Summary

This chapter explained how DLP in Microsoft 365 can help create policies based on built-in and custom SITs. This prevents users in an organization from accidentally sharing sensitive information. We learned how to set up and modify a DLP policy and apply it to all or selected Microsoft 365 locations. We also learned how to effectively plan a DLP rollout by creating policies in test mode only, as well as how to view and interpret the reports that are available in the Microsoft Purview compliance center and also Windows PowerShell. Finally, we learned how Endpoint DLP is used to protect Windows 10 and 11 devices as well as macOS devices with device onboarding settings and DLP policies.

The next chapter will introduce the principles of data governance and retention. We will learn how to view and interpret data life cycle management reports and dashboards, configure retention labels and policies, configure retention within Microsoft 365 workloads, find and recover deleted Office...