The session will address the different ways users can be authenticated in SharePoint: Active Directory, forms based authentication, claims based authentication, and anonymous access. I’ll discuss when to implement each method and what the best practices are for permission application and management. I’ll address when to use each method and when to implement other concepts like web application policies, extending web applications, laying out a decentralized security model. To abide by this best practice, I’ll discuss how the farm’s taxonomy may need to be restructured. This is where administrators need to develop and enforce a governance plan around the farm’s taxonomy. Thinking about where lists, items, and groups need to be in a SharePoint farm will ensure the right eyes are seeing the right content- and nothing more. The goal of the session is to ensure SharePoint content is secure and permissions do not get out of control. I’ll take a deep dive into what is available out of the box and what you can customize. Finally, I’ll also demonstrate how to utilize SharePoint’s auditing functionality to track who is changing permissions. The audit reports will be used to ensure the admins changing permissions are taking the correct action. When administrators know all their options around security, internal governance plans can be developed to safeguard their farm’s content.