Beau

CTRL + ALT + Data Security #17 - Ignite Special Your one stop shop for all things data security!

New articles up on Data Security Ignite announcements!

open.substack.com/pub/datasecu...

CTRL + ALT + Data Security #17 Your home for all things Data Security!

For those that don't know - I run a data security newsletter - Ctrl + Alt + Data Security on both LinkedIn and Substack; if your interested give it a read!

Substack: open.substack.com/pub/datasecu...

LinkedIn:Subscribe on LinkedIn www.linkedin.com/build-relati...

Alrighty, fully cutting over to BlueSky - come a long way since I took a look a year ago!

Copilot + Purview There’s been a lot of buzz around the use of AI in the industry, and I’ve been part of many conversations about how Purview can facilitate…

Just published an article on Copilot + Purview over on Medium if your interested!

There has been a lot of information, both confused and otherwise, on how Microsoft Purview interacts with Copilot, so I have put together an article that hopefully clears up some of the misconceptions out there!

Remember that these controls should be part of your holistic data security strategy in any case. However, if adopting M365 Copilot can serve as the catalyst to implement these controls in your organization, then take advantage of that opportunity and get them in place!

The collaboration of Microsoft Purview and M365 Copilot represents a significant advancement in the realm of AI-driven productivity tools when paired with robust security measures.

By applying sensitivity labels, businesses can control who has access to different types of information, reducing the risk of unauthorized data exposure.

A fundamental recommendation is using Sensitivity labels in Purview. These labels are crucial to maintaining data security and compliance, particularly when using AI tools like M365 Copilot.

As more people adopt M365 Copilot and AI technologies, implementing security controls becomes even more critical. Our latest blog post offers some valuable insights from the field that you may find helpful.

techcommunity.microsoft.com/t5/security-...

New Microsoft Purview features use AI to help secure and govern all your data | Microsoft Security B... Learn about the new Microsoft Purview features and capabilities announced at Microsoft Ignite 2023.

Great blog post on how new the Microsoft Purview features use AI to help secure and govern all your data.

www.microsoft.com/en-us/securi...

It also allows you to set guardrails around the sensitive data in Azure SQL DB, ADLS Gen2 and Azure Blob Storage in addition to M365 assets and AWS S3 - it is a massive step up in capability, and well worth the investment it will take to get across it!

Now, for the update - this preview release enables Enterprise Admins to centrally define and manage cross cutting policies across data sources in a multi-cloud environment.

With that said, today we can identify sensitive information in data assets (think Azure Blob storage or an Azure SQL database) and apply sensitivity labels to those assets with the integration between automatic labelling and the data map.

With the portal convergence of these areas, I am hoping that customers can see and consider them as the one unifying solution - we aim to provide these governance capabilities across your entire environment, not just in silos.

So, we hear the term 'Microsoft Purview' a lot, and to different people it can mean different things. To some, its the Risk and Compliance capabilities it brings, and to others its the Purview that exists within Azure.

Learn about the new Microsoft Purview portal (preview) Learn more about the new experiences in the new Microsoft Purview portal (preview).

To resolve this and to provide the ability to govern and protection your entire data estate in one place, we are combining both portals together to provide the one pane of glass you need to ensure data security across your ecosystem.

Learn about the new Microsoft Purview portal:

First up, the unified portal (take a note that it is in Preview), but you can likely already see the option to enable it. There has always been a lot of confusion as to why these are located in two different areas, one in Azure and the other in the M365 portal.

So, it's been quite the busy week in relation to not only Purview, but Microsoft as a whole with Ignite having just ended, over this week I'll be giving a recap and some of the announcements that might be pertinent to you and your organisation.

Automatic Conditional Access policies in Microsoft Entra streamline identity protection | Microsoft ... We're rolling out Microsoft-managed Conditional Access policies in Microsoft Entra that will automatically protect users.

You have likely heard the term 'secure by default', and this is yet another step in that direction.

If your using conditional access policies make sure you check it out - think it's a great way to ensure that environments are as secure as they can be!

We are pleased to announce that Microsoft Purview’s keyword highlighting feature (currently available for Sensitive Information Types) will soon be generally available for built-in trainable classifiers.

Check out the full Blog post here: techcommunity.microsoft.com/t5/security-...

So, as many people know, I am a big fan of pushing your Data Loss Prevention alerts into a SIEM like Sentinel.

If your new to this it can be confusing, so have a read through this walk-through and familiarise yourself.

Check it out here:

techcommunity.microsoft.com/t5/security-...

We have released some new content to help build skills with Protecting your Data.

This Training guide for Purview and Data Protection - walks through business needs related to Information Protection, Insider Risk Management and Data Loss Prevention!

Found here: aka.ms/DataSecurity...