Purview covers:
- Information Protection - Discover, Classify & Protect data such as documents and emails. Tagging and AIP labels can be applied manually or automatically. Lots of built-in pattern classifiers such as credit cards and PII data are Sensitive Information Type (SIT), which uses expressions like RegEx to identify types of information example [A-Z]{2}[0-9]{6}[A-D]{1} for a UK National Insurance Number. The dictionary allows one to add words to customise discovery and automatic tagging and labelling for each organisation and industry. Can also build custom SITs based on specific patterns. Activity Explorer and Content Explorer help understand the data information architecture and usage.
- Data Loss Prevention (DLP) - Block unauthorised actions
- Inside Risk Prevention (IRP) - Identify risky behaviour inside the org
- Adaptive protection - adjusts policies like DLP policies based on the risk identified using ML/AI. Applies stricter measures as risks are identified.
Microsoft End-Point/device Protection: Microsoft Purview allows a company to create end-device DLP policies, push them to all client devices, and protect data within the company.
Notes on Data Protection:
- Uses SharePoint Information Rights Management for SharePoint.
- Used to ensure your data meets criteria to ensure standards compliance such as HIPPA, BIM, GxP.
- Retention labels are used to track and manage sensitive data.