Microsoft Purview Data Loss Prevention Reviews & Insights

I oversee our Information Security program and utilize Microsoft Purview to govern and enforce aspects of our Data Security including data discovery, data classification, data retention, and data loss prevention. As an E5 customer, Microsoft Purview is included and has strong integration into the Microsoft ecosystem. We utilize it to scan our files stores including OneDrive, SharePoint, Teams, and Email as well as data stores within Azure. The product comes with built in classifiers to detect sensitive content (e.g. SIN/SSN, financial information, health information, etc...). It also allows trainable classifiers to be created to detect content that is proprietary to organizations.

There are multiple levels of DLP controls which can be applied at various points in the data path to reduce risk of unwanted data disclosure, or malicious exfiltration.

I would highly recommend Microsoft Purview Data Loss Prevention for companies that are utilizing Microsoft technologies based on the strong integrations.

If a company is using other technologies (e.g Google Workspace), then Microsoft Purview Data Loss Prevention would not be a good fit and would be difficult to implement/manage.

Data loss prevention. Preventing exfiltration of data.

Well, it'd be more well-suited if you already have a license with Microsoft E5 license. Yeah, that'd be more suited and you don't want to spend much more on another complex data loss prevention tool.

We provide services and solutions using Microsoft products to companies that are contractors in the defense industrial base or the DOD contracting space. Our job is to help them get compliant to help them meet compliant standards. We do so by leveraging Microsoft 365 features like Purview and configuring those to incorporate principles and controls and practices of cybersecurity. So it's to secure the organization. So for us, DLP comes really important because CMMC, which is the regulatory standard which we must help our customers achieve, it's a data-centric standard - so it follows the data. Something like Purview where we can add the sensitivity labels to the data, where we can do protection of the data to stop it from unauthorized disclosure, unauthorized viewing, or whatever it may be. It's actually a real MVP for us because we're able to, because our entire compliance standard once again is data-centric and it's focused on controlled and classified information, we're able to attach DLP and sensitivity labels and things like that using Purview to the type of data that's really important to us to protect. It helps in everything: activates some of the instant response techniques, make sure that we are enforcing mechanisms and it helps us discover C, but it helps us also discover CUI within the environments when we're doing discovery for new clients and onboarding or if we're validating protections that they have in place.

Business to business collaboration. I think Purview is a hero, especially in organizations where you need to protect the data flow and you need to enforce data flow protections that you put in place. When you're doing business to business, you have people from other businesses that are invited into your tenant and they're going to be doing work and collaborating for bids or whatever it may be. With Purview it stops and makes sure that all those new people that may not be accustomed to the way that you do things don't have access to what they need to and they only the things they do. You're not stalling productivity and you're creating protections. I think it's great.

It discovers data that we need to address for PCI compliance.

It's fantastic for identifying data that you need to either clean up, destroy, or at least know intact. It can be applied to more than just PCI. So for example, you could potentially find health information or any other types of data that you might be concerned with. So PI data effectively.

Help prevent risky or unauthorized use of sensitive data on apps, services, and devices.

Integration with teams, etc, is a bonus.

Data loss is the most important and major worry for every organization. Microsoft Purview Data Loss Prevention is the most reliable solution in order to protect your data.We have created policies for our sensitive information and this policy ensures that data is not sent to a wrong person in the form of email or document. When such activity is detected it sends an alert to the admin so that the admin can take necessary actions before the damage is caused.We have also created a policy for Teams. It detects whenever any sensitive or confidential information is shared in Teams in the form of attachments or messages.

Microsoft Purview Data Loss Prevention is well suited for every organization where data is their most important asset. There could a lot of data types like, HR data, Payroll data, Non-disclosure agreements, Contracts, Invoices, Financial data, User data, Client data, etc. And these data needs to be protected from being leaked or hacked or shared inappropriately to a wrong person. All these data comes under exteremely sesitive and confidential oriented data. You can create and configure policies to your Exchange, SharePoint and Teams so that none of the data is sent to a wrong person and the policy will filter out and send a notification the admin to block such wrong activities. This will also help and is most necesarry during ISO audits.

While working in a corporate environment, we face a lot of sensitive client information and data like important records, financial data, security numbers, etc. With the help of Microsoft Purview gives security and data prevention by applying the DLP policies. With the help of the DLP, we automatically prevent information and build security by applying it on various platforms like - excel, word, Microsoft 365, windows, etc.

It provides a centralized view of the service facilities and view of data assets, making it more convenient for usage. Within the Organization, it improves data governance and security compliance by centralizing sensitive data, making it easier to manage. The free tier is available, but for a license, Its cost is determined by various factors like sources scanned, indexed data, and number of API requests.

We use Microsoft Purview Data Loss Prevention in a several different ways across multiple departments. Firstly, we are involved in contact center operations for DoD recruiting, lead nurturing, social outreach etc. As such, contact agents and management often have sensitive PII that has to be handled within defined DoD parameters. Pureview allows us to integrate policies that can scan comms, OneDrive, etc etc. for potentially mishandled PII and allow us to act on it before it becomes an issue (eg. shared outsie the company via email, shared files etc.). Because we work with government contracts and entities, we are often held to very specific security policies and have to demonstrate compliance (CIS levels and FedRamp etc.). PureView DLP lets us export reporting to show our scan activity and compliance conformity. Additionally, we use Preview DLP policies to monitor agency level SharePoints, emails, etc to monitor and coach for potentially sensitive information leaks which can contribute to phishing attacks and the like (eg. employees emailing SSN or other PII for personal use.

Microsoft Purview Data Loss Prevention is ideal for a 365 E5 enterprise organization where Azure directory is your 'source of truth' for user management and security policies. It is suited for using OneDrive as personal file management and SharePoint as collaborative files storage. Allows delineation of scanning various assets based on job function and department (as defined by Azure groups etc.). No additional cost if you are already invested in an E5 enterprise environment (for most functions, MS has additional DLP product enhancements)

We utilize Microsoft Purview Data Loss Prevention to help identify electronic patient health information that is transmitted across our systems or stored online and make sure that it is protected wherever we find for regulatory compliance. The information protection aspects of it are good at identifying this sensitive data amidst mountains of regular data, and the legal discovery side helps with making sure we're compliant anytime we need to put a hold on information for legal purposes.

Microsoft Purview Data Loss Prevention is very good for identifying sensitive data across multiple settings, like OneDrive, Exchange Online, Sharepoint, etc. If you want to find data across your whole tenant, this is a decent tool to use for it.

In today's digital world data is the most important asset, and everyone wants to protect their data either from getting lost or getting in the wrong hands. With the move towards working from anywhere since the pandemic data control and management is tougher than before. At this time products like Microsoft Purview comes to rescue. With its simple yet effective implementation and policy creation we can protect our digital data estate from leaving the corporate boundaries. And if you are using Microsoft's office products this the best DLP tool available in the market.

It is the number 1 solution if you use Microsoft office products as it has the best coverage for them and understands the data and usage best for Office products.

You might see for any third-party options for other office application suite if you find this expensive.