Breakdown of Microsoft Purview Solutions
Download as PPTX, PDF0 likes4,755 views
Drew Madelung presented on Microsoft Purview solutions at 365EduCon Seattle 2023. Purview is a set of solutions that help organizations govern and protect data across multi-cloud environments while meeting compliance requirements. It brings together solutions for understanding data, safeguarding it wherever it lives, and improving risk and compliance posture. Madelung demonstrated Purview's capabilities for classification, information protection, insider risk management, data loss prevention, records management, eDiscovery, auditing, and more. He advocated adopting Purview to comprehensively govern data using an incremental crawl-walk-run strategy.
Breakdown of Microsoft Purview Solutions
- 1. 365EduCon Seattle – 2023 Drew Madelung Breakdown of Microsoft Purview Solutions
- 2. Drew Madelung Email : drew.madelung@protiviti.com Twitter : @dmadelung Website: drewmadelung.com Associate Director – M365 Cloud Applications
- 3. What is Microsoft Purview Safeguarding your data Improve risk and compliance Breakdown of Microsoft Purview Solutions 365EduCon Seattle 2023 #365EduCon Understand & govern your data Demos on Demos
- 4. Data usage is evolving and complex, moving outside of the traditional borders of business OS OS
- 5. 93% of data within an organization is dark Year over year, the amount of data available doubles OS OS Organizations lack visibility into their data
- 6. OS OS The landscape is fragmented, creating risks
- 7. We live in a hybrid technology environment of organizations are multi-cloud 90% find it hard to manage fragmented compliance and risk related solutions 80% 80% of decision makers have purchased multiple products to meet compliance and data- protection needs
- 8. Microsoft Purview Microsoft Purview is a comprehensive set of solutions which help organizations govern and protect data across their multi-cloud, multi-platform data environment, while meeting the compliance requirements they are subject to.
- 9. Purview brings together solutions
- 10. Purview branding simplification Azure Purview portal Microsoft Purview Governance Portal Azure Purview Data Map Microsoft Purview Data Map Azure Purview Data Catalog Microsoft Purview Data Catalog Azure Purview Data Insights Microsoft Purview Data Estate Insights Microsoft 365 compliance center Microsoft Purview Compliance Portal Microsoft Information Governance Microsoft Purview Data Lifecycle Management Records Management in Microsoft 365 Microsoft Purview Records Management Microsoft Information Protection Microsoft Purview Information Protection Office 365 Data Loss Prevention Microsoft Purview Data Loss Prevention Insider Risk Management Microsoft Purview Insider Risk Management Communication Compliance Microsoft Purview Communication Compliance Compliance Manager Microsoft Purview Compliance Manager Core eDiscovery in Microsoft 365 Microsoft Purview eDiscovery (Standard) Advanced eDiscovery in Microsoft 365 Microsoft Purview eDiscovery (Premium) Basic Audit in Microsoft 365 Microsoft Purview Audit (Standard) Advanced Audit in Microsoft 365 Microsoft Purview Audit (Premium)
- 11. Microsoft Purview Understand & govern data Manage visibility and governance of data assets across your environment Safeguard data, wherever it lives Protect sensitive data across clouds, apps, and devices Improve risk & compliance posture Identify data risks and manage regulatory compliance requirements Microsoft ecosystem Support for multi-cloud, hybrid, SaaS data | Third-party/partner ecosystem
- 12. Classification - General Safeguarding your data
- 13. Protect your data where it lives • Understand your data landscape and identify data across environments Know your data • Classify data with labels, apply protection and markings Protect your data • Prevent unauthorized or accidental sharing of sensitive data Prevent data loss • Automatically retain, delete, and store data and records in a compliant manner Govern data loss
- 14. Do you have a strategy? Do you know where your business critical and sensitive data resides and what is being done with it? Do you have control of this data as it travels inside and outside of your organization? Are you using multiple solutions to classify, label, and protect this data?
- 15. Top data security risks Data security incidents are widespread 83% of organizations experience more than one data breach in their lifetime1 Malicious insiders account for 20% of data breaches, adding to costs $4.18M Average cost of data breach with a malicious insider2 Organizations are struggling with a fragmented solution landscape 80% of decision makers purchased multiple products to meet compliance and data protection needs3
- 16. Organizations need to Protect sensitive data wherever it lives throughout its lifecycle Understand user activity context around the data and identify risks Prevent data from unauthorized use across apps, services, and devices
- 17. Keys to safeguarding your data Manage insider risks Protect sensitive data Prevent data loss
- 18. • Discover and classify data at scale using automation and machine-learning • Safeguard data throughout its lifecycle with labeling and encryption built into productivity tools • Extend the protection experience across environments to protect data wherever it lives Purview Information Protection
- 19. Purview Insider Risk Management • Protect user trust and build a holistic insider risk program with pseudonymization and strong privacy controls • Identify hidden risks with hundreds of built- in machine-learning models and indicators, requiring no endpoint agents. • Expedite mitigation with enriched investigations and adaptive protection that enforce controls dynamically.
- 20. Purview Data Loss Prevention • Cloud native with built-in protection in Microsoft 365 apps, services, and windows endpoints - no on-premise infrastructure or agents needed • Balance protection and productivity with granular policy controls and manage DLP policies all workloads from a single location • Leverage classification and user activity insights to better inform DLP polices and benefit from an integrated incident management
- 21. Safeguarding data examples ` Block an email or document from being shared externally Utilize Exchange, SharePoint, and OneDrive DLP policies Stopping sensitive data sharing in Teams internally and externally Utilize Teams DLP policies, Sensitivity labels for containers, and for files with encryption Prevent a file from being copied from an endpoint to a non-approved location Utilize Endpoint DLP for Windows and macOS
- 22. Demo
- 23. Classification - General Improve risk & compliance
- 24. Do you have a strategy for retaining and managing regulatory and business critical data? Do you know what your regulatory requirements are for your organization? Do you know where the data resides requiring retention? Do you have established guidelines on the information lifecycle of this data from creation thru disposal?
- 25. Purview Data Lifecycle Management • Retain or delete data and manage records where users collaborate to manage risk and prevent productivity loss • Demonstrate compliance with label analytics insights, defensible disposal, and rich audit trails • Manage non-Microsoft data import with pre-built data connectors*
- 26. Purview Records Management • Mange regulatory, legal, and business- critical records with records labels and regular disposition. • Manage your retention requirements with a file plan. • Start different retention periods when an event occurs with event-based retention. • Set specific permissions for records manager functions and review, validate, and export disposition details.
- 27. What is a “Record” • Restrictions are placed on the items in terms of what actions are allowed or blocked
- 28. Keeping data longer than needed or required… • imposes significant costs and risks for your organization Removing data sooner than you should… • may cause undue hardship if it’s required for business reasons • may make you non-compliant with policies and government regulations Tools to manage retention and policy-based deletion are needed to balance these needs in a uniform way Why Data Retention & Deletion is important
- 29. Govern your data
- 30. Demo
- 31. Purview Communication Compliance • Intelligent customizable playbooks detect violations across Teams, Exchange, Engage, and third-party content to detect violations such as confidential information, harassing, threatening language, or adult content • Flexible remediation workflows enable quick action on violations, like remove incriminating messages on Teams • Identify and investigate communications risks while maintaining end-user privacy
- 32. Purview eDiscovery • Standard and premium offerings • Preserve content by custodian, send hold notifications, and track acknowledgements • Review and manage static sets of documents within a case, that can be independently searched, analyzed, shared, and acted upon • Near duplicate detection, email threading, themes, and ML models to identify potential high value content and make the review process more efficient
- 33. Purview Audit • Tap into additional events that are important for forensic investigations (e.g. mail items accessed, mail send, user search) and enabled by default • Preserve audit logs for up to a year, with option for 10-year retention add-on (premium) • Standard audit = 90 day retention and no mailitemaccessed activity • High bandwidth access to data with ~2x the baseline and ability to export via PowerShell • Search-UnifiedAuditLog
- 34. Purview Data Connectors • One catalog for all connectors built by Microsoft and partners (TeleMessage,Veritas,17a-4,CellTrust) in one place • Simplified deployment and monitoring with few clicks to setup data import for most connectors* • 73 built-in connectors including Bloomberg Message, Slack eDiscovery, Zoom Meetings, Webex, Twitter etc. • Can perform eDiscovery, holds, retention, and more
- 35. Purview Compliance Manager • Manage end-to-end compliance from easy onboarding to control implementation • Configure out of the box (pre-built) assessments to meet your requirements across all assets • Simplify compliance with continuous assessments, automated control mapping, and a compliance score • Detailed step-by-step guidance on improvement actions
- 37. Demo
- 38. Classification - General Understand & govern your data
- 39. Graph describes the data assets and their relationships across your data estate and run scans with built in classifiers to label. Purview Data within Azure Data Map Data Catalog Data Estate Insights Make data discoverable with search, browsing, and curation along with data lineage visualization. Gain an understanding of your data management activities such as health, status, and the whole data estate together.
- 40. 163 zettabytes of data a year will be created by 2025 Cost of compliance continues to increase year over year 200+ updates per day from 750 regulatory bodies Challenges
- 41. Adopt a comprehensive data governance strategy Leverage the shared responsibility model Use integrated tools that span end to end scenarios 163 zettabytes of data a year will be created by 2025 200+ updates per day from 750 regulatory bodies Cost of compliance continues to increase year over year Strategies
- 42. Where and how to start • Learn about the technical capabilities within the Purview toolkit • Identify REAL scenarios or challenges that Purview can solve • Assign Purview ownership by solution and get permissions setup • Identify competing solutions with a solution rationalization • Build a Purview roadmap aligned to your overall product, M365, or security roadmap
- 43. Allows you to start without having it all figured out Allows for incremental improvements Eases information workers into the world of protection and retention Some protection and retention is better than nothing Utilizing a crawl-walk-run strategy
- 45. Questions? Email: drew.madelung@protiviti.com Twitter: @dmadelung Website: drewmadelung.com Slides: http://bit.ly/DrewSlides