Turning On Microsoft 365 DLP and Information Protection for Compliance-Driven Clients
TL;DR
- As of 2019, DLP and information protection features that were once Enterprise-only now ship with the M365 Business SKU.
- Azure Information Protection classifies, labels, and protects documents and email across platforms, including iOS and Android phones and tablets.
- An Outlook and Office plugin lets end users encrypt documents and emails on demand.
- DLP policies can auto-apply encryption or block delivery of messages and documents based on sensitive content, with custom templates for HIPAA and FINRA.
Data loss prevention has moved from nice-to-have to mandatory across most business landscapes, and it is a priority for any client under a compliance regime like HIPAA, FINRA, or NIST. The good news as of 2019: the DLP and information protection features that used to live only in Office 365's Enterprise plans now come baked into the newer M365 SKUs. This walkthrough focuses on M365 Business but applies to several licenses, and the full implementation guide is linked below.
The implementation guide focuses on the M365 Business SKU but also applies to the following:
- Azure Information Protection Plan 1
- Office 365 E3 and greater
- M365 E3 and E5
- EMS+E3, E5
Click here for the complete guide (opens in new tab).
Classify and protect with Azure Information Protection
Azure Information Protection can classify, label, and protect a company's documents and email:
- Secure your files and emails.
- Encryption, identity, and authorization policies.
- Platform independent.
- Phones, tablets, PCs (iOS/Android).
- Automatically apply policies, classify data, and apply encryption based on keywords or sensitive information (PII, SSN, etc.).
Give users on-demand encryption in Outlook and Office
Add a plugin to your end users' Outlook and Office suite so they can encrypt documents and emails on demand.
Create labels and policies to classify data
Apply different protections to different scopes of users based on the labels and policies you create.
Build data loss prevention policies
Auto-apply encryption, or block delivery of messages and documents based on detection of sensitive content. There are custom templates for HIPAA and FINRA.
Frequently asked questions
Which licenses include Microsoft 365 DLP and information protection?
As of 2019, the M365 Business SKU, plus Azure Information Protection Plan 1, Office 365 E3 and greater, M365 E3 and E5, and EMS+E3 or E5.
Can DLP detect things like Social Security numbers automatically?
Yes. Azure Information Protection can automatically apply policies, classify data, and apply encryption based on keywords or sensitive information such as PII and SSNs.
Does information protection work on mobile devices?
Yes. It is platform independent and works across phones, tablets, and PCs on iOS and Android.
A DLP policy that quietly reverts protects nobody.
Compliance frameworks like HIPAA and FINRA expect controls that stay on. CloudCapsule checks DLP and information protection settings alongside 250+ others across every tenant you manage in about 60 seconds each, with proof for the auditor.
Run a free scan
Written by
Nick Ross
CEO · Microsoft MVP · Founder, T-Minus 365
Nick is not just a CEO, he's a respected thought leader and influencer in the MSP space. Tens of thousands of MSPs learn through his YouTube channel, T-Minus365. Nick has been honored as a three-time Microsoft MVP for his educational content; his expertise and influence are the backbone of our mission, ensuring that you are in the best hands when it comes to security.
Nick joined Pax8 in 2017, where he would ultimately oversee product management for PSA and Microsoft integrations. Following his tenure at Pax8, Nick has continued to demonstrate his leadership prowess as an executive at various MSPs, culminating in his most recent role at Sourcepass.
Nick holds a Bachelor's Degree in Business Management from Florida State University, as well as a Minor Degree in Entrepreneurship. In his free time, Nick is an avid hiker, reader, and fitness-junkie.
