Microsoft Defender External Attack Surface Management vs Microsoft Purview Communication Compliance comparison

In this era of hybrid work, shadow IT creates an increasingly serious security risk. Microsoft Defender External Attack Surface Management helps cloud security teams see unknown and unmanaged resources outside the firewall.

Communication Compliance is an insider risk solution in Microsoft 365 that helps minimize communication risks by helping you detect, capture, and act on inappropriate messages in your organization. Pre-defined and custom policies allow you to scan internal and external communications for policy matches so they can be examined by designated reviewers. Reviewers can investigate scanned email, Microsoft Teams, Yammer, or third-party communications in your organization and take appropriate actions to make sure they're compliant with your organization's message standards.

Communication Compliance policies in Microsoft 365 help you overcome many modern challenges associated with compliance and internal and external communications, including:

-Scanning increasing types of communication channels
-The increasing volume of message data
-Regulatory enforcement and the risk of fines

Additionally, there may be a separation of duties between your IT admins and your compliance management team. Communication Compliance supports the separation between configuration of policies and the investigation and review of messages. For example, the IT group for your organization may be responsible for setting up communication compliance role permissions, groups, and policies and investigators and reviewers may be responsible for message triage, review, and mitigation actions.

To learn more about our solution, ask questions, and share feedback, join our Microsoft Security, Compliance and Identity Community.