Cloud Infra, Data & AI Platform
Data Protection Baseline
Discovery and classification first, then a labelling and loss prevention baseline that reflects what the organisation actually holds.
Writing a data policy before knowing where the data sits produces rules that are either ignored or exempted. Data Protection Baseline runs discovery and classification across the Microsoft 365 and Azure estate first, agrees a sensitivity scheme that matches the regulatory position, then puts labelling and data loss prevention into force in stages so the first policy does not block legitimate work.
Work modules
- Discovery and classificationScan the Microsoft 365 and Azure data estate with Microsoft Purview to establish where regulated, personal, and commercially sensitive information actually resides.
- Sensitivity scheme and labellingAgree a label taxonomy against the regulatory position, then publish it with automatic application where classification is confident enough to act on.
- Loss prevention in stagesIntroduce Microsoft Purview data loss prevention policy in audit mode, review what it would have blocked, then move to enforcement once the false positives are tuned out.
What you receive
- A classification report describing where sensitive information sits across the estate
- A published sensitivity label taxonomy with automatic application configured
- Data loss prevention policy in force, with the audit-mode findings that justified each rule
What changes for the business
- Protection travels with the document instead of stopping at the folder it started in
- A data question from a regulator is answered from a catalogue rather than from an internal survey