SharePoint/OneDrive Application DLP - MIP or MCAS policies?

%3CLINGO-SUB%20id%3D%22lingo-sub-2731798%22%20slang%3D%22en-US%22%3ESharePoint%2FOneDrive%20Application%20DLP%20-%20MIP%20or%20MCAS%20policies%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2731798%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20configuring%20DLP%20policies%20for%20SharePoint%2FOneDrive%2C%20where%20is%20the%20recommended%20place%20to%20configure%20this%2C%20the%20Compliance%20portal%2FMCAS%20portal%20or%20both%3F%20The%20compliance%20portal%20is%20providing%20actions%20of%20block%2Fencrypt%2C%20whilst%20MCAS%20there%20are%20additional%20governance%20actions%20such%20as%20make%20private%2C%20remove%20external%20users%20etc.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMight%20we%20expect%20some%20governance%20features%20coming%20across%20into%20the%20compliance%20portal%20in%20the%20future%20or%20sync%20for%20first-party%20locations%20to%20reduce%20the%20number%20of%20troubleshooting%20vectors%20(Check%20this%20portal%2C%20now%20check%20this%20portal)%3F%20I%20could%20be%20approaching%20this%20completely%20wrong%2C%20the%20lines%20do%20seem%20quite%20blurry%20with%20first-party%20applications.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20noticed%20that%20MIP%20now%20has%20auto-labelling%20configured%20through%20the%20compliance%20portal%20as%20another%20option%20like%20MCAS%20we%20can%20apply%20to%20SharePoint%20and%20OneDrive.%20I%20haven't%20seen%20the%20recent%20limitations%20in%20MCAS%2C%20but%20the%20compliance%20centre%20appears%20to%20have%20recently%20improved%20throughput%20for%20this.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETrying%20to%20find%20an%20answer%20on%20this%20one%2C%20I%20found%20this%20blog%20post%20with%20an%20answer%20of%20%22it%20depends%2C%22%20making%20conversations%20about%20this%20a%20little%20bit%20harder%20without%20hard%20clarification%20however%20it's%20the%20closest%20answer%20on%20the%20topic%20I%20have%20found.%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fsecurity-compliance-and-identity%2Fmcas-data-protection-blog-series-do-i-use-mcas-or-mip%2Fba-p%2F2011039%22%20target%3D%22_blank%22%3EMCAS%20Data%20Protection%20Blog%20Series%3A%20Do%20I%20use%20MCAS%20or%20MIP%3F%20-%20Microsoft%20Tech%20Community.%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EKeen%20to%20hear%20how%20others%20are%20putting%20this%20into%20practice.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2731798%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EData%20Loss%20Prevention%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Cloud%20App%20Security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2731847%22%20slang%3D%22en-US%22%3ERe%3A%20SharePoint%2FOneDrive%20Application%20DLP%20-%20MIP%20or%20MCAS%20policies%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2731847%22%20slang%3D%22en-US%22%3E%3CP%3EI%20think%20for%20SharePoint%20and%20One%20Drive%20the%20Compliance%20portal%20is%20the%20best%20for%20configuring%20DLP%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi All,

 

When configuring DLP policies for SharePoint/OneDrive, where is the recommended place to configure this, the Compliance portal/MCAS portal or both? The compliance portal is providing actions of block/encrypt, whilst MCAS there are additional governance actions such as make private, remove external users etc. 

 

Might we expect some governance features coming across into the compliance portal in the future or sync for first-party locations to reduce the number of troubleshooting vectors (Check this portal, now check this portal)? I could be approaching this completely wrong, the lines do seem quite blurry with first-party applications.

 

I've noticed that MIP now has auto-labelling configured through the compliance portal as another option like MCAS we can apply to SharePoint and OneDrive. I haven't seen the recent limitations in MCAS, but the compliance centre appears to have recently improved throughput for this. 

 

Trying to find an answer on this one, I found this blog post with an answer of "it depends," making conversations about this a little bit harder without hard clarification however it's the closest answer on the topic I have found. MCAS Data Protection Blog Series: Do I use MCAS or MIP? - Microsoft Tech Community.

 

Keen to hear how others are putting this into practice. 

 

Thanks!

1 Reply

I think for SharePoint and One Drive the Compliance portal is the best for configuring DLP