- \n
- Subscribe to Insentra\u2019s YouTube channel<\/a> <\/li>\n<\/ul>\n\n\n\n
- \n
- Go to your kitchen (or your local caf\u00e9) and get yourself a Black Eye (no, not THAT black eye). If you love your liquid gold and need that caffeine hit, then this drink is for you! <\/li>\n<\/ul>\n\n\n\n
Now that formalities are out of the way, on to the topic of this blog! A topic that\u2019s been very hot with my customers lately is all-around information security. Basically, what are the ways you can protect your organisational data directly from within Microsoft 365 (M365)? <\/p>\n\n\n\n
Think about this: you\u2019ve done your discovery of your data islands, and now you\u2019ve uncovered a large amount of data that contains sensitive information. How can you protect this data? <\/p>\n\n\n\n
If you\u2019d like to know the answer, then grab your Black Eye and buckle up as I\u2019m about to take you through some capabilities right now! <\/p>\n\n\n\n
But first, check out my previous blog, Microsoft Purview \u2013 Protect Yourself, Don\u2019t Become a Data Breach Statistic<\/a>, to refresh your mind on what Microsoft Purview is. Once you\u2019re done, pass GO, collect your $200, buckle up and read on!\u00a0<\/p>\n\n\n\n
SO WHY INFORMATION SECURITY?<\/strong> <\/h2>\n\n\n\n
Let me ask you one thing: What would your organisation do if it made front-page news because of a data breach? They say any reputation is good reputation, but news like that isn\u2019t something to celebrate. <\/p>\n\n\n\n
In fact, it causes negative reputational and brand impact, not to mention the potential massive financial fallout \u2013 just ask the 47% of Australians who, in a recent study by the OAIC<\/a>, confirmed that they would either close their account or stop using a product or service provided by an organisation that experienced a data breach. <\/p>\n\n\n\n
So, what protective measures can your organisation take to stop data from landing in the wrong hands? Now, what kind of blog post would this be if I didn\u2019t explain ways in which you can achieve this goal? <\/p>\n\n\n\n
The following is NOT an output from ChatGPT. This is from the Pure Awesomeness GPT platform, where I plan to pass on all the knowledge to you, my loyal readers. Now, just one more sip of the Black Eye and we\u2019re ready to rock! <\/p>\n\n\n\n
Multi-Factor Authentication<\/strong> <\/h2>\n\n\n\n
Yes, I know this falls under the identity protection umbrella, but if you think about it, MFA also protects your data<\/a>. Without it, the bad guy can gain access to your data just by hacking your password.\u00a0<\/p>\n\n\n\n
So, if MFA isn\u2019t enabled across the organisation yet, turn it on now! But contact me first and I\u2019ll show you the controlled way to get it deployed. Once deployed, you can breathe a sigh of relief that user123@domain.com.au<\/a> now has an added level of security, and that they aren\u2019t just relying on that password written on a Post-It note in their desk drawer. By the way, if this is a practice you still do today, please don\u2019t pass GO, don\u2019t collect your $200 and contact me straight away! <\/p>\n\n\n\n
Right, so MFA is enabled now, but what about the data itself? What can be done? Keep on reading, my loyal apprentice. <\/p>\n\n\n\n
In my previous<\/a> <\/a>blog<\/a>, I covered all the capabilities of the beast that is Microsoft Purview. It\u2019s now time to deep dive into some of these capabilities that will help you protect your most sensitive information.\u00a0<\/p>\n\n\n\n
Data Loss Prevention<\/strong> <\/h2>\n\n\n\n
First up: Data Loss Prevention. DLP, as it\u2019s commonly known, is a security solution that helps prevent sharing of sensitive information. <\/p>\n\n\n\n
I won\u2019t go into too much detail on what DLP is (you can visit the blog I linked above if you want a more thorough explanation of DLP). Instead, I\u2019ll take you through a basic policy configuration because I\u2019m a nice guy. <\/p>\n\n\n\n
- \n
- First things first, log into the Purview portal \u2013 https:\/\/compliance.microsoft.com<\/a> or if you\u2019ve made the switch and are using the new portal \u2013 https:\/\/purview.microsoft.com<\/a> <\/li>\n<\/ol>\n\n\n\n
- \n
- Click on \u201cData loss prevention\u201d, and then click on \u201cPolicies\u201d <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/1.png\")
<\/figure>\n<\/div>\n\n\n- \n
- Click on \u201cCreate policy\u201d <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/image-1.png\")
<\/figure>\n<\/div>\n\n\n- \n
- For the purposes of this blog, I\u2019m going to create a policy for Australian<\/em> sensitive information types. I\u2019m selecting Medical and health<\/em> as the category and using the built-in Australian Health Records Act<\/em> template. Click \u201cNext\u201d <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/image-8-1024x452.png\")
<\/figure>\n<\/div>\n\n\n- \n
- Name your policy (the default name is usually good enough) and click \u201cNext\u201d <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/image-3-1024x441.png\")
<\/figure>\n<\/div>\n\n\n- \n
- Leave as the default Full directory and then click \u201cNext\u201d (feel free to specify admin units) <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/image-2-1024x395.png\")
<\/figure>\n<\/div>\n\n\n- \n
- Select the locations where you want to apply the DLP policies (Note: I have E5 licenses available, hence why all locations are available) <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/6.png\")
<\/figure>\n<\/div>\n\n\n- \n
- For the purposes of this blog, I\u2019m going to only review the default settings for the template, but you can customise the configuration if necessary (e.g., change the instance count, confidence levels, notifications, etc). Click \u201cNext\u201d <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/7.png\")
<\/figure>\n<\/div>\n\n\n- \n
- We\u2019ll leave all these settings as default and click \u201cNext\u201d. Most of the time, organisations will want to deploy DLP policies to protect sensitive information from being shared with people outside of the organisation. <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/8.png\")
<\/figure>\n<\/div>\n\n\n- \n
- Again, we\u2019ll leave this all as default, but if required, the alert notifications can be changed to be sent to a distribution group instead. By default, the admin who creates the DLP policies and all Global Admins in the tenant will receive the alerts. Click \u201cNext\u201d <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/9.png\")
<\/figure>\n<\/div>\n\n\n- \n
- Next, we can customise any override settings, set content to be encrypted as part of the DLP policy or even apply the DLP policy to some 3rd<\/sup> party apps like Box and Salesforce. We\u2019ll leave this all as default, but if you want to set these in your environment and need some further assistance, you know where to reach me. Click \u201cNext\u201d. We\u2019re almost there! <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/Picture10.png\")
<\/figure>\n<\/div>\n\n\n- \n
- Now, the cool part! You can enable the policy in test mode, turn it on in production, or turn it off. My recommendation is test it out first before you roll it out into production <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/Picture11.png\")
<\/figure>\n<\/div>\n\n\n- \n
- Review the configuration and click \u201cFinish\u201d <\/li>\n<\/ol>\n\n\n\n
![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/Picture12.png\")
<\/figure>\n<\/div>\n\n\nBOOM! DLP policy is now enabled to protect medical information. Pretty easy right? <\/p>\n\n\n\n
Now, can it get even easier to not only deploy the policies, but also test these out against dummy data to make sure you\u2019re on the right path? It sure can! Allow me to introduce you to\u2026 <\/p>\n\n\n\n
Advanced Deployment Guides<\/strong> <\/h2>\n\n\n\n
So, what are these? In a nutshell, the white wizards of Redmond have developed guides that allow you to follow the bouncing ball to get specific workloads and features deployed across the tenant. Some of these guides even configure some of the policies for you automagically (still working on this word being published in the Oxford dictionary). <\/p>\n\n\n\n
The Microsoft official definition: Microsoft 365 advanced deployment guides give you tailored guidance and resources for planning and deploying your tenant, apps and services. <\/p>\n\n\n\n
Pretty cool right? So, how do you access these? I thought you\u2019d never ask! <\/p>\n\n\n\n
On the M365 Admin Centre home page, you\u2019ll find a nice-looking purple hammer. <\/p>\n\n\n
\n![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/Picture13.png\")
<\/figure>\n<\/div>\n\n\nClick on it and you\u2019ll then be presented with a search bar. Type in DLP and you\u2019ll see the link to the Information Protection guide. Ignore the \u201cAdoption and Secure Scores\u201d \u2013 this is a lab environment, I swear! <\/p>\n\n\n
\n![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/image-4-1024x400.png\")
<\/figure>\n<\/div>\n\n\nNow you\u2019ll notice there\u2019s no specific guide for DLP. That\u2019s because it\u2019s combined into the Information Protection guide. Click on the guide and you\u2019ll now be presented with the step-by-step guide on deploying Information Protection, including DLP! <\/p>\n\n\n\n
As you progress through the guide, you\u2019ll notice that data loss prevention eventually shows up as a configuration option. <\/p>\n\n\n
\n![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/image-6-1024x433.png\")
<\/figure>\n<\/div>\n\n\nOnce clicked on, each link above will give you some information on the right-hand side of the screen. You can even assign the task to someone in your team and set a due date! <\/p>\n\n\n
\n![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/image-7-1024x501.png\")
<\/figure>\n<\/div>\n\n\nNow, it\u2019s time to test with dummy data. To do this, click \u201cNext\u201d in the wizard. On the left, you\u2019ll see something called the \u201cDLP test harness\u201d. <\/p>\n\n\n
\n![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/image-10-1024x463.png\")
<\/figure>\n<\/div>\n\n\nDownload the script and run it. After the usual security messages, enter your admin credentials for your tenant. <\/p>\n\n\n
\n![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/image-5-1024x377.png\")
<\/figure>\n<\/div>\n\n\nOnce authenticated, you\u2019ll now be able to test your configured DLP policies against three different types of Australian sensitive information. <\/p>\n\n\n
\n![\"\"](\"https:\/\/www.insentragroup.com\/us\/wp-content\/uploads\/sites\/21\/2025\/01\/image-9-1024x666.png\")
<\/figure>\n<\/div>\n\n\nAnd there you have it\u2013everything you needed to know on how to configure DLP policies across your M365 tenant! <\/p>\n\n\n\n
- Review the configuration and click \u201cFinish\u201d <\/li>\n<\/ol>\n\n\n
- Now, the cool part! You can enable the policy in test mode, turn it on in production, or turn it off. My recommendation is test it out first before you roll it out into production <\/li>\n<\/ol>\n\n\n
- Next, we can customise any override settings, set content to be encrypted as part of the DLP policy or even apply the DLP policy to some 3rd<\/sup> party apps like Box and Salesforce. We\u2019ll leave this all as default, but if you want to set these in your environment and need some further assistance, you know where to reach me. Click \u201cNext\u201d. We\u2019re almost there! <\/li>\n<\/ol>\n\n\n
- Again, we\u2019ll leave this all as default, but if required, the alert notifications can be changed to be sent to a distribution group instead. By default, the admin who creates the DLP policies and all Global Admins in the tenant will receive the alerts. Click \u201cNext\u201d <\/li>\n<\/ol>\n\n\n
- We\u2019ll leave all these settings as default and click \u201cNext\u201d. Most of the time, organisations will want to deploy DLP policies to protect sensitive information from being shared with people outside of the organisation. <\/li>\n<\/ol>\n\n\n
- For the purposes of this blog, I\u2019m going to only review the default settings for the template, but you can customise the configuration if necessary (e.g., change the instance count, confidence levels, notifications, etc). Click \u201cNext\u201d <\/li>\n<\/ol>\n\n\n
- Select the locations where you want to apply the DLP policies (Note: I have E5 licenses available, hence why all locations are available) <\/li>\n<\/ol>\n\n\n
- Leave as the default Full directory and then click \u201cNext\u201d (feel free to specify admin units) <\/li>\n<\/ol>\n\n\n
- Name your policy (the default name is usually good enough) and click \u201cNext\u201d <\/li>\n<\/ol>\n\n\n
- For the purposes of this blog, I\u2019m going to create a policy for Australian<\/em> sensitive information types. I\u2019m selecting Medical and health<\/em> as the category and using the built-in Australian Health Records Act<\/em> template. Click \u201cNext\u201d <\/li>\n<\/ol>\n\n\n
- Click on \u201cCreate policy\u201d <\/li>\n<\/ol>\n\n\n
- Click on \u201cData loss prevention\u201d, and then click on \u201cPolicies\u201d <\/li>\n<\/ol>\n\n\n
- First things first, log into the Purview portal \u2013 https:\/\/compliance.microsoft.com<\/a> or if you\u2019ve made the switch and are using the new portal \u2013 https:\/\/purview.microsoft.com<\/a> <\/li>\n<\/ol>\n\n\n\n
- Go to your kitchen (or your local caf\u00e9) and get yourself a Black Eye (no, not THAT black eye). If you love your liquid gold and need that caffeine hit, then this drink is for you! <\/li>\n<\/ul>\n\n\n\n