Protect and use data according to laws & regulations with Zero Trust

Sensitivity Labeling

In order to have data read and/or edited correctly both internally and externally, it is important to have insight into which employee, groups of employees and/or external parties are allowed access to certain information. For example, sensitive information such as strategies or product developments should only be viewed by management and not by the rest of the organization or external parties. Other types of information can be shared freely within the organization but must not leave the organization. In such cases, it is necessary to apply Sensitivity Labeling.

Through Sensitivity Labeling, it is possible to secure documents, emails and Microsoft Teams, allowing only the right people to access documentation. A sensitivity label can be set up for each hierarchical layer in the organization, in which it is possible to apply specific settings. One such setting is when a document or email is given a specific sensitivity label, for example, it can be encrypted (scrambled), preventing unauthorized persons from easily opening it.

Data Loss Prevention (DLP)

Sensitive information can leave the organization in different ways. A document can be shared from Microsoft Teams, email or a Microsoft chat. Data Loss Prevention (DLP) within Microsoft 365 ensures that sensitive data cannot be shared with external parties. Microsoft 365 then automatically ensures that documents, emails or chats containing GDPR-sensitive information are not shared with external parties, for example. DLP can be used in conjunction with Sensitivity Labeling, which makes it a priori impossible to share labeled files with externals and/or specific internals.

GDPR

To properly protect and handle personal data, more than 70% of countries worldwide have implemented privacy laws in recent years. One example is the GDPR within the European Union. Sensitivity Labeling and applying DLP help organizations within Microsoft 365 be GDPR-compliant. As an addition, managing and retaining information for a certain period of time - according to laws and regulations - also deserves an important place.

Data retention periods & retention labeling

Among other things, the GDPR requires personal information to be deleted after a certain period of time. Retention labeling in Microsoft 365 enables management and (automatic) deletion of data in selected applications, such as Microsoft Teams, SharePoint and Exchange.

The aforementioned Microsoft Information Protection products and their capabilities can be applied in numerous ways. Step by step, these products ensure that organizations are compliant, keeping data protected and manageable as desired on the basis of the Confidentiality, Integrity and Availability (CIA) triangle