Microsoft Purview Data Loss Prevention

I oversee our Information Security program and utilize Microsoft Purview to govern and enforce aspects of our Data Security including data discovery, data classification, data retention, and data loss prevention. As an E5 customer, Microsoft Purview is included and has strong integration into the Microsoft ecosystem. We utilize it to scan our files stores including OneDrive, SharePoint, Teams, and Email as well as data stores within Azure. The product comes with built in classifiers to detect sensitive content (e.g. SIN/SSN, financial information, health information, etc...). It also allows trainable classifiers to be created to detect content that is proprietary to organizations.

There are multiple levels of DLP controls which can be applied at various points in the data path to reduce risk of unwanted data disclosure, or malicious exfiltration.

• Microsoft Purview Data Loss Prevention is included within the E5 license suite providing value to organizations who are using Microsoft technologies for their organization.
• Provides the most extensive integration for Microsoft technologies.
• Highly effective for building out a Data Security program and reducing risk exposure associated with data exfiltration.
• Provides cross collaboration between assurance functions in a company (Security, Privacy, Risk, Audit)

Varonis Data Security Platform

Varonis Data Security Platform

Data loss prevention. Preventing exfiltration of data.

• Well, the ROI is a lot better because since we already paid for a license for other purposes, so it's more of an instant gain, it's a capability gain, so we're not really losing anything or losing money because we got to buy additional product.

Symantec Data Loss Prevention and Forcepoint Data Loss Prevention

We provide services and solutions using Microsoft products to companies that are contractors in the defense industrial base or the DOD contracting space. Our job is to help them get compliant to help them meet compliant standards. We do so by leveraging Microsoft 365 features like Purview and configuring those to incorporate principles and controls and practices of cybersecurity. So it's to secure the organization. So for us, DLP comes really important because CMMC, which is the regulatory standard which we must help our customers achieve, it's a data-centric standard - so it follows the data. Something like Purview where we can add the sensitivity labels to the data, where we can do protection of the data to stop it from unauthorized disclosure, unauthorized viewing, or whatever it may be. It's actually a real MVP for us because we're able to, because our entire compliance standard once again is data-centric and it's focused on controlled and classified information, we're able to attach DLP and sensitivity labels and things like that using Purview to the type of data that's really important to us to protect. It helps in everything: activates some of the instant response techniques, make sure that we are enforcing mechanisms and it helps us discover C, but it helps us also discover CUI within the environments when we're doing discovery for new clients and onboarding or if we're validating protections that they have in place.

• I think it's integral to everything, it has to be positive and the positivity has to be the ability to use Purview in a situation for an organization. For us as a provider, we're not sure if we need your services or we think we're doing this thing correctly. We also evaluate compliance team. So first thing that we may do is if we don't have a footprint in the organization and we don't know what their data parameter or their data flow capabilities are, if we don't think that they're controlling it confidently, we validate and verify. We may do a content search and that content search immediately will be the most revealing thing. They'll be like, "alright, so right here on this diagram, this and this area are the areas that you have protected that are capable of protecting CUI. How come your CUIs in all of these 18 other different areas in which you see as like scope creep happens because the enforcement mechanisms haven't been tested, validated or whatever, or haven't been effective." It allows us to do quick cleanup, quick discovery, and things like that for new onboarding clients.

It discovers data that we need to address for PCI compliance.

• It has allowed us to address PCI needs in an accelerated manner.

Varonis Data Security Platform

Help prevent risky or unauthorized use of sensitive data on apps, services, and devices.

• Protect documents
• Integration between other hyperscalers need to improve
• Specifically Azure and MS

AI Cyber Experts Cybersecurity as a Service (CSaaS)

Microsoft Copilot, Microsoft Copilot Studio, ActiveDEFENDER