Breakdown to Microsoft Purview solutions

1. 365EduCon Seattle – 2023
Drew Madelung
Breakdown of
Microsoft Purview
Solutions

2. Drew Madelung
Email : drew.madelung@protiviti.com
Twitter : @dmadelung
Website: drewmadelung.com
Associate Director – M365 Cloud Applications

3. What is Microsoft Purview
Safeguarding your data
Improve risk and compliance
Breakdown of
Microsoft Purview
Solutions
365EduCon Seattle 2023
#365EduCon
Understand & govern your data
Demos on Demos

4. Data usage is evolving and complex,
moving outside of the traditional
borders of business
OS
OS

5. 93% of data within an
organization is dark
Year over year, the amount
of data available doubles
OS
OS
Organizations lack visibility into their data

6. OS
OS
The landscape is fragmented, creating risks

7. We live in a hybrid technology environment
of organizations
are multi-cloud
90%
find it hard to manage
fragmented
compliance and risk
related solutions
80%
80%
of decision makers have
purchased multiple
products to meet
compliance and data-
protection needs

8. Microsoft Purview
Microsoft Purview is a comprehensive set of solutions which help
organizations govern and protect data across their multi-cloud,
multi-platform data environment, while meeting the compliance
requirements they are subject to.

9. Purview brings together solutions

10. Purview branding simplification
Azure Purview portal Microsoft Purview Governance Portal
Azure Purview Data Map Microsoft Purview Data Map
Azure Purview Data Catalog Microsoft Purview Data Catalog
Azure Purview Data Insights Microsoft Purview Data Estate Insights
Microsoft 365 compliance center Microsoft Purview Compliance Portal
Microsoft Information Governance Microsoft Purview Data Lifecycle Management
Records Management in Microsoft 365 Microsoft Purview Records Management
Microsoft Information Protection Microsoft Purview Information Protection
Office 365 Data Loss Prevention Microsoft Purview Data Loss Prevention
Insider Risk Management Microsoft Purview Insider Risk Management
Communication Compliance Microsoft Purview Communication Compliance
Compliance Manager Microsoft Purview Compliance Manager
Core eDiscovery in Microsoft 365 Microsoft Purview eDiscovery (Standard)
Advanced eDiscovery in Microsoft 365 Microsoft Purview eDiscovery (Premium)
Basic Audit in Microsoft 365 Microsoft Purview Audit (Standard)
Advanced Audit in Microsoft 365 Microsoft Purview Audit (Premium)

11. Microsoft Purview
Understand & govern data
Manage visibility and governance of data
assets across your environment
Safeguard data,
wherever it lives
Protect sensitive data across
clouds, apps, and devices
Improve risk &
compliance posture
Identify data risks and manage
regulatory compliance requirements
Microsoft ecosystem
Support for multi-cloud, hybrid, SaaS data | Third-party/partner ecosystem

12. Classification - General
Safeguarding your data

13. Protect your data where it lives
• Understand your
data landscape and
identify data across
environments
Know your
data
• Classify data with
labels, apply
protection and
markings
Protect your
data • Prevent
unauthorized or
accidental sharing
of sensitive data
Prevent data
loss
• Automatically
retain, delete, and
store data and
records in a
compliant manner
Govern data
loss

14. Do you have a strategy?
Do you know where your business critical
and sensitive data resides and what is being
done with it?
Do you have control of this data as it travels
inside and outside of your organization?
Are you using multiple solutions to classify,
label, and protect this data?

15. Top data security risks
Data security
incidents are
widespread
83%
of organizations
experience more than
one data breach in their
lifetime1
Malicious insiders
account for 20% of
data breaches,
adding to costs
$4.18M
Average cost of
data breach with a
malicious insider2
Organizations
are struggling with
a fragmented
solution landscape
80%
of decision makers purchased
multiple products to meet
compliance and data
protection needs3

16. Organizations need to
Protect sensitive data wherever it lives throughout its lifecycle
Understand user activity context around the data and identify risks
Prevent data from unauthorized use across apps, services, and devices

17. Keys to safeguarding your data
Manage
insider risks
Protect
sensitive data
Prevent
data loss

18. • Discover and classify data at scale using
automation and machine-learning
• Safeguard data throughout its lifecycle
with labeling and encryption built into
productivity tools
• Extend the protection experience across
environments to protect data wherever it
lives
Purview Information Protection

19. Purview Insider Risk Management
• Protect user trust and build a holistic
insider risk program with pseudonymization
and strong privacy controls
• Identify hidden risks with hundreds of built-
in machine-learning models and indicators,
requiring no endpoint agents.
• Expedite mitigation with enriched
investigations and adaptive protection that
enforce controls dynamically.

20. Purview Data Loss Prevention
• Cloud native with built-in protection in
Microsoft 365 apps, services, and windows
endpoints - no on-premise infrastructure or
agents needed
• Balance protection and productivity with
granular policy controls and manage DLP
policies all workloads from a single location
• Leverage classification and user activity
insights to better inform DLP polices and
benefit from an integrated incident
management

21. Safeguarding data examples
`
Block an email or
document from being
shared externally
Utilize Exchange, SharePoint, and
OneDrive DLP policies
Stopping sensitive data
sharing in Teams
internally and externally
Utilize Teams DLP policies,
Sensitivity labels for
containers, and for files with
encryption
Prevent a file from being
copied from an endpoint
to a non-approved
location
Utilize Endpoint DLP for
Windows and macOS

22. Demo

23. Classification - General
Improve risk & compliance

24. Do you have a
strategy for retaining
and managing
regulatory and
business critical
data?
Do you know what your regulatory
requirements are for your organization?
Do you know where the data resides
requiring retention?
Do you have established guidelines on
the information lifecycle of this data
from creation thru disposal?

25. Purview Data Lifecycle Management
• Retain or delete data and manage records
where users collaborate to manage risk and
prevent productivity loss
• Demonstrate compliance with label
analytics
insights, defensible disposal, and rich audit
trails
• Manage non-Microsoft data import with
pre-built
data connectors*

26. Purview Records Management
• Mange regulatory, legal, and business-
critical records with records labels and
regular disposition.
• Manage your retention requirements with a
file plan.
• Start different retention periods when an
event occurs with event-based retention.
• Set specific permissions for records
manager functions and review, validate, and
export disposition details.

27. What is a “Record”
• Restrictions are placed on the items in terms of what actions are allowed or
blocked

28. Keeping data longer than needed or required…
• imposes significant costs and risks for your organization
Removing data sooner than you should…
• may cause undue hardship if it’s required for business reasons
• may make you non-compliant with policies and government regulations
Tools to manage retention and policy-based deletion are needed to balance these needs in a
uniform way
Why Data Retention & Deletion is important

29. Govern your data

30. Demo

31. Purview Communication Compliance
• Intelligent customizable playbooks detect
violations across Teams, Exchange, Engage, and
third-party content to detect violations such as
confidential information, harassing, threatening
language, or adult content
• Flexible remediation workflows enable quick
action on violations, like remove incriminating
messages on Teams
• Identify and investigate communications risks
while maintaining end-user privacy

32. Purview eDiscovery
• Standard and premium offerings
• Preserve content by custodian, send
hold notifications, and track
acknowledgements
• Review and manage static sets of
documents within a case, that can be
independently searched, analyzed,
shared, and acted upon
• Near duplicate detection, email
threading, themes, and ML models to
identify potential
high value content and make the review
process more efficient

33. Purview Audit
• Tap into additional events that are important for
forensic investigations (e.g. mail items accessed,
mail send, user search) and enabled by default
• Preserve audit logs for up to a year, with option
for 10-year retention add-on (premium)
• Standard audit = 90 day retention and no
mailitemaccessed activity
• High bandwidth access to data with ~2x the
baseline and ability to export via PowerShell
• Search-UnifiedAuditLog

34. Purview Data Connectors
• One catalog for all connectors built by
Microsoft and partners
(TeleMessage,Veritas,17a-4,CellTrust) in one
place
• Simplified deployment and monitoring with
few clicks to setup data import for most
connectors*
• 73 built-in connectors including Bloomberg
Message, Slack eDiscovery, Zoom Meetings,
Webex, Twitter etc.
• Can perform eDiscovery, holds, retention,
and more

35. Purview Compliance Manager
• Manage end-to-end compliance from easy
onboarding to control implementation
• Configure out of the box (pre-built)
assessments to meet your requirements
across all assets
• Simplify compliance with continuous
assessments, automated control mapping,
and a compliance score
• Detailed step-by-step guidance on
improvement actions

36. It’s all integrated

37. Demo

38. Classification - General
Understand & govern your data

39. Graph describes the data
assets and their
relationships across your
data estate and run scans
with built in classifiers to
label.
Purview Data within Azure
Data Map Data Catalog Data Estate Insights
Make data discoverable
with search, browsing, and
curation along with data
lineage visualization.
Gain an understanding of
your data management
activities such as health,
status, and the whole data
estate together.

40. 163 zettabytes of data a year will
be created by 2025
Cost of compliance continues to
increase year over year
200+ updates per day from 750
regulatory bodies
Challenges

41. Adopt a comprehensive data governance
strategy
Leverage the shared responsibility model
Use integrated tools that span end to
end scenarios
163 zettabytes of data a year will
be created by 2025
200+ updates per day from 750
regulatory bodies
Cost of compliance continues to
increase year over year
Strategies

42. Where and how to start
• Learn about the technical capabilities
within the Purview toolkit
• Identify REAL scenarios or challenges
that Purview can solve
• Assign Purview ownership by solution
and get permissions setup
• Identify competing solutions with a
solution rationalization
• Build a Purview roadmap aligned to your
overall product, M365, or security
roadmap

43. Allows you to start
without having it
all figured out
Allows for
incremental
improvements
Eases information
workers into the
world of protection
and retention
Some protection
and retention is
better than
nothing
Utilizing a crawl-walk-run strategy

45. Questions?
Email: drew.madelung@protiviti.com
Twitter: @dmadelung
Website: drewmadelung.com
Slides: http://bit.ly/DrewSlides

46. Breakdown of
Microsoft
Purview Solutions