Administering Information Security in Microsoft 365

This course provides a deep dive into Microsoft Purview and related services for securing sensitive data across Microsoft 365 environments. Designed for information security administrators, this course covers the implementation of information protection, data loss prevention, retention, and insider risk management. Participants will gain hands-on experience configuring Microsoft Purview policies, mitigating security threats, and protecting organisational data from internal and external risks.

Key focus areas include:

• Implementing data classification and sensitivity labels
• Managing data loss prevention and retention policies
• Configuring insider risk management and security alerts
• Protecting data used by AI services within Microsoft 365

By the end of this course, learners will be able to:

• Implement and manage data classification and sensitivity labels in Microsoft Purview
• Design and apply data loss prevention policies to protect organisational data
• Configure retention policies and interpret policy precedence
• Implement and monitor insider risk management policies
• Investigate security alerts and audit activities within Microsoft Purview
• Protect data used by AI services with appropriate security controls

Participants should have:

• Familiarity with Microsoft 365 services, including Teams, SharePoint, and Exchange Online
• Experience with PowerShell, Microsoft Entra, Microsoft Defender portal, and Microsoft Defender for Cloud Apps
• A foundational understanding of information security concepts

Target Audience

This course is designed for:

• Information security administrators responsible for protecting organisational data
• IT professionals involved in security governance, risk management, and compliance
• Security teams collaborating with business application owners and governance stakeholders

Introduction to Microsoft Purview Security Administration

• Overview of Microsoft Purview and its role in data security
• Key security challenges in Microsoft 365 environments
• Aligning Microsoft Purview security policies with business objectives

Implementing information protection

• Identifying sensitive information requirements
• Creating and managing built-in and custom sensitive info types
• Implementing document fingerprinting and exact data match classifiers
• Monitoring data classification and label usage
• Implementing and managing sensitivity labels for Microsoft 365 applications
• Applying sensitivity labels to Microsoft Teams, Power BI, SharePoint, and Defender for Cloud Apps

Implementing data loss prevention and retention

• Designing and configuring data loss prevention (DLP) policies
• Configuring DLP policies for Adaptive Protection and Endpoint DLP
• Managing policy precedence and interpreting policy effectiveness
• Planning for information retention and disposition
• Creating and applying retention labels and policies

Managing risks, alerts, and activities

• Implementing and managing Microsoft Purview Insider Risk Management
• Configuring policy indicators and risk levels for Adaptive Protection
• Managing forensic evidence settings and insider risk alerts
• Investigating security activities using Microsoft Purview Audit
• Responding to data security incidents and Defender for Cloud Apps alerts

Protecting data used by AI services

• Implementing controls to protect AI-generated content
• Managing security and compliance in AI-powered Microsoft 365 workloads
• Configuring Data Security Posture Management (DSPM) for AI environments

Exams and Assessments

This course aligns to the SC-401 certification from Microsoft, though further study is recommended before sitting the exam.

The cost of the exam is not included with this course. Please speak to your account manager to add it to your order.

Hands-On Learning

This course includes:

• Interactive labs on configuring Microsoft Purview policies
• Real-world security scenarios and problem-solving exercises
• Guided demonstrations of Microsoft Defender and Purview Security tools