Implementation of Sensitivity Labels in Microsoft 365

ITeOn has implemented an additional important step towards information security – a full implementation of Microsoft Sensitivity Labels. The goal of the project was to ensure control over sensitive information in the organization by automating its classification, restriction and protection, in accordance with internal policies and external regulations. The main activities included:

• Analysis of sensitive data types and internal workflow – in order to define labels corresponding to the real operational need (for example: Internal, Confidential, Management Only, etc.);
• Configuration of Sensitivity Labels in Microsoft Purview, with automated actions such as: document encryption; restriction of forwarding and sharing; keeping access logs;
• Attaching labels to files in OneDrive, SharePoint and Teams, with policies for automatic application depending on content or location;
• Integration with Microsoft Defender for Cloud Apps, for advanced threat management, DLP and Shadow IT monitoring;
• Training of key users and administrators, including documentation of processes and best practices.

The result: the organization has a clear, flexible and sustainable data classification and protection structure that grows with the business and guarantees peace of mind when working with sensitive information – both internally and when communicating with partners.