Microsoft Purview Data Loss Prevention Reviews

I currently work in the financial domain, and we have very strict regulations from national banks and the group side. Domain-related improvements could be really useful for organizations and banks. For example, sensitive information types are the basic level of information protection, similar to the Purview model. We start with creating or duplicating sensitive insights and editing them. I am talking about more sensitive information types that align with European regulations, especially in the financial sector. Having more variety would be beneficial. All of the EU considers sensitive information types in finance, but we need more variety, especially as a Ukrainian company. We face a lack of attention to our region, despite having the same strict regulations as EU companies. One point of improvement is related to organization and language issues. For instance, we use different sensitive information types for France, the UK, and other countries where we have offices. Unfortunately, Microsoft doesn't support the Ukrainian language, unlike Chinese and Japanese languages, which have deeper layers of understanding of information. It would be helpful to add support for Ukrainian. However, I understand that we are essentially bilingual, using both English and Ukrainian in our companies, and we are a minority in terms of languages. Other solutions, like ERP systems, offer localization for Ukraine and have partnerships with companies. Microsoft 365 also supports the Ukrainian language from a user perspective. However, unfortunately, Defender and Azure lack deeper settings. They do not provide language options beyond the ones already available, so our language option is missing. Purview includes sensitive info types covering a wide range of languages and country specifications. For instance, it includes passport numbers for Ukraine, but we also need a sensitive input type for our tax numbers. Currently, there is no option for our tax numbers, which forces us to duplicate the data. In contrast, they include all sorts of options such as driver's license numbers and insurance policy numbers for EU companies. It would be beneficial to have those presets available for us as well.

One of the valuable features of Purview is the ability to create a legal hold on a user's account within the compliance portal. That's pretty useful when it comes to any litigation or if you want to redeem the content within a mailbox, OneDrive, or a generic public SharePoint site. If you want to retain the user's data until the case is resolved, you can use the legal hold feature. Also, it's important that Purview can connect to iOS, Mac, and Android devices. With smartphone involvement, so many applications can now be accessed through them and it is important to apply Purview across operating systems and platforms. Purview's natively integrated compliance across Azure Dynamics and Office 365 is also significant because within Microsoft 365 there are multiple applications. Irrespective of whether it's Dynamics or Azure, it's very important that it has native support. The data connectivity should be efficient enough to support and secure their own platform's data. In addition, with varying regulations in different industries and matters, Purview lets you create rules and conditions based on industry standards around the world. That is important. Our company is in pharmaceuticals and the rules and conditions are different from other industries. It is important to be able to keep track of all these regulations and have a tool that is flexible enough to create the regulatory rules and conditions we need. And when it comes to data loss protection, Purview has features that can recognize patterns and detect any sort of data loss, where the data is being transferred from its platform to a different one. The default settings that come with it are pretty nice for identifying data transfer or data loss across the platform. It also comes with a lot of training materials, with use cases and examples, to help educate users and make them familiar with the tool.

Only people with permission can access the document when we share a document in Microsoft Teams. We need to have good business processes to use the product. It is important to me that Purview can connect to iOS, Mac, and Android devices. If Carbon Black is installed in our system, we must put it on passive mode while using Microsoft Purview. The product is very well integrated. We do not have to pay more to make the best use of the solution. Everything is part of the E5 license. Storage costs less compared to other products. It's very important for me that Purview was built taking into account critical regulations from all around the world. Since we share a lot of information with people from other countries, respecting their compliance and regulatory systems is crucial. Educating users is very important. Irrespective of whether it is an employee, partner, or consultant, people should be aware of how to protect themselves and the company while they work. Change management is very important. I use DLP on my iPad. I have an iPhone, and I like to have access to different systems. It's very important to me to have the flexibility to choose my endpoint. Purview has helped reduce the number of solutions I need to interact with because it integrates everything and has become an integral part of my workday. Many employees would use office computers for tax filing and other personal needs. I was working for the regulatory and governance department. When I configured Purview and scanned all the data, I could see all the information of the employees. I automate everything with metadata. If we choose the metadata option for financial documents, Purview will associate these documents with a level of confidentiality. The AI’s automation speed and accuracy of risk detection are good, but to use the features well, we should know our processes very well. The solution's AI is very sharp. We need to protect data and confidential documents. The product makes me feel secure. It ensures that the people outside our organization don't have the right to access our data. We can also automate email alerts. Microsoft releases regular updates to protect personal data. The solution’s regulations help organize our company. Overall, I rate the solution a nine out of ten.