Azure Information Protection

Azure Information Protection (sometimes referred to as AIP) is a cloud-based solution that helps an organization classify and also protect its documents and emails by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations.

To get their work done, people in your organization collaborate with others both inside and outside the organization. This means that content no longer stays behind a firewall—it can roam everywhere, across devices, apps, and services. And when it roams, you want it to do so in a secure, protected way that meets your organization’s business and compliance policies.

An example of a recent project was when all internal data was moving to Azure file shares and the client wanted each department to have its own AIP label and for this label to apply encryption. Only members of the respective department could then access those encrypted files. If those files were ever accidentally left on a USB, emailed to an incorrect recipient, or extracted by a malicious actor, the documents would remain secured and encrypted. Using the AIP scanner we were able to scan the entire file repository and apply the relevant labels to almost 1/4 million files: seen in the screenshot below.

Future of AIP is with sensitivity labels 

Information Protection will integrate with end-users’ existing workflows and the client will soon be native to all Microsoft 365 Apps including mac and mobile devices and renamed Sensitivity Labels.

Policies can be set in the cloud that prompt users to add a particular label depending on the content of their document. There are a number of pre-set detections such as credit card numbers, or account details, and you can also customize the detection of content you need to protect.

In the near future we will also be able to attach retention, DLP and even conditional access to labels so that end users can create in depth compliance and security with the selection of a single label.

For more information about MIP and sensitivity labels give us a call to discuss. You can also check out our security framework here.