Microsoft Purview Best Practices
Microsoft Purview is a solution that helps organizations manage data and compliance. It also uses AI to classify data, monitor compliance, and identify risks. Key features include data discovery, classification, governence, retention, compliance management, encryption, and access controls. Purview ensures data security, prevents insider threats, and helps implement data loss prevention policies to meet compliance requirements. Hello everyone - This is just a short introduction, I am Dogan Colak. I have been working as an M365 Consultant for about 5 years, holding certifications such as MCT, SC-100, SC-200, SC-300, and MS-102, with a focus on Security & Compliance. This year, I am excited to share what I have learned with the Microsoft Technology Community. In the coming days, I will be publishing videos and articles based on the training agenda I have created. I will also share these articles on LinkedIn, so feel free to follow me there. I am always open to feedback and suggestions. See you soon!First look at the new Microsoft Purview portal
I've recently got access to the new Microsoft Purview portal home page and I'm liking the change. Here's the changes that I've noticed so far. The New Purview Look With the recent update, the Microsoft Purview portal now integrates both Microsoft Purview for Microsoft 365 and the Microsoft Purview portal. This allows you to label and manage data across multiple cloud services like AWS, Snowflake, and Microsoft Azure, all from a single, unified interface. The Combined Portal Upon logging in, the portal greets you with a dashboard where you can select the Purview solution you need. This streamlined approach makes navigating between different solutions seamless and efficient. Enhanced Information Protection One of the significant improvements is the grouping of classifiers with sensitivity labels under the Information Protection solution. Previously, these were part of a separate Data Classification section. This consolidation simplifies data protection management, ensuring that you can easily apply and manage sensitivity labels and classifiers together. (New look) (Old dashboard look) Related Solutions The portal also highlights related solutions to enhance your chosen Purview tool. For instance, when selecting Insider Risk Management, the portal suggests complementary solutions such as: Communication Compliance Information Barriers Data Loss Prevention This feature ensures that you have a comprehensive set of tools to address various aspects of data security and compliance. Knowledge Center The Knowledge Center within the portal is a welcome change. It provides access to documentation, videos, and blogs that offer detailed insights into using the Purview solutions effectively. Whether you're looking to deepen your understanding or troubleshoot an issue, the Knowledge Center is your go-to resource. Visual Enhancements The portal’s updated interface is visually appealing, with grouping of related solutions makes navigating through the options more intuitive. Each section is clearly defined, providing a better user experience.
Auto Labeling Policy
Currently running into an issue with auto labeling policy. I have created a label specifically to be only applied to about 20 or so users who have access to a confidential file on SharePoint site. When creating the above policy, I get the following error in the attached screenshot. I do have access to this SharePoint site, and I am a SharePoint admin. Has anyone run into this issue?
Are MS Purview Data connectors subject to Exchange journaling?
We've setup the MS Instant Bloomberg Purview connector and successfully ingested messages into users mailboxes, however our expectation was that these would be journaled like every other record that traverses or is hosted in Exchange, however we don't see these being transmitted to the journalling target. In fact, from the Exchange side, there's no record of activity related to these messages at all (message tracking for instance). Is this by design?New Blog | Keep Microsoft Teams meetings compliant with Communication Compliance
Across Microsoft Teams, Outlook, and third-party apps like Instant Bloomberg, Microsoft Purview Communication Compliance provides the tools to help organizations detect regulatory (e.g. SEC or FINRA) and business conduct compliance violations, such as sensitive or confidential information, harassing or threatening language, and sharing of adult content. Built with privacy by design, usernames are pseudonymized by default, role-based access controls are built in, investigators are opted in by an admin, and audit logs are in place to help ensure user-level privacy. We continue to invest in Communication Compliance and Microsoft Teams integrations to ensure compliant collaboration, including our existing capabilities like the ability to detect regulatory compliance or business conduct violations in a Teams chat, channel, and more. Read the full blog here: Microsoft Teams meetings compliant with Communication ComplianceRegulatory and Compliance Headaches?
Are regulatory and compliance requirements a source of frustration, stress, or uncertainty in your organization? Did you know that Microsoft has a product called Microsoft Compliance Manager (MSCM) that can help alleviate the stress, uncertainty and most importantly risk to your organization? The wait is over! Be a part of the movement that is MSCM and help guide its evolution. Your direct input and feedback is valuable to our teams here at Microsoft. A simple 10-minute survey, click here, can get you started down the road to better regulatory and compliance preparedness! It’s free for 90 days to all E3 and E5 customers, so what are you waiting for! Should you have any questions please reach out to mipcompcxe@microsoft.com. Also don’t forget to tell your teams about the recently published Microsoft Compliance Manager Ninja Training and the free 90 day trial for all customers!
How the Teams Report a Concern Feature Works
The Report a concern option is available in Teams personal and group chats when enabled in a messaging policy and the organization uses communication compliance policies. Microsoft creates a communication compliance policy automatically to process messages reported by users. The investigation process follows the same flow as for other communication compliance policies, even if the messages might vary a tad in terms of their content because it’s a very subjective decision by a user to report content. Overall, a nice feature to have. https://office365itpros.com/2023/01/05/report-a-concern-teams/
