CollabDays NL 2024 - Protecting and governing your sensitive data with Microsoft Purview in an AI driven workplace.pptx

In today's AI-driven workplace, the seamless flow of information brings with it the inherent risk of sensitive data exposure and unauthorized access. The rapid adoption of Copilot for Microsoft 365 underscores the critical need for safeguarding and governing your organization's sensitive data. As a Data Security Consultant and Microsoft MVP, I invite you to join me in unveiling practical tips and tricks for achieving this using Microsoft Purview Information Protection, Data Loss Prevention, Compliance Manager, and Communication Compliance. Together, we'll navigate the landscape of data security challenges and risks, exploring actionable insights to implement robust solutions for effectively protecting and governing your organization's data within an AI-driven environment.

1. Protecting and governing your sensitive data with Microsoft Purview in an AI driven workplace Jasper Oosterveld

2. CollabDaysNL Sponsors

3. About me CollabDays Netherlands 2024 Microsoft 365 & Data Security Consultant @ Rubicon Microsoft MVP (10 years ) Amsterdam, the Netherlands

4. Poll CollabDays Netherlands 2024 https://www.menti.com/ald7uumo3z3t

5. Need for Data Security in an AI driven world CollabDays Netherlands 2024

6. Our workplace CollabDays Netherlands 2024 Personal device Customer device Partner device Personal wearable Mobile device On-premises Partners Customers Mobile device Customer wearable Company-owned device Personal laptop Home office

7. Rise of generative AI CollabDays Netherlands 2024 ChatGPT Gemini Azure OpenAI

8. A new age has arrived! CollabDays Netherlands 2024 The age of Copilots has arrived.

9. Copilot time! CollabDays Netherlands 2024

10. Copilot for Microsoft 365 CollabDays Netherlands 2024 Your AI assistant Microsoft Graph - Your Data - Large Language Models Microsoft 365 Apps Natural Language The Internet

11. Microsoft’s AI principles CollabDays Netherlands 2024 Fairness Reliability & Safety Privacy & Security Inclusiveness Transparency Accountability Microsoft Cloud — AI you can trust Your data is your data. Your data is not used to train the OpenAI foundation models without permission. Your data is protected by the most comprehensive enterprise compliance and security controls.

12. Challenges CollabDays Netherlands 2024 01 SECURITY VS PRODUCTIVITY 2 INTERNAL & EXTERNAL THREATS 4 REGULATIONS 3 SENSITIVE INFORMATION

13. Makes sense but… CollabDays Netherlands 2024

14. Risks CollabDays Netherlands 2024 01 FINES 2 REPUTATIONAL DAMAGE 3 LOSS OF TRUST 4 BANKRUPTCY

15. Examples CollabDays Netherlands 2024

16. Three crucial questions CollabDays Netherlands 2024 01 . Does your organization know what types of sensitive information it has and where it is located? 2 Do you have control over this data as it travels inside and outside the organization? 3 How does your organization protect sensitive data in all environments?

17. Data Security with Microsoft Purview CollabDays Netherlands 2024

18. But Jasper… CollabDays Netherlands 2024

19. My advise CollabDays Netherlands 2024 01 WORKSHOP 2 DATA RISK CHECK 3 IMPLEMENTATION

20. Step 1: Workshop with stakeholders CollabDays Netherlands 2024

21. Workshop with stakeholders CollabDays Netherlands 2024 01 CLASSIFICATION & PROTECTION POLICY

22. Classification policy CollabDays Netherlands 2024 Public General Company data intended for general use within the organization. There can be a potential breach of confidentiality with external sharing. Confidential Company data specially prepared and approved for public use. There is no breach of confidentiality. Company information specifically intended for internal use or specific individuals or organizations. Information is only shared on basis of confidentiality. Breach of confidentiality causes serious harm to the organization.

23. Protection policy CollabDays Netherlands 2024 Public General Accessible to all employees and external individuals or organizations. Data isn’t protected . Confidential Accessible to all employees and external individuals or organizations. Data isn’t protected Accessible for all employees (internal) or authorized individuals or organizations (external). Data is or isn’t protected.

24. Sensitivity labels CollabDays Netherlands 2024 Public General Confidential Internal External Anyone (not protected)

25. Workshop with stakeholders CollabDays Netherlands 2024 01 CLASSIFICATION & PROTECTION POLICY 2 RETENTION POLICY

26. Information lifecycle CollabDays Netherlands 2024 Create Store Use Share Archive Destroy

27. Retention policy or labels CollabDays Netherlands 2024 1 year keep & release 5 year keep & release 10 year keep & release 1 year keep & delete 5 year keep & delete 10 year keep & delete

28. Workshop with stakeholders CollabDays Netherlands 2024 01 CLASSIFICATION & PROTECTION POLICY 2 RETENTION POLICY 3 SENSITIVE INFORMATION

29. Sensitive information CollabDays Netherlands 2024 Generic BSN Credit card number Passport number Drivers license number IBAN Address Organizational Medical information Criminal information (criminal record) Intellectual Property Employee information Customer information Mergers and acquisitions

30. Identify sensitive information CollabDays Netherlands 2024 01 STAKEHOLDERS 2 IMPACT DATA LOSS 3 REGULATIONS 4 PURVIEW

31. Detect Sensitive Information CollabDays Netherlands 2024 01 SIT 2 TRAINABLE CLASSIFIERS 3 EXACT DATA MATCH 4 DOCUMENT FINGERPRINTING 5 SHAREPOINT PREMIUM

32. Workshop with stakeholders CollabDays Netherlands 2024 01 CLASSIFICATION & PROTECTION POLICY 2 RETENTION POLICY 3 SENSITIVE INFORMATION 4 REGULATIONS

33. Regulations CollabDays Netherlands 2024

34. Step 2: Monitor current situation CollabDays Netherlands 2024

35. Monitor Sensitive Information CollabDays Netherlands 2024 01 AI HUB

36. Demo

37. Monitor Sensitive Information CollabDays Netherlands 2024 2 DLP 01 AI HUB

38. Demo

39. Monitor Sensitive Information CollabDays Netherlands 2024 3 AUDIT 2 DLP 01 AI HUB

40. Demo

41. Monitor Sensitive Information CollabDays Netherlands 2024 4 COMMUNICATION COMPLIANCE 3 AUDIT 2 DLP 01 AI HUB

42. Demo

43. Monitor Sensitive Information CollabDays Netherlands 2024 5 COMPLIANCE MANAGER 4 COMMUNICATION COMPLIANCE 3 AUDIT 2 DLP 01 AI HUB

44. Demo

45. Step 3: Implementation CollabDays Netherlands 2024

46. Start small!

47. Purview services CollabDays Netherlands 2024 01 INFORMATION PROTECTION

48. Demo

49. Default Document Library Label & Override CollabDays Poland 2024

50. Purview services CollabDays Netherlands 2024 01 INFORMATION PROTECTION 2 DATA LOSS PREVENTION

51. Monitor & block CollabDays Netherlands 2024

52. Purview services CollabDays Netherlands 2024 01 INFORMATION PROTECTION 3 DATA LIFECYCLE MANAGEMENT 2 DATA LOSS PREVENTION

53. Copilot Retention Policy CollabDays Netherlands 2024

54. Time to wrap it up! CollabDays Netherlands 2024

55. Contact details CollabDays Netherlands 2024 www.jasperoosterveld.com www.linkedin.com/in/jasperoosterveld [email protected]

56. Resources CollabDays Netherlands 2024 Learn about optical character recognition in Microsoft Purview (preview) | Microsoft Learn Label and protect files in File Explorer in Windows - Microsoft Support Microsoft 365 Roadmap | Microsoft 365 Prevent data leak through web apps with Microsoft Purview Data Loss Prevention - Microsoft Community Hub Microsoft Purview data security and compliance protections for Microsoft Copilot and other generative AI apps | Microsoft Learn Data, Privacy, and Security for Microsoft Copilot for Microsoft 365 | Microsoft Learn

57. Thank you! CollabDays Netherlands 2024

58. PLEASE “HEART” THIS SESSION IN THE APP AND GIVE YOUR FEEDBACK WE VALUE YOUR OPINION!

59. THANK YOU!