Microsoft Purview

Zero Trust

FastTrack provides comprehensive guidance on implementing Zero Trust security principles. The Zero Trust model assumes breach and verifies each request as though it originates from an uncontrolled network. This approach ensures robust security across your networks, applications, and environment. FastTrack accomplishes this by focusing on identity, devices, applications, data, infrastructure, and networks. With FastTrack, you can confidently advance your Zero Trust security journey and protect your digital assets effectively.

With Microsoft Purview, you can implement Zero Trust principles by identifying and protecting your data using a Zero Trust approach. This includes classifying and labeling sensitive data, applying encryption, and enforcing data loss prevention policies. By doing so, you can ensure that your data is secure, compliant, and only accessible to authorized users.

Microsoft Purview Compliance Manager

Microsoft Purview Compliance Manager is a solution that helps you automatically assess and manage compliance across your multicloud environment.

FastTrack provides remote guidance for the following items:

• Reviewing role types.
• Adding and configuring assessments.
• Assessing compliance by implementing improvement actions and determining how this impacts your compliance score.
• Reviewing built-in control mapping and assessing controls.
• Generating a report within an assessment.

Out of scope

• Custom scripting or coding.
• Connectors.
• Compliance with industry and regional regulations and requirements.
• Hands-on implementation of recommended improvement actions for assessments in Compliance Manager.

Source environment expectations

Aside from the FastTrack core onboarding, there are no minimum system requirements.

Microsoft advanced deployment guides

Microsoft provides customers with technology and guidance to assist with deploying your Microsoft 365, Microsoft Viva, and security services. We encourage our customers to start their deployment journey with these offerings.

For non-IT admins, see Microsoft Purview setup guides.

Microsoft Purview Information Protection

Microsoft Purview Information Protection helps you discover, classify, protect, and govern sensitive information wherever it lives or travels.

FastTrack provides remote guidance for:

• Activating and configuring your tenant.
• Data classification.
• Sensitive information types.
• Creating sensitivity labels.
• Applying sensitivity labels.
• Default sensitivity labels for SharePoint document library.
• Installing and configuring the Microsoft Symantec data loss prevention (DLP) migration assistant tool.
• Understanding migration report output from the Microsoft Purview DLP migration assistant.
• Fine tuning migrated policies in the Microsoft Purview compliance portal.
• Discovering and labeling files at rest using the Microsoft Purview Information Protection scanner.
• Monitoring emails in transit using Exchange Online mail flow rules.
• Using migration guidance from the Azure Information Protection add-in to provide built-in labeling for Office apps.
• Enabling sensitivity label requirement for Microsoft Power BI in the compliance portal.
• Creating and setting up labels and policies.
• Applying information protection to documents.

FastTrack also provides guidance if you want to apply protection using Microsoft Azure Rights Management Services (Azure RMS), Office 365 Message Encryption (OME), and DLP.

The following remote guidance is available only for E5 Premium customers:

• Trainable classifiers.
• Exact Data Match (EDM) custom sensitive information types.
• Knowing your data with content explorer and activity explorer.
• Publishing labels using policies (automatic).
• Creating Endpoint DLP policies for Windows 10 (and greater) devices.
• Creating Endpoint DLP policies for macOS devices.
• Creating DLP policies for Microsoft Teams chats and channels.
• Automatically classifying and labeling information in Office apps (like Word, PowerPoint, Excel, and Outlook) running on Windows and using the Microsoft Purview Information Protection client.
• Extending sensitivity labels to Outlook appointments, invites, and Teams online meetings.

Note

For customers provisioned with Security Compute Units (SCUs), FastTrack provides a walkthrough of the embedded Microsoft Copilot in Microsoft Purview experiences within the scope covered in this topic.

Out of scope

• Customer Key.
• Custom regular expressions (RegEx) development for sensitive information types.
• Creation or modification of keyword dictionaries.
• Interacting with customer data or specific guidelines for configuration of EDM-sensitive information types.
• Custom scripting and coding.
• Azure Purview.
• Configuring Enterprise State Roaming.
• SharePoint data governance and administration.

Source environment expectations

• For more information, see FastTrack core onboarding.
• SharePoint data access government for data access planning:
  • SharePoint data access governance.
  • SharePoint advanced management overview.
  • Restricted access control policy for SharePoint sites.
  • Restricted access control policy for OneDrive.

Customer responsibilities

• A list of file share locations to be scanned.
• An approved classification taxonomy.
• Understanding of any regulatory restriction or requirements regarding key management.
• A service account created for your on-premises Active Directory synchronized with Microsoft Entra ID.
• All prerequisites for the Microsoft Purview Information Protection scanner are in place. For more information, see Prerequisites for installing and deploying the Microsoft Purview Information Protection unified labeling scanner.
• Ensure user devices are running a supported operating system and have the necessary prerequisites installed. For more information, see Admin Guide: Install the Microsoft Purview Information Protection unified labeling client for users and What is the Microsoft Purview Information Protection app for iOS or Android?
• Installation and configuration of the Azure RMS connector and servers including the Active Directory RMS (AD RMS) connector for hybrid support.
• Setup and configuration of Bring Your Own Key (BYOK), Double Key Encryption (DKE) (unified labeling client only), or Hold Your Own Key (HYOK) (classic client only) should you require one of these options for your deployment.

Microsoft advanced deployment guides

Microsoft provides customers with technology and guidance to assist with deploying your Microsoft 365, Microsoft Viva, and security services. We encourage our customers to start their deployment journey with these offerings.

For non-IT admins, see Microsoft Purview setup guides.

Microsoft Purview Data Lifecycle Management and Purview Records Management

Microsoft Purview Data Lifecycle and Purview Records Management helps you to govern your Microsoft 365 data for compliance or regulatory requirements.

FastTrack provides remote guidance for:

• Creating and applying retention policies.
• Creating and publishing retention labels.
• The following remote guidance is available only for E5 Premium customers: Creating and applying event-based retention labels.
• Creating and applying adaptive policy scopes.
• Reviewing file plan creation.
• Reviewing dispositions.
• Policy lookups.

Out of scope

• Development of a records management file plan.
• Data connectors.
• Azure Purview data governance.
• Creating and managing Power Automate flows.
• Custom scripting and coding.
• Design, architect, and third-party document review.
• Importing Outlook Data Files (PSTs) to Office 365.
• Development of information architecture in SharePoint.
• SharePoint data governance and administration.

Source environment expectations

• For more information, see FastTrack core onboarding.
• SharePoint data access government for data access planning:
  • SharePoint data access governance.
  • SharePoint advanced management overview.
  • Restricted access control policy for SharePoint sites.
  • Restricted access control policy for OneDrive.

Microsoft advanced deployment guides

Microsoft provides customers with technology and guidance to assist with deploying your Microsoft 365, Microsoft Viva, and security services. We encourage our customers to start their deployment journey with these offerings.

For non-IT admins, see Microsoft Purview setup guides.

Microsoft Purview Insider Risk Management

Purview Insider Risk Management

Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, like IP theft, data leakage, and security violations.

FastTrack provides remote guidance for:

• Creating policies and reviewing settings.
• Accessing reports and alerts.
• Creating cases.
• Enabling and configuring forensic evidence.

Note

For customers provisioned with Security Compute Units (SCUs), FastTrack provides a walkthrough of the embedded Microsoft Copilot in Microsoft Purview experiences within the scope covered in this topic.

Out of scope

• Creating and managing Power Automate flows.
• Data connectors (beyond the HR connector).
• Information barriers.
• Privileged access management.

Purview Communication Compliance

Microsoft Purview Communication Compliance provides the tools to help organizations detect regulatory compliance and business conduct violations like sensitive or confidential information, harassing or threatening language, and sharing of adult content.

FastTrack provides remote guidance for the following items:

• Creating policies and reviewing settings.
• Accessing reports and alerts.
• Creating notice templates.

Note

For customers provisioned with Security Compute Units (SCUs), FastTrack provides a walkthrough of the embedded Microsoft Copilot in Microsoft Purview experiences within the scope covered in this topic.

Out of scope

• Creating and managing Power Automate flows.
• Information barriers.

Source environment expectations

For more information, see FastTrack core onboarding.

Microsoft advanced deployment guides

Microsoft provides customers with technology and guidance to assist with deploying your Microsoft 365, Microsoft Viva, and security services. We encourage our customers to start their deployment journey with these offerings.

For non-IT admins, see Microsoft Purview setup guides.

Microsoft Purview eDiscovery & Audit

Purview eDiscovery (Premium)

Microsoft Purview eDiscovery (Premium) can help your organization respond to legal matters or internal investigations by discovering data where it lives. You can manage eDiscovery workflows by identifying persons of interest and their data sources, apply holds to preserve data, and then manage the legal hold communication process.

FastTrack provides remote guidance for:

• Creating a new case.
• Putting custodians on hold.
• Managing custodians.
• Performing searches.
• Adding search results to a review set.
• Running analytics on a review set.
• Reviewing and tagging documents.
• Exporting data from the review set.
• Importing non-Office 365 data.

Note

For customers provisioned with Security Compute Units (SCUs), FastTrack provides a walkthrough of the embedded Microsoft Copilot in Microsoft Purview experiences within the scope covered in this topic.

Out of scope

• Purview eDiscovery API.
• Data connectors.
• Compliance boundaries and security filters.
• Design, architect, and third-party document review.

Purview Audit (Premium)

Microsoft Purview Audit (Premium) helps organizations conduct forensic and compliance investigations. This is done by increasing audit log retention required to conduct an investigation, providing access to intelligent insights that help determine scope of compromise, and faster access to the Office 365 Management Activity API.

FastTrack provides remote guidance for:

• Enabling advanced auditing.
• Performing a search audit log UI and basic audit PowerShell commands.

Out of scope

• Custom scripting or coding.

Source environment expectations

For more information, see FastTrack core onboarding.

Microsoft advanced deployment guides

Microsoft provides customers with technology and guidance to assist with deploying your Microsoft 365, Microsoft Viva, and security services. We encourage our customers to start their deployment journey with these offerings.

For non-IT admins, see Microsoft Purview setup guides.