This document discusses planning and adoption of Azure Information Protection. It recommends starting with a small pilot group to test classification labels and protection policies. It also emphasizes training users and adopting a gradual, phased approach to implementation rather than trying to solve all use cases at once. Key aspects covered include planning classification labels, configuring protection controls, and monitoring document usage over time.

1. Azure Information Protection
Taking a Team Approach
From Planning to
Adoption
Office 365 Vancouver 2018April 14, 2018

2. Sponsors O365 Saturday Vancouver 2018

4. Hi! I’m Joanne!
@JoanneCKlein
joannecklein@nexnovus.com
joannecklein.com
SharePoint & Office 365 consultant | Speaker | Trainer | Mentor | Saskatchewan SharePoint & Office 365 UG

5. @charmaine_klee
/charmaineklee
charmaineklee.com
2nd Year CS Student @ UBC
Intern @ Microsoft

9. 3
2
1
4
Planning
Configuration
Adoption
Demos

10. Why is AIP important?

11. Your perimeter
Company internal

12. Your perimeter
Company internal
Mobility
Managed Devices

13. Your perimeter
Company internal
Mobility
Managed Devices
External Sharing
Secured Data

14. Your perimeter
Company internal
Mobility
Managed Devices
External Sharing
Secured Data
Other SaaS apps
Box, G Suite, AWS,
Dropbox…

15. How can we manage
and protect this
information?

16. Microsoft Information Protection

17. Microsoft Information Protection

18. A Data-Centric Approach
Old World Model
“Catch everything before it
leaks”
New World Model
“Data is born being classified,
labeled & protected”

19. Azure Information Protection
… provides persistent
data protection by
identifying sensitive data,
classifying, labeling and
protecting at the time of
creation or modification

20. IT
Administrator
s
Information
Managers
Adoption
Specialists

21. What should our
labels be? Keep it
simple!
Should we have a pilot
group? Who’s on it?
Do we know what the
protection controls are
for our organization?
What kind of Office
365 license do we
have?

22. Classification
and
Labeling
Protection
and
Use Rights
Tracking
and
Reporting

24. File is
created
and
labeled in
Word

25. File is
created
and
labeled in
Word
Collaboration
on file happens
in SharePoint
Online

26. File is
created
and
labeled in
Word
Collaboration
on file happens
in SharePoint
Online
User opens
the file on
their mobile
device

27. File is
created
and
labeled in
Word
Collaboration
on file happens
in SharePoint
Online
User opens
the file on
their mobile
device
User uploads
it to other
SaaS app for
sharing

28. Classification
Labeling

32. Tip 1
Pick
standard
labels

33. Resonate
with
users
Not use
jargon or
acronyms

34. Non-Business
Public
General
Confidential
Highly Confidential
Low business impact
Medium business
impact
High business impact

35. Wide Open
Keep it in the Family
Lock it down

36. Tip 2
Create
sub-labels

37. HR Finance Legal
“Sensitive data” departments

38. Risk of
internal
consumption
Need for
external
consumption
Someone has
to manage
these!
Too many
choices!

39. Tip 3
Use scoped
policies

40. Secret
Project
Board
Members
Specialized
Team

41. Demo
AIP Scoped Policies

42. Tip 4
Encourage
right user
behaviour

43. 1
User-driven
2 3
Recommended
Automatic
Start here

44. 1
2
3

46. Demo
AIP Policy Recommendations

47. 1
Windows
Service
2 3
Configures SQL
Service DB
Define
repositories:
- Local folders
- UNC paths
- SP Server URLs
4
Run AIP
Scanner to
scan files to
set label

49. Tip 5
Protect and
Enforce

50. Classification
Labeling
Encryption
Access Control
Policy Enforcement

53. Demo
Azure RMS Protection

54. Classification
Labeling
Encryption
Access Control
Policy Enforcement
Document Tracking
Document Revocation

55. https://track.azurerms.com

56. Who?
When?
Where?
Revoke
Exclude

57. Demo
Azure Document Tracking

58. Classification
Labeling
Encryption
Access Control
Policy Enforcement
Document Tracking
Document Revocation

59. Don’t forget about Training & Adoption!
Download the ‘AIP End User Adoption Guide’
Itallcomesdowntothis…

60. Classification
Wizard
Labeling
101
Training
Events
Ask the
AIP Bot
Why is data
protection
important?

66. Don’t try to solve it all (0 to 100)Don’t
Start with classificationStart
Apply protection/controls for small use-
cases
Next
Educate users in your org!Do

67. @JoanneCKlein joannecklein.com
@charmaine_klee charmaineklee.com