Administering Information Protection and Compliance in Microsoft 365

Learn how to protect information in your Microsoft 365 deployment. This course focuses on data lifecycle management and information protection and compliance within your organization. The course covers implementation of data loss prevention policies, sensitive information types, sensitivity labels, data retention policies, Microsoft Purview Message Encryption, audit, eDiscovery, and insider risk among other related topics. The course helps learners prepare for the Microsoft Information Protection Administrator exam (SC-400).

Audience Profile

The information protection administrator translates an organization’s risk and compliance requirements into technical implementation. They are responsible for implementing and managing solutions for content classification, data loss prevention (DLP), information protection, data lifecycle management, records management, privacy, risk, and compliance. They also work with other roles that are responsible for governance, data, and security to evaluate and develop policies to address an organization's risk reduction and compliance goals. This role assists workload administrators, business application owners, human resources departments, and legal stakeholders to implement technology solutions that support the necessary policies and controls.

Course Syllabus

SC-400: Implement Information Protection in Microsoft 365

• Introduction to information security and compliance in Microsoft Purview
• Classify data for protection and governance
• Create and manage sensitive information types
• Understand Microsoft 365 encryption
• Deploy Microsoft Purview Message Encryption
• Create and configure sensitivity labels with Microsoft Purview
• Apply sensitivity labels for data protection

SC-400: Implement Data Loss Prevention

• Prevent data loss in Microsoft Purview
• Implement endpoint data loss prevention (DLP) with Microsoft Purview
• Configure DLP policies for Microsoft Defender for Cloud Apps and Power Platform
• Manage data loss prevention policies and reports in Microsoft 365

SC-400: Implement Data Lifecycle and Records Management

• Manage the data lifecycle in Microsoft Purview
• Manage data retention and deletion in Microsoft 365 workloads
• Manage records in Microsoft Purview

SC-400: Monitor and investigate data and activities by using Microsoft Purview

• Explore compliance in Microsoft 365
• Search for content in the Microsoft Purview compliance portal
• Manage Microsoft Purview eDiscovery (Standard)
• Manage Microsoft Purview eDiscovery (Premium)
• Search and investigate with Microsoft Purview Audit

SC-400: Manage Insider and Privacy Risk in Microsoft 365

• Prepare Microsoft Purview Communication Compliance
• Manage insider risk in Microsoft Purview
• Implement Adaptive Protection in Insider Risk Management
• Implement Microsoft Purview Information Barriers
• Manage regulatory and privacy requirements with Microsoft Priva
• Implement privileged access management
• Manage Customer Lockbox