MSFT guidance: should customer label all content?

%3CLINGO-SUB%20id%3D%22lingo-sub-1582070%22%20slang%3D%22en-US%22%3EMSFT%20guidance%3A%20should%20customer%20label%20all%20content%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1582070%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%20thanks%20for%20the%20opportunity%20to%20ask%20questions!%26nbsp%3B%20Does%20msft%20have%20an%20opinion%20or%20suggest%20guidance%20on%20whether%20customers%20should%20label%20*all*%20content%2C%20even%20if%20it's%20not%20sensitive%20and%20won't%20require%20protection%3F%26nbsp%3B%20Personal%2C%20General%2C%20etc.%3F%26nbsp%3B%20Or%20-%20is%20it%20only%20sensitive%20content%20that%20requires%20protection%20that%20should%20be%20labeled%3F%26nbsp%3B%20I've%20heard%20guidance%20that%20auto-labeling%20within%20SPO%20should%20be%20reserved%20for%20sensitive%20content%20only%2C%20however%2C%20I've%20also%20heard%20that%20all%20content%20should%20be%20labeled.%26nbsp%3B%20Should%20a%20customer%20lean%20more%20towards%20sensitive%20information%20types%20and%20DLP%20vs%20a%20broad%20labeling%20strategy%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1582118%22%20slang%3D%22en-US%22%3ERe%3A%20MSFT%20guidance%3A%20should%20customer%20label%20all%20content%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1582118%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F205346%22%20target%3D%22_blank%22%3E%40David%20Billedo%3C%2FA%3E%26nbsp%3BThank%20you%20for%20your%20question.%20The%20best%20practice%20is%20to%20apply%20labels%20to%20all%20content%20and%20to%20use%20different%20security%20measures%20for%20each%20label%20(encryption%20%2F%20DLP)%20accordingly%20based%20o%20the%20activity.%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20example%2C%20use%20%22General%22%20as%20your%20default%20label%20for%20everything%20moving%20forward%20unless%20auto-labeling%20kicks%20in%20or%20user%20apply%20a%20different%20label%20manually.%3C%2FP%3E%0A%3CP%3EService%20based%20auto-labeling%20is%20designed%20to%20apply%20labels%20for%20your%20crown%20jewels%20in%20specific%20locations%20based%20on%20content.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Hi all, thanks for the opportunity to ask questions!  Does msft have an opinion or suggest guidance on whether customers should label *all* content, even if it's not sensitive and won't require protection?  Personal, General, etc.?  Or - is it only sensitive content that requires protection that should be labeled?  I've heard guidance that auto-labeling within SPO should be reserved for sensitive content only, however, I've also heard that all content should be labeled.  Should a customer lean more towards sensitive information types and DLP vs a broad labeling strategy?

1 Reply

@David Billedo Thank you for your question. The best practice is to apply labels to all content and to use different security measures for each label (encryption / DLP) accordingly based o the activity. 

For example, use "General" as your default label for everything moving forward unless auto-labeling kicks in or user apply a different label manually.

Service based auto-labeling is designed to apply labels for your crown jewels in specific locations based on content.