user-attributed watermarks gives security teams layered controls without requiring custom development.
- For organisations running sensitive workloads on Microsoft 365, NC Protect’s approach is worth evaluating alongside native Microsoft Purview Information Protection capabilities to understand where gaps remain.