This document summarizes the key steps for taking a team approach to adopting Azure Information Protection in an organization: 1. Planning involves defining labels, protection controls, and pilot users. 2. Configuration includes setting up classification, labeling, and protection policies. 3. Adoption requires training users through materials like labeling wizards and an AIP bot. 4. Demos showcase how AIP provides persistent protection of files across apps like Word, SharePoint, and mobile devices.

1. Azure Information Protection Taking a Team Approach
From Planning to Adoption
Hartford Office 365 User GroupApril 19, 2018

3. Hi! I’m Joanne!
@JoanneCKlein
joannecklein@nexnovus.com
joannecklein.com
SharePoint & Office 365 consultant | Speaker | Trainer | Mentor | Saskatchewan SharePoint & Office 365 UG

7. 3
2
1
4
Planning
Configuration
Adoption
Demos

8. Why is AIP important?

9. Your perimeter
Company internal

10. Your perimeter
Company internal
Mobility
Managed Devices

11. Your perimeter
Company internal
Mobility
Managed Devices
External Sharing
Secured Data

12. Your perimeter
Company internal
Mobility
Managed Devices
External Sharing
Secured Data
Other SaaS apps
Box, G Suite, AWS,
Dropbox…

13. How can we manage
and protect this
information?

14. Microsoft Information Protection

15. Microsoft Information Protection

16. A Data-Centric Approach
Old World Model
“Catch everything before it
leaks”
New World Model
“Data is born being classified,
labeled & protected”

17. Azure Information Protection
… provides persistent
data protection by
identifying sensitive data,
classifying, labeling and
protecting at the time of
creation or modification

18. IT
Administrator
s
Information
Managers
Adoption
Specialists

19. What should our
labels be? Keep it
simple!
How will users
know which label to
apply?
Do we know what the
protection controls are
for our organization?
What kind of
Office 365
license do we
have?
Should we have a pilot
group? Who’s on it?

20. Classification
and
Labeling
Protection
and
Use Rights
Tracking
and
Reporting

24. File is
created
and
labeled in
Word

25. File is
created
and
labeled in
Word
Collaboration
on file happens
in SharePoint
Online

26. File is
created
and
labeled in
Word
Collaboration
on file happens
in SharePoint
Online
User opens
the file on
their mobile
device

27. File is
created
and
labeled in
Word
Collaboration
on file happens
in SharePoint
Online
User opens
the file on
their mobile
device
User uploads
it to other
SaaS app for
sharing

28. Classification
Labeling

32. Tip 1
Pick
standard
labels

33. Resonate
with
users
Not use
jargon or
acronyms

34. Non-Business
Public
General
Confidential
Highly Confidential
Low business impact
Medium business
impact
High business impact

35. Wide Open
Keep it in the Family
Lock it down

36. Tip 2
Create
sub-labels

37. HR Finance Legal
“Sensitive data” departments

38. Risk of
internal
consumption
Need for
external
consumption
Someone has
to manage
these!
Too many
choices!

39. Tip 3
Use scoped
policies

40. Secret
Project
Board
Members
Specialized
Team
Only members of the ‘Project Joanne’ team will see this

41. Demo
AIP Scoped Policies

42. Tip 4
Encourage
right user
behaviour

43. 1
User-driven
2 3
Recommended
Automatic
Start here

44. 1
2
3

46. Demo
AIP Policy Recommendations
** Preview – Continuous scan

47. 1
Windows
Service
2 3
Configures SQL
Service DB
Define
repositories:
- Local folders
- UNC paths
- SP Server URLs
4
Run AIP
Scanner to
scan files to
set label

49. Tip 5
Protect and
Enforce

50. Classification
Labeling
Encryption
Access Control
Policy Enforcement

53. Demo
Azure RMS Protection

54. Confidential All Employees Highly Confidential All Employees
“Read and Edit” “Read Only”

58. Classification
Labeling
Encryption
Access Control
Policy Enforcement
Document Tracking
Document Revocation

59. https://track.azurerms.com

60. Who?
When?
Where?
Revoke
Exclude

61. Demo
Azure Document Tracking

62. Classification
Labeling
Encryption
Access Control
Policy Enforcement
Document Tracking
Document Revocation

63. Feature Free AIP for
Office 365
AIP Premium P1 AIP Premium P2
Classification and
consumption
Automatic &
Recommended labels
Protection for EXO,
SPO, ODFB
AIP Scanner
Doc Tracking &
Revocation
AIP Content
consumption
Office 365 Message
Encryption
https://azure.microsoft.com/en-us/pricing/details/information-protection/

64. Don’t forget about Training & Adoption!
Download the ‘AIP End User Adoption Guide’
Itallcomesdowntothis…

65. Classification
Wizard
Labeling
101
Training
Events
Ask the
AIP Bot
Why is data
protection
important?
• Retention
• Disposition
• DLP
• External Sharing

68. Don’t try to solve it all (0 to 100)Don’t
Start with classificationStart
Apply protection/controls for small use-
cases
Next
Educate users in your org!Do

69. Feature When
Ability to apply AIP label in Office Online apps Preview H1 2018
Combined AIP and Retention Labels Private Preview Now
Cloud App Security and AIP integration Public Preview Now

70. @JoanneCKlein joannecklein.com