Notes from the field Microsoft Information Protection
summary
Shows that Microsoft’s protection is built on a single data classification layer (trainable classifiers, exact data match, sensitivity info types) feeding three pillars: labeling/encryption, DLP, and records management; labels now live in the M365 admin portal. Demoed dashboards with counts (5,000 labels applied; only ~40 confidential), Endpoint DLP (originally Defender engine but now not required) that blocks uploads to specific browsers/domains, and Cloud App Security policies to revoke external links. Recommends license check (EMS E3 baseline, E5 for advanced) and start with a few flexible labels.
AI-written summary · about
chapters (20)
- 0:00Introduction and speaker intro
- 2:28Why information protection matters
- 6:39Microsoft’s labeling evolution
- 8:51Data classification layer explained
- 17:27Architecture and integration overview
- 20:12Common customer use cases
- 21:42Licensing and implementation roadmap
- 24:27What a label really does
- 27:14Effective labeling structure
- 32:54End-user labeling experience
- 34:07Monitoring and reporting tools
- 36:14Activity explorer and insights
- 38:43Automatic classification and recommendations
- 40:11Labeling in Outlook and Teams
- 42:00Cloud App Security integration
- 44:15Sensitivity labels for groups
- 45:19New labeling scopes and Azure Purview
- 47:05Web apps and Windows Information Protection
- 47:50Defender for Endpoint integration
- 48:56Key takeaways and next steps
related talks
17mExtend data security into multi-cloud apps and solutions
48mData Loss Prevention and Azure Information Protection...
21mHow Microsoft IT "Does" Data Protection
23mSecure Microsoft 365 Copilot and agents against data loss
43mUnlocking Data Security with Microsoft Purview
10mData Security & AI Adoption: A Leader’s Perspective (Customer Spotlight)
01h 59mDeep Dive Workshop – Data Security and Data Protection
26mCopilot trust & safety: Controls to manage AI risk