Showing posts with label Purview. Show all posts
Showing posts with label Purview. Show all posts

Monday, 20 January 2025

Microsoft Purview Summary

Purview covers:

  • Information Protection - Discover, Classify & Protect data such as documents and emails. Tagging and AIP labels can be applied manually or automatically.  Lots of built-in pattern classifiers such as credit cards and PII data are Sensitive Information Type (SIT), which uses expressions like RegEx to identify types of information example [A-Z]{2}[0-9]{6}[A-D]{1} for a UK National Insurance Number.  The dictionary allows one to add words to customise discovery and automatic tagging and labelling for each organisation and industry.  Can also build custom SITs based on specific patterns.  Activity Explorer and Content Explorer help understand the data information architecture and usage.  
  • Data Loss Prevention (DLP) - Block unauthorised actions
  • Inside Risk Prevention (IRP) - Identify risky behaviour inside the org
  • Adaptive protection - adjusts policies like DLP policies based on the risk identified using ML/AI.  Applies stricter measures as risks are identified.
Microsoft End-Point/device Protection: Microsoft Purview allows a company to create end-device DLP policies, push them to all client devices, and protect data within the company.

Notes on Data Protection:

  • Uses SharePoint Information Rights Management for SharePoint.
  • Used to ensure your data meets criteria to ensure standards compliance such as HIPPA, BIM, GxP.
  • Retention labels are used to track and manage sensitive data.

Sunday, 6 August 2023

Microsoft Purview DLP End-device Policies

Overview: Microsoft Purview allows a company to create end-device DLP policies and push them to all client devices and protect data within the company.

Create policies. It takes up to 2 hours to update end-client devices and show them on the "Device Monitoring" dashboard.  Client Analyser tool - check endpoint client devices are getting the latest policies, and can speed it up.  The device obviously has to be online to get the latest update.