Microsoft Purview¶
Microsoft Purview provides information protection, data governance, and compliance management for Microsoft 365.
Portal: Microsoft Purview compliance portal (compliance.microsoft.com)
Checklist¶
- Sensitivity labels created and published
- Default label policy configured
- Auto-labelling policies configured (if licenced)
- DLP policies created for key data types (PII, financial, health)
- DLP policies set to enforcement mode (not test) after review
- Communication compliance policy created (if required)
- Retention labels and policies configured
- Unified audit log enabled and retention configured
- Compliance Manager reviewed and top recommendations addressed
Purview Solutions Overview¶
| Solution | Purpose |
|---|---|
| Information Protection | Sensitivity labels, encryption, rights management |
| Data Lifecycle Management | Retention labels and policies, records management |
| Data Loss Prevention (DLP) | Detect and prevent sensitive data sharing |
| Communication Compliance | Monitor communications for policy violations |
| Audit | Unified audit log for all M365 activity |
| eDiscovery | Legal hold and content search |
| Compliance Manager | Compliance posture assessment and improvement |
Licensing Notes¶
| Feature | Minimum licence |
|---|---|
| Sensitivity labels (manual) | Microsoft 365 E3 / Business Premium |
| Auto-labelling client-side | Microsoft 365 E5 Compliance |
| Auto-labelling service-side | Microsoft 365 E5 Compliance |
| DLP for Exchange/Teams/SharePoint | Microsoft 365 E3 / Business Premium |
| DLP for Endpoint | Microsoft 365 E5 / Microsoft 365 E5 Compliance |
| Communication Compliance | Microsoft 365 E5 Compliance |
| Advanced Audit | Microsoft 365 E5 |