Microsoft Purview Data Loss Prevention Reviews

Our use cases for Microsoft Purview Data Loss Prevention include particularly email egress where we're looking for certain types of data to block, primarily for data exfiltration prevention and to combat malicious traffic.

Based on what I've seen, I've anticipated that the use case where we use the most true positives helps us categorize certain emails, allowing us to decide which ones need more attention based on sensitivity, unlike someone's email about marketing.

The features have helped our organization as we can take action as necessary if something appears to be a serious violation. We can take fast corrective action as necessary.

We use it for scheduled audit log retrieval on a monthly basis. We have strictly confidential SharePoint sites and requests come in where we have to find out the activity by users, such as who has viewed specific files or pages on a particular site. The logs contain activity by users and are part of Microsoft Purview. We can run search queries against the logs to get user activity across the tenant for a particular, confidential site.

The solution has tools for creating robotic process automation and workflows and we use them to reduce manual intervention and to handle some of the manual jobs. They make things much faster and more accurate. Of course, it involves much more testing and back and forth, but once you streamline an automated process, it's easy and accurate. It saves a lot of time because you don't need to have a manual monitoring system. Rather, the system identifies things and notifies you. It can save costs on the order of 60 or 70 percent.

With automation, the quality of insights has improved a lot. Manual processes have been replaced with something like a bot. It creates a more consistent pattern that gives you proper analytics and insights into how activities are being carried out.

Also, compliance can be viewed in real time to a certain extent. A small portion is not available in real time, but 70 to 80 percent of it is accessible in real time. Overall, Purview helps us to stay on top of compliance because it handles just about all the compliance factors.

The solution is primarily used for preventing leaks - to protect us from getting information out of the company.

The data loss prevention is great. It can prevent things like credit card information from being taken. The data protection is excellent. 

We can use the solution on Windows and iOS. We mostly use it with Office 365 and ingest data sources from Microsoft.

The solution is natively integrated and compliant across Azure. It takes into account critical regulations from around the world. We need to comply with various regulations. For our business case, it's very important. 

If we can prevent information from going out, eventually, when a regulator is asking about our security measures, we can show what we've been doing. It helps us to reduce the likelihood of potential fines.

We can educate users on how to handle sensitive data. By showing the records we keep and explaining the technologies implemented, we can provide awareness to our users. 

The solution offers good visibility into our environment. Our security team can use the product to monitor and track.

Its dashboard allows us to show compliance in real-time.

We've been able to reduce the time to action on insider threats. Security permissions are always being monitored. In general, it has saved us time and money when dealing with security. It's made us become more efficient. We've increased our compliance capabilities by 25%.

We prioritize the control of sensitive data according to our classification, which closely aligns with Microsoft's classification system. Our main goal is to prevent the loss of personal secret data. To achieve this, we focus on specific data types. Our use case involves managing managers who interact with customers. The objective is to limit access to this sensitive data within different departments, allowing some groups to have access while denying it to others. We also control outgoing information through the extension line.

The basic use case scenario is as follows: when we receive sensitive personal data from a customer, we classify this information with Microsoft Purview Data Loss Prevention for information protection. The next step involves narrowing down the range of people who can access this data through recording management. The third step is to use DLP to prevent the loss of this personal information through the extension line.

The second part of the process deals with the use and storage of this information in OneDrive, SharePoint, and Teams. We label and save it within the perimeter system. Lastly, we implement retention policies and tuition policies to ensure that the controlled path of this information is secure and that it is deleted when necessary.

It's important to us that Purview can connect to iOS, Mac, and Android devices, as well as data in other SaaS apps. We also have numerous organizations with corporate devices, all of which are connected by the MDM and MAM systems within Azure and our on-premises network. Therefore, it's essentially within our perimeter. It's crucial to control the overall flow of data and information on all endpoints, including mobile devices such as tablets and phones. Almost everything is on iOS because we are currently transitioning from older Android devices and corporate devices to Apple devices. Essentially, iOS provides better control.

Purview's native integration for compliance across Azure Dynamics 365 and Office 365 is of utmost importance to us. We have high demands for compliance, and the current design of Purview greatly enhances the user experience for both administrators and regular users. The all-in-one user admin dashboard holds significant value, as it allows administrators to easily visualize connections between modules. Moreover, as administrators, we can effectively track the flow of data between these modules and understand the interconnections of the rules across different modules. This feature is truly impressive and well-implemented. In contrast, most specific cybersecurity programs tend to have more complicated dashboard interfaces, making it challenging to identify the next step in the data flow.

It is important that Purview was built taking into account critical regulations from around the world. We are part of an international group, and we collaborate with other offices and colleagues from different countries. They are currently conducting their own research and starting to implement it. We understand that we can essentially use the same rules, making it clear to everyone how it works, how it is made, and how it is built. We have already modified some default rules and sensitive information types, making it unnecessary to create them from scratch and consider all the small details. Microsoft has provided this functionality for us, and it's incredibly useful, making the entire process much quicker.

We have a plan to set up Purview for the DLP model and incorporate it as a part of our Global DLP system in the company. Currently, we are in the planning and researching phase, and there is a lot of interest in the tool. We anticipate huge potential in Microsoft tools and how they evolve, such as Azure and Entra. Having a wider range of tools gathered in one place is very convenient.

We observe the clients' weaknesses because it essentially operates through pooled solutions within the organization. Whether we use it or not, the tenant's full settings are functional. As we work, and delve deeper into research, we notice some weaker spots. At present, we are in a phase similar to the planning step, but we already perceive the potential directions that Microsoft Purview Data Loss Prevention offers for us to work on. Consequently, we have discovered a few types of information that we had not taken into consideration before, and we see that our users encounter these information types in their everyday operational activities.

Purview has the potential to reduce the number of solutions, and as a result, it has logically impacted the company's budget. On the other hand, Microsoft has been very active in updating systems over the past three years. This development potential stands out compared to other cybersecurity tools that remain relatively static. Consequently, we don't foresee much progress or development in the functional side of those tools in the near future. In contrast, Microsoft offers its customers a clear and open roadmap for the development of their tools.

The AI algorithms could significantly assist cybersecurity specialists in mitigating risks, addressing potential threats, and preventing such threats from compromising the system.

We can show our compliance in real time. The in-depth information helps to showcase to the auditor and the consultants the state, current threats, and risk alerts as well.

In addition, because of the automated alerting, it helps reduce the threat of insider attacks.

Other benefits include that Purview has helped us save time and helps us meet compliance requirements.

It's really important and very nice that Purview delivers data protection across multi-clouds and multi-platform environments. It's also definitely important for compatibility across the infrastructure that Purview can connect to iOS, Mac, and Android.

Out of 10, I would give Purview an eight for the data connector platform for supporting ingestion. And for Purview's natively integrated compliance across Azure, Dynamics 365, and Office 365, I would give it a 10 out of 10. It provides all the insights and information.

Purview's data loss protection for remediating policy violations gives quite in-depth information. Reviewing and assessing the information is definitely critical, so it's really helpful.

We also use Purview data loss prevention for macOS endpoints, and the fact that they have extended it to macOS is very important because most of our C-level and board members are using macOS. It's vital because they are sharing and accessing critical information.

Overall, it gives us quite good visibility of the estate and the data, so it's a very helpful product.

We do implementations for Endpoint DLP and the cloud-based DLP. It can prevent the exfiltration of documentation, automate the classification of documents, and look for PII. We work on any sensitive information that customers don't want to leave the environment.

The tool decreases the risk of data leakage for the organizations that we've been implementing it for, both accidental and intentional.

Our primary use case for Microsoft Purview Data Loss Prevention is mainly for the categorization and classification of data into different classifications, ensuring privacy.

One of the most effective features is the excellent reporting tool that shows any potential breaches. 

Additionally, it can be used across multiple platforms, such as Office 365 and file servers, which is a significant advantage. 

Furthermore, the policy customization feature is very useful, and we have successfully used the auto policy configuration.

I had different use cases with Microsoft Purview Data Loss Prevention. One of my customers was already working with McAfee DLP, and they migrated from McAfee DLP to Microsoft DLP. I had to do the entire migration and ensure it was working as they expected. They had selected the tool, but I had to ensure it was implemented throughout and tested. It was live in the environment as well.

In this case, I implemented Microsoft DLP for four Microsoft services, including OneDrive, Teams, SharePoint, and Exchange email. An endpoint DLP was implemented for the endpoints.

The solution's most valuable feature is the mature O365 DLP, which works with SharePoint and Teams. It works fine, but we have to make sure that we are doing it right.