Setting up Microsoft 365 Data Loss Prevention
Nick Ross · Updated
Uploading 52%
Data loss prevention is becoming extremely important across all business landscapes. It is a priority when it customers that fall under compliance regulations like HIPAA, FINRA, and NIST. The new M365 skus come baked with DLP and information protection features that were traditionally only available in the Enterprise plans from office365. I have written an entire guide for implementation below focusing on the M365 Business sku but it also applies to the following skus:
- Azure Information Protection Plan 1
- Office365 E3 and greater
- M365 E3 and E5
- EMS +E3, E5
Click here for the Complete Guide (opens in new tab)
What the Guide Shows
Azure Information Protection
Azure information protection can be used to classify, label, and protect your companies’ documents and email.
- Secure your files and emails
- Encryption, identity, authorization policies
- Platform independent
- Phones, tablets, PCs (iOS/Android)
- Automatically apply policies, classify data, and apply encryption based of keywords or sensitive information (PII, SSN, etc.)
Plugin for Outlook and office Suite
Add a plugin to your end-users outlook and office sutite so they can encrypt documents and emails on-demand
Creating Labels and Polices to Classify data
Apply different protections to different scopes of users based on labels and policies you create
Create Data Loss Prevention Policies
Auto-apply encrpytion or block delivery off messages and documents based off detection of sensitve content. Custom templates for HIPAA and FINRA
Spread the word
Facebook (opens in new tab) Twitter (opens in new tab)
Add Your Heading Text Here
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
Map your Microsoft 365 settings to CIS Controls and NIST CSF in about a minute.
CloudCapsule scans 300+ controls, maps each finding to the framework you report against, and tracks the trend over time, so the evidence for your next review is already there.
No credit card required. Results in about a minute.
Keep reading
Ditch the VPN: How Microsoft’s Global Secure Access is Changing Remote Connectivity
2025 has been a rough year for VPNs. We’ve seen breaches at major vendors, clunky user experiences, and a constant flood of helpdesk tickets from frustrated users. Yet, many businesses still rely on VPNs because their legacy line-of-business applications and on-prem file shares haven’t made the move to the cloud. But what if you could […]
Vendor Integrations will Break with GDAP
Checkout my latest article on this topic here!: Vendor Integrations Break with GDAP: The Fix! – (tminus365.com) Note This article assumes you have knowledge of GDAP (Granular Delegated Admin Privileges). If you do not, check out my article here: https://tminus365.com/granular-delegated-admin-privileges/ × Dismiss alert If you have a vendor that leverages an app registration or are […]
Leveraging PIM with GDAP
In my previous blog post, I talked about the major considerations when adding roles for GDAP relationships. In some instances, you may want to bump up security a step further and pair GDAP with PIM or privileged identity management. This would allow you to have just in time access to customer workloads for users in […]