InSpark
Jasper Oosterveld
Modern Workplace Consultant, InSpark, The Netherlands
Protect and govern your sensitive
data with Microsoft Purview in
Microsoft Teams

InSpark
OUR SPONSORS

InSpark
Welcome 
00 Introductie
• Modern Workplace Consultant @ InSpark
• Microsoft MVP
• Amsterdam
• Married @ two kids
• @jappie1981
• /in/jasperoosterveld
About me

InSpark
Wie gebruikt er Information Protection?
Wie gebruikt er DLP
Mentimeter

InSpark
Microsoft Teams

InSpark
Key features
01 Microsoft Teams
Chat Meet Call Collaborate

InSpark
Business value
01 Microsoft Teams
Employee
empowerment
Integrated
experience
Increase
productivity

InSpark
Challenges
01 Microsoft Teams
Explosion Management
Staying
compliant
New way of
working
Guest
access

InSpark
My recommendation
01 Microsoft Teams
Governance Change
management
Data security
Device
management
Identity
management

InSpark
Data Security

InSpark
Challenge with Data Security
02 Data Security
Unfragmented
data
Sensitive
Information
Types
Information
security
policy

InSpark
Risks
02 Data Security
Fines Reputational
damage
Loss of trust

InSpark
Information
protection policy

InSpark
Setup a classification policy
02 Data Security
• Company data
specially prepared
and approved for
public use.
• There is no breach
of confidentiality.
• Company data
intended for
general use within
the organization.
• There is a potential
breach of
confidentiality with
external sharing.
• Company
information
specifically intended
for internal
employees or
specific individuals
or organizations.
• Information is only
shared on basis of
confidentiality.
• Breach of
confidentiality
causes serious harm
to the organization.
Public Internal Confidential

InSpark
Setup a security policy
02 Data Security
Public
• Accessible to all employees or authorized individuals.
• No security.
• Accessible to all employees.
• Data is protected.
• Accessible for all employees (internal) or authorized individuals or organizations (external).
• Data is protected.
Confidential
Internal

InSpark
Setup a security policy
02 Data Security
• R&D information is specifically intended for R&D employees.
• Data is protected for all R&D employees
R&D
• HR information is specifically intended for HR employees.
• Data is protected for all HR employees
HR

InSpark
Sensitive
Information types

InSpark
Out-of-the-box Organizational
Examples
02 Data Security
Social Security number
Credit card number
Passport number
Drivers license number
IBAN
Intellectual Property
Employee information
Customer information
Mergers & Acquisitions
Organizational
Intellectual Property
Employee information
Customer information
Mergers & Acquisitions

InSpark
Identify Sensitive Information Types
02 Data Security
Stakeholders Purview
inspiration
Law &
regulations
Impact data
loss

InSpark
Unfragmented data

InSpark
Unfragmented data
01 Microsoft Teams
Type Location
1:1 chat & group chat Exchange Online (User mailbox)
Channel messages Exchange Online (M365 group mailbox)
Voicemail, call summary, and contacts Exchange Online (User mailbox)
Channel meeting recordings & transcript SharePoint Online
Chat meeting recordings & transcript OneDrive for Business
Calendar data Exchange Online
Files shared in chat OneDrive for Business
Files shared in channels SharePoint Online
Notes private meetings OneDrive for Business
Notes channel meetings SharePoint Online
Whiteboard OneDrive for Business
Tasks Tasks for Planner & To Do
Source:
https://blog.quest.com/microsoft-teams-meeting-content-where-is-it-stored/
https://www.syscloud.com/saas-data-protection-center/microsoft-365/teams-data-storage/

InSpark
Microsoft Purview

InSpark
Microsoft Purview
03 Microsoft Purview

InSpark
Analyze your
current situation

InSpark
Analyze current situation
03 Microsoft Purview
Compliance
Manager

InSpark
Compliance Manager
03 Microsoft Purview

InSpark
Analyze current situation
03 Microsoft Purview
Content
Explorer
Compliance
Manager

InSpark
Content Explorer
03 Microsoft Purview

InSpark
Analyze current situation
03 Microsoft Purview
Content
Search
Content
Explorer
Compliance
Manager
Content
Explorer
Compliance
Manager

InSpark
Content Search
03 Microsoft Purview

InSpark
Analyze current situation
03 Microsoft Purview
Content
Search
Content
Explorer
Compliance
Manager
DLP & Activity
explorer

InSpark
DLP & Activity Explorer
03 Microsoft Purview

InSpark
Classify & protect
with Purview
Information
Protection

InSpark
Scope
04 Microsoft Purview Information Protection
Items & e-mail
Microsoft 365
Group
Purview Data
Map
Meetings

InSpark
Sensitivity labels
04 Microsoft Purview Information Protection
Encryption Location
independent
Safe & controlled
meetings

InSpark
Applying sensitivity labels
04 Microsoft Purview Information Protection
Manual Automatically

InSpark
External Collaboration
Scenario: Manage external guests &
sharing
04 Microsoft Purview Information Protection
• Jane is the manager of the project
department of Hammond Robotics.
• Hammond Robotics distinguish different
type of projects.
• Each project has unique requirements for
external invites & sharing.

InSpark
Demo &
solution

InSpark
Owners can change the label.
Use the
You can connect these sensitivity labels to your own provisioning solution
(PNP).
Tips & tricks
04 Microsoft Purview Information Protection

InSpark
Mergers & acquisitions
Scenario: Protect your sensitive content
04 Microsoft Purview Information Protection
• Alex is part of the Hammond Robotics
Mergers & acquisitions team.
• He is currently part of a merger with
codename Project MRVN.
• All content related to this project needs
to be automatically protected.

InSpark
Demo &
solution

InSpark
AIP unified labeling client is in maintenance mode.
Review the current options & limitations (see resources slide).
AIP unified labeling client (could) cause an issue with build-in labels.
Encrypted content only accessible with Microsoft related accounts.
Tips & tricks
04 Microsoft Purview Information Protection

InSpark
aaa

InSpark
Board Meetings
Scenario: Protect your Meetings
04 Microsoft Purview Information Protection
• Megan is part of the Hammond Robotics
Board & they have monthly meetings.
• The content, discussed during the
meeting, is highly sensitive and should
not be accessible for unauthorized
people.
• Megan is looking for a secure solution for
the monthly board meetings.

InSpark
Demo &
solution

InSpark
AIP unified labeling client is in maintenance mode.
Review the current options & limitations (see resources slide).
AIP unified labeling client (could) cause an issue with build-in labels.
Tips & tricks
04 Microsoft Purview Information Protection

InSpark
Conditional
access
Privacy
setting
Guest
access
External
sharing
Beveiligen van
externe toegang
tot gevoelige
informatie.

InSpark
Prevent a data leak
with Purview Data
Loss Prevention

InSpark
Identificeren Monitoren Beschermen

InSpark
Bewust delen Onbewust delen

InSpark
Megan wants to show a warning when employees post an IBAN number in a chat message.
She wants to prevent the external sharing of files with an IBAN number.

InSpark
DLP is not 100% failproof.
Test the SIT with real world content related to the DLP policy.

InSpark
Start with a pilot
One use-case with one department
Test thoroughly
Review test results & redesign solution (optional)
Extend to other departments
Provide training & support materials

InSpark
Mergers & acquisitions
Scenario: Protect your sensitive content
04 Microsoft Purview Information Protection
• Alex is part of the Hammond Robotics
Mergers & acquisitions team.
• He is currently part of a merger with
codename Project MRVN.
• All content related to this project needs
to be automatically protected.

InSpark
Demo &
solution

InSpark
Split up EXO
Split up SIT in the DLP rule (Goudappel)
Tips & tricks
04 Microsoft Purview Information Protection

InSpark
Microsoft Purview Services & Licenses
Learn about sensitivity labels - Microsoft 365 Compliance | Microsoft Docs
Automatically apply a sensitivity label to content in Microsoft 365 - Microsoft 365 Compliance | Microsoft Docs
Overview of data loss prevention - Microsoft 365 Compliance | Microsoft Docs
Learn about retention policies & labels to automatically retain or delete content - Microsoft 365 Compliance | Microsoft
Docs

InSpark
THANK YOU listening
Thank you!

InSpark
We value your feedback, please use the run.events app
to leave your feedback for the sessions
THANK YOU!

InSpark