Scottish Summit - Sensitivity labels deep dive
Download as PPTX, PDF1 like133 views
The document outlines features and strategies for Microsoft Information Protection, focusing on labeling for documents and emails across various environments. Key points include encryption, rights management, data loss prevention, and integration with Microsoft 365 services. It also highlights roadmap items and compliance measures, including support for auto-labeling and auditing in Office apps.
Scottish Summit - Sensitivity labels deep dive
- 1. #ScottishSummit2021 A l b e r t H o i t i n g h D e e p - d i v e l a b e l i n g D e n n y – S a t - 1 2 : 0 0 G M T
- 2. Our Sponsors
- 5. • Detect | Classify | Protect | Monitor • Documents, e-mails, containers, data and non-Microsoft cloud-applications • Protection • Encryption, rights management • Privacy, sharing and device access • Visual markings • Insights Unified labeling/sensitivity labels
- 7. • Protect | non-protect • Encryption & rights management • Restrict actions (printing, forwarding, etc.) • Internal/external • Users/groups • Data loss prevention • Windows, macOS, iOS, Android • Office and Office Online Documents and e-mails
- 8. • Azure key (tenant key!) • Bring your own key (BYOK) • Hold your own key (HYOK) – deprecated (AIP only) • Double Key Encryption, please note that this limits: • Transport rules including anti-malware and spam that require visibility into the attachment • Microsoft Delve • eDiscovery • Content search and indexing • Office Web Apps including coauthoring functionality Encryption https://docs.microsoft.com/en-us/azure/information-protection/plan-implement-tenant-key
- 9. • Version 1.x | Version 2.x | Office integrated • Version 2.x vs. Office integrated: • Label inheritance • Scanner for on-premises • Information bar in Office • File Explorer & viewer • HYOK and Double Key support • Track & trace document • And more….. • Many items on the Microsoft roadmap Clients https://docs.microsoft.com/en-us/azure/information-protection/rms-client/use-client
- 11. • Exchange Online, SharePoint Online and OneDrive for Business • Simulation mode, active mode Auto-classification @ rest https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically
- 12. • Compliance Center and Azure Information Protection portal • Compliance Center will become default Dashboarding
- 14. Container based
- 15. • Microsoft 365 Groups | Microsoft Teams | SharePoint Online • External access, sharing • Azure AD Conditional Access • No “default label” for documents • Specific label policy option Labels on a higher level
- 16. Labels on a higher level
- 18. Structured data
- 19. • PowerBI integration • Label added on export/download • Azure Purview • SQL columns, Azure Blob storage Structured data
- 23. • On-premises • Azure IP Scanner • SharePoint on-premises • NAS, file-shares • DLP (preview) • Microsoft Cloud App Security • Connected apps Other locations
- 24. Other locations
- 27. 65880 - Exact Data Match will support data configuration 68876 - Exact Data Match to support improved auditability 68881 - Exact Data Match to support Auto-labeling 68882 - Exact Data Match to support notifications for data upload status through alert policies 68908 - Office 365 Advanced Message Encryption - Email revocation by end user 68913 - Co-authoring in MIP labeled protected files (Preview) 68916 - Microsoft Information Protection: Copy and edit built-in info types and other improvements 70542 - Auditing and Analytics in Office apps 70594 - Granular conditional access policies via “Sensitivity Labels” for SharePoint Online sites 70600 - AIP client and scanner data available in Audit and Activity explorer Roadmap items Q1 2021 Government cloud items excluded https://www.microsoft.com/en-us/microsoft- 365/roadmap?filters=Microsoft%20Information%20Protection%2CIn%20development