Take a team approach to implementing AIP in your organization. This slide deck walks thru the planning, configuration and some examples of how to use it in the real world.

1. SharePoint Saturday Montreal#SPSMontreal
SharePoint Saturday
Montreal 2018
Le 2 juin 2018
Azure Information Protection
Taking a Team Approach From Planning to Adoption
Joanne Klein and Charmaine Lee
Microsoft MVP and MSP

3. SharePoint Saturday Montreal#SPSMontreal
Gold
Bronze
Thanks to our sponsors !

4. Hi! I’m Joanne!
@JoanneCKlein
joannecklein@nexnovus.com
joannecklein.com
SharePoint & Office 365 consultant | Speaker | Trainer | Mentor | Saskatchewan SharePoint & Office 365 UG

5. @charmaine_klee
/charmaineklee
charmaineklee.com
2nd Year CS Student @ UBC
Intern @ Microsoft

9. 3
2
1
4
Planning
Configuration
Adoption
Demos (recorded)

10. Why is AIP important?

11. Your perimeter
Company internal

12. Your perimeter
Company internal
Mobility
Managed Devices

13. Your perimeter
Company internal
Mobility
Managed Devices
External Sharing
Secured Data

14. Your perimeter
Company internal
Mobility
Managed Devices
External Sharing
Secured Data
Other SaaS apps
Box, G Suite, AWS,
Dropbox…

15. How can we manage
and protect this
information?
Microsoft
Information
Protection

16. Microsoft Information Protection

17. A Data-Centric Approach
Old World Model
“Catch everything before it
leaks”
New World Model
“Data is born being classified,
labeled & protected”

18. Azure Information Protection
… provides persistent
data protection by
identifying sensitive data,
classifying, labeling and
protecting at the time of
creation or modification

19. File is
created
and
labeled in
Word

20. File is
created
and
labeled in
Word
Collaboration
on file happens
in SharePoint
Online

21. File is
created
and
labeled in
Word
Collaboration
on file happens
in SharePoint
Online
User opens
the file on
their mobile
device

22. File is
created
and
labeled in
Word
Collaboration
on file happens
in SharePoint
Online
User opens
the file on
their mobile
device
User uploads
it to other
SaaS app for
sharing

23. IT
Administrator
s
Information
Managers
Adoption
Specialists

24. What should our
labels be? What
controls should
they have?
Should we have a pilot
group? Who’s on it?
Do we know what the
protection controls are
for our organization?
What kind of Office
365 license do we
have?

25. Classification
and
Labeling
Protection
and
Use Rights
Tracking
and
Reporting

26. AIP licensing: https://azure.microsoft.com/en-us/pricing/details/information-protection/

28. Classification
Labeling

33. Tip 1
Pick
standard
labels

34. Resonate
with
users
Not use
jargon or
acronyms

35. Non-Business
Public
General
Confidential
Highly Confidential
Low business impact
Medium business
impact
High business impact

36. Wide Open
Keep it in the Family
Lock it down

37. Tip 2
Create
sub-labels

38. HR Finance Legal
“Sensitive data” departments

39. Risk of
internal
consumption
Need for
external
consumption
Someone has
to manage
these!
Beware of
too many
choices!

40. Tip 3
Use scoped
policies

41. Secret
Project
Board
Members
Specialized
Team

42. Demo
AIP Scoped Policies

43. Tip 4
Encourage
right user
behaviour

44. 1
User-driven
2 3
Recommended
Automatic
Start here

45. 1
2
3

48. Demo
AIP Policy Recommendations

49. 1
Windows
Service
2 3
Configures SQL
Server DB
Define
repositories:
- Local folders
- UNC paths
- SP Server URLs
4
Run AIP
Scanner to
scan files to
set label

51. Tip 5
Protect and
Enforce

52. Classification
Labeling
Encryption
Access Control
Policy Enforcement

54. Word, Excel, PowerPoint Protected PDF Email Other file types
Office 2010/2013/2016 AIP Client
RMS Sharing app
Foxit Reader
Nitro PDF Reader
**NOT Adobe!
Outlook 2010/2013/2016 AIP Client
RMS Sharing app

56. Demo
Azure RMS Protection

57. Classification
Labeling
Encryption
Access Control
Policy Enforcement
Document Tracking
Document Revocation

58. https://track.azurerms.com

59. Who?
When?
Where?
Revoke
Exclude

60. Demo
Azure Document Tracking

61. Classification
Labeling
Encryption
Access Control
Policy Enforcement
Document Tracking
Document Revocation

63. Don’t forget about Training & Adoption!
Download the ‘AIP End User Adoption Guide’
docs.microsoft.com/en-us/information-protection/get-started/scenario-sharepoint
Itallcomesdowntothis…

64. Classification
Wizard
Labeling
101
Training
Events
Ask the
AIP Bot
Why is data
protection
important?

70. Don’t try to solve it all (0 to 100)Don’t
Start with classificationStart
Apply protection/controls for small use-
cases
Next
Educate users in your org!Do

72. @JoanneCKlein joannecklein.com
@charmaine_klee charmaineklee.com