Microsoft Purview Data Loss Prevention Review
Overall Satisfaction with Microsoft Purview Data Loss Prevention
We provide services and solutions using Microsoft products to companies that are contractors in the defense industrial base or the DOD contracting space. Our job is to help them get compliant to help them meet compliant standards. We do so by leveraging Microsoft 365 features like Purview and configuring those to incorporate principles and controls and practices of cybersecurity. So it's to secure the organization. So for us, DLP comes really important because CMMC, which is the regulatory standard which we must help our customers achieve, it's a data-centric standard - so it follows the data. Something like Purview where we can add the sensitivity labels to the data, where we can do protection of the data to stop it from unauthorized disclosure, unauthorized viewing, or whatever it may be. It's actually a real MVP for us because we're able to, because our entire compliance standard once again is data-centric and it's focused on controlled and classified information, we're able to attach DLP and sensitivity labels and things like that using Purview to the type of data that's really important to us to protect. It helps in everything: activates some of the instant response techniques, make sure that we are enforcing mechanisms and it helps us discover C, but it helps us also discover CUI within the environments when we're doing discovery for new clients and onboarding or if we're validating protections that they have in place.
Pros
- Automatic labeling, once we've trained the naming conventions and things like that and we get the labels placed on things. One of the biggest problems that our clients face is the fact that they don't particularly know every single time exactly the data that they're trying to protect, how to identify it when it comes into the system or when they create it, right? So we're using Purview and we're using the abilities that Purview has to auto-label things based off of either taxonomy that you have produced or created or that have been automatically populated through AI. That makes it a lot easier and kind of thwarts possible user error that causes problems for organizations.
Cons
- I think this is going to be everybody that has to operate primarily in GCCI, all of the cool high speed features that we can read about in Purview, making sure that they're all available in GCCI for all the clients and we know that that's a process. It has to go through vetting and things like that, but the sooner that we get the entire suite available to the GCCI customers, I think the better off we'll be.
- I think it's integral to everything, it has to be positive and the positivity has to be the ability to use Purview in a situation for an organization. For us as a provider, we're not sure if we need your services or we think we're doing this thing correctly. We also evaluate compliance team. So first thing that we may do is if we don't have a footprint in the organization and we don't know what their data parameter or their data flow capabilities are, if we don't think that they're controlling it confidently, we validate and verify. We may do a content search and that content search immediately will be the most revealing thing. They'll be like, "alright, so right here on this diagram, this and this area are the areas that you have protected that are capable of protecting CUI. How come your CUIs in all of these 18 other different areas in which you see as like scope creep happens because the enforcement mechanisms haven't been tested, validated or whatever, or haven't been effective." It allows us to do quick cleanup, quick discovery, and things like that for new onboarding clients.
Do you think Microsoft Purview Data Loss Prevention delivers good value for the price?
Yes
Are you happy with Microsoft Purview Data Loss Prevention's feature set?
Yes
Did Microsoft Purview Data Loss Prevention live up to sales and marketing promises?
Yes
Did implementation of Microsoft Purview Data Loss Prevention go as expected?
I wasn't involved with the implementation phase
Would you buy Microsoft Purview Data Loss Prevention again?
Yes


Comments
Please log in to join the conversation