Compliance

Question 1

Describe the Service Trust Portal

Answer 1

https://servicetrust.microsoft.com/

Provides resources (Trust docs, whitepapers, audit reports) on msft security, privacy, compliance practices.

Question 2

Describe Microsoft privacy principles.

Answer 2

• Control (you have control of your data)
• Transparency (about collection of data)
• Security (protect your data)
• Strong legal protections
• No content-based targeting
• Benefits to you (from any data collected)

Question 3

Describe Microsoft 365 Compliance Center.

Answer 3

A dedicated workspace for your compliance admins. Contains tools to track and manage compliance (legal, regulatory, and organizational) requirements.

Available to Global Admin, Compliance Admin, and Compliance Data Admin roles.

The portal has Compliance Manager, Data Classification overview, Solutions, and Alerts.

(NB: now Purview)

Question 4

Describe Compliance Manager and its key elements.

Answer 4

An e2e solution in Microsoft 365 Compliance Center for compliance admins to manage and track compliance activities.

• Compliance Score (aggregate measure of your overall compliance posture)
• Assessments (groupings of requirements using custom or prebuilt templates)
• Improvement Actions (guidance and support on actions to improve compliance posture.)

Question 5

Describe data classification capabilities of M365

Answer 5

• Sensitive Info types (based on regex patterns or exact matches)
• Trainable classifiers (for business specific documents. Pretrained or custom.)

Question 6

Describe the benefits of Content Explorer and Activity Explorer

Answer 6

Both are tabs in the Data Classification pane of the Compliance portal.

Content Explorer = for reading the contents of scanned files.

Activity Explorer = for seeing what has been done with labelled content. (e.g. file copied to network share, label changed)

Question 7

Describe sensitivity labels and policies.

Answer 7

Document labels that are customizable, clear text and persistent.

They can be configured to enable encryption, mark, protect and classify documents, emails, etc.

Labels are published to users/groups through policies. Policies can also enforce settings e.g. mandatory labels.

Question 8

Describe Data Loss Prevention (DLP)

Answer 8

DLP policies exist to protect sensitive information and prevent inadvertent disclosure.

DLP policies are configured by Conditions (IF), Actions (THEN), Locations (SCOPE).

Endpoint DLP for Devices, and DLP for Teams.

Question 9

Describe Retention Policies and Retention Labels.

Answer 9

Policies = apply to a location, items in the location inherit the policy setting, but the policy doesn’t travel with the document if it is moved.

Labels = apply to the item, travels with the item, can by used to override a policy on a location.

Question 10

Describe Records Management

Answer 10

Enables labelling content as a ‘record’. (when set up by admin, can be either manual or auto.)

Records have restrictions to block certain activities, activities are logged, proof of disposition is kept at the end of the retention period.

Question 11

Describe insider risk management.

Answer 11

Solution to detect, investigate, and act on risky and malicious insider activities.

Workflow = Policy (conditions) -> Alerts -> Triage (cases) -> Investigate (integrated case dashboard) -> Action.

Question 12

Describe communication compliance

Answer 12

Detect, capture, and remediate inappropriate messages in e.g. Teams, Exchange, or 3rd party comms apps.

Workflow (with cts Monitoring)= Configure policies -> Investigate -> Remediate

e.g. enforce corporate comms policies (offensive language), Risk Management (e.g. earnings disclosure), or regulatory compliance (insider trading etc)

Question 13

Describe Information Barriers.

Answer 13

Restrict comms between groups to protect info or avoid conflicts of interest.

MS Teams information barriers.

Question 14

Describe Azure Policy

Answer 14

• Definitions (JSON) for resources applied to a scope (resource, RG, Sub, MG)
• Evaluates (on change, or every 24hrs) if resources in scope are compliant with definition.
• Responses to evaluation depend on user specified effects (deny, alter, log, etc.)

Used in conjunction with RBAC (for users), Policies (for resources) can help achieve full scope control.

Question 15

Describe the use of Azure Blueprints.

Answer 15

Declarative way to orchestrate the deployment of resources and other artifacts.

Includes: ARM templates, Role Assignments, Policy Assignments, Resource Groups.

Question 16

Describe Microsoft Purview

Answer 16

Unified data governance service.

• Data Map: scans data, captures metadata, detects and classifies sensitive data
• Data Catalog: enables search for data
• Data Estate Insights: bird’s eye view of what has been scanned and where is sensitive data.