Microsoft Purview, IT Atlas

Overview

Purview applies sensitivity labels that can encrypt and restrict content wherever it travels, enforces DLP policies across email, endpoints and cloud, and manages retention, legal hold and eDiscovery for regulatory and litigation needs.

Configuration order matters: classify and label first, then enforce protection and DLP, then automate retention. Reversing that order produces user disruption without measurable risk reduction.

Security considerations

Pilot labels and DLP in audit mode and communicate before enforcement.
Confirm audit log retention meets investigative needs; higher retention often requires an add on.

Related topics

Data Loss Prevention

Detecting and controlling sensitive data in email, endpoints, cloud storage and SaaS based on classification and policy.

Data Governance

Defining ownership, classification, quality, retention and permitted use of organisational data.

Microsoft 365

An integrated productivity, collaboration, identity, security and management suite delivered as a single tenant scoped cloud service.

Compliance

Demonstrating that controls required by law, regulation, contract or standard are designed and operating effectively.

Encryption

Protecting data confidentiality and integrity in transit, at rest and increasingly in use, with key management as the hard part.

Microsoft 365 Organisation Architecture

A reference design for a cloud first organisation running identity, collaboration, endpoint management and security in one Microsoft 365 tenant.