This course runs for a duration of 4 days.
The class will run daily from 8 AM CT to 4 PM CT.
Class Location: Virtual LIVE Instructor Led - Virtual Live Classroom.
The Information Security Administrator course equips you with the skills needed to plan and implement information security for sensitive data using Microsoft Purview and related services. The course covers essential topics such as information protection, data loss prevention (DLP), retention, and insider risk management. You learn how to protect data within Microsoft 365 collaboration environments from internal and external threats. Additionally, you learn how to manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. You also learn how to protect data used by AI services within Microsoft environments and implement controls to safeguard content in these environments.
Who Should Attend?
As an Information Security Administrator, you plan and implement information security for sensitive data using Microsoft Purview and related services. You're responsible for mitigating risks by protecting data within Microsoft 365 collaboration environments from internal and external threats, as well as safeguarding data used by AI services. Your role involves implementing information protection, data loss prevention (DLP), retention, and insider risk management. You also manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. In this role, you collaborate with other roles responsible for governance, data, and security to develop policies that address your organization's information security and risk reduction goals. You work with workload administrators, business application owners, and governance stakeholders to implement technology solutions that support these policies and controls.
1 - Protect Sensitive Data in a Digital World
The growing need for data protection
The challenges of managing sensitive data
Protect data in a Zero Trust world
Understand data classification and protection
Prevent data leaks and insider threats
Manage security alerts and respond to threats
Protect AI-generated and AI-processed data
Module assessment
2 - Classify Data for Protection and Governance
Data classification overview
Classify data using sensitive information types
Classify data using trainable classifiers
Create a custom trainable classifier
Module assessment
3 - Review and Analyze Data Classification and Protection
Review classification and protection insights
Analyze classified data with data and content explorer
Monitor and review actions on labeled data
Module assessment
4 - Create and Manage Sensitive Information Types
Sensitive information type overview
Compare built-in versus custom sensitive information types
Create and manage custom sensitive information types
Create and manage exact data match sensitive info types
Implement document fingerprinting
Describe named entities
Create a keyword dictionary
Module assessment
5 - Create and Configure Sensitivity Labels with Microsoft Purview
Sensitivity label overview
Create and configure sensitivity labels and label policies
Configure encryption with sensitivity labels
Implement auto-labeling policies
Track and evaluate sensitivity label usage in Microsoft Purview
Module assessment
6 - Apply Sensitivity Labels for Data Protection
Foundations of sensitivity label integration in Microsoft 365
Manage sensitivity labels in Office apps
Apply sensitivity labels with Microsoft 365 Copilot for secure collaboration
Protect meetings with sensitivity labels
Apply sensitivity labels to Microsoft Teams, Microsoft 365 groups, and SharePoint sites
Module assessment
7 - Classify and Protect On-Premises Data with Microsoft Purview
Protect on-premises files with Microsoft Purview
Prepare your environment for the Microsoft Purview Information Protection scanner
Configure and install the Microsoft Purview Information Protection scanner
Run and manage the scanner
Enforce data loss prevention policies on on-premises files
Module assessment
8 - Understand Microsoft 365 Encryption
Learn how Microsoft 365 data is encrypted at rest
Understand service encryption in Microsoft Purview
Explore customer key management using Customer Key
Learn how data is encrypted in-transit
9 - Protect Email with Microsoft Purview Message Encryption
Understand message encryption
Plan for Microsoft Purview Message Encryption
Configure Microsoft Purview Message Encryption
Customize encrypted email branding with Microsoft Purview
Control encrypted email access with Advanced Message Encryption
Use Microsoft Purview Message Encryption templates in mail flow rules
Module assessment
10 - Prevent Data Loss with Microsoft Purview
Data loss prevention overview
Plan and design DLP policies
Understand DLP policy deployment and simulation mode
Create and manage DLP policies
Integrate Adaptive Protection with DLP
Use DLP analytics (preview) to identify data risks
Understand DLP alerts and activity tracking
Module assessment
11 - Implement Endpoint Data Loss Prevention (DLP) with Microsoft Purview
Endpoint data loss prevention (DLP) overview
Understand the endpoint DLP implementation workflow
Onboard devices for endpoint DLP
Configure settings for endpoint DLP
Create and manage endpoint DLP policies
Deploy the Microsoft Purview browser extension
Configure just-in-time (JIT) protection
Module assessment
12 - Configure DLP Policies for Microsoft Defender for Cloud Apps and Power Platform
Configure data loss prevention policies for Power Platform
Integrate data loss prevention in Microsoft Defender for Cloud Apps
Configure policies in Microsoft Defender for Cloud Apps
Manage data loss prevention violations in Microsoft Defender for Cloud Apps
Module assessment
13 - Investigate and Respond to Microsoft Purview Data Loss Prevention Alerts
Understand data loss prevention (DLP) alerts
Understand the DLP alert lifecycle
Configure DLP policies to generate alerts
Investigate DLP alerts in Microsoft Purview
Investigate DLP alerts in Microsoft Defender XDR
Investigate DLP alerts with Security Copilot and AI agents
Respond to DLP alerts
Module assessment
14 - Understand Retention in Microsoft Purview
Overview of retention and the data lifecycle
Understand retention labels and retention policies
Decide when to apply retention
Module assessment
15 - Implement and Manage Microsoft 365 Retention and Recovery
Plan for retention and disposition with retention labels
Create and publish retention labels
Create and manage auto-apply retention labels
Create and configure adaptive scopes
Create and configure retention policies
Understand policy and label precedence in Microsoft Purview
Recover content in Microsoft 365 workloads
Module assessment
16 - Understand Microsoft Purview Insider Risk Management
What is an insider risk?
Microsoft Purview Insider Risk Management overview
Microsoft Purview Insider Risk Management features
Case study: Protect sensitive data with Insider Risk Management
Module assessment
17 - Prepare for Microsoft Purview Insider Risk Management
Plan for Insider Risk Management
Prepare your organization for Insider Risk Management
Configure settings for Insider Risk Management
Integrate Insider Risk Management with data sources and tools
Module assessment
18 - Create and Manage Insider Risk Management Policies
Understand Insider Risk Management policy templates
Compare quick and custom insider risk policies
Create a custom Insider Risk Management policy
Manage policies in Insider Risk Management
Module assessment
19 - Investigate Insider Risk Alerts and Related Activity
Understand insider risk alerts and investigations
Manage alert volume in insider risk management
Investigate and triage insider risk alerts in Microsoft Purview
Investigate insider risk alerts with Security Copilot and AI agents
Analyze alert context with the All risk factors tab
Investigate activity details with the Activity explorer tab
Review patterns over time with the User activity tab
Investigate insider risk alerts in Microsoft Defender XDR
Manage and take action on insider risk cases
Module assessment
20 - Implement Adaptive Protection in Insider Risk Management
Adaptive Protection overview
Understand and configure risk levels in Adaptive Protection
Configure Adaptive Protection
Manage Adaptive Protection
21 - Search and Investigate with Microsoft Purview Audit
Microsoft Purview Audit overview
Configure and manage Microsoft Purview Audit
Conduct searches with Audit (Standard)
Audit Microsoft Copilot for Microsoft 365 interactions
Investigate activities with Audit (Premium)
Export audit log data
Configure audit retention with Audit (Premium)
Module assessment
22 - Search for Content with Microsoft Purview eDiscovery
Understand eDiscovery and content search capabilities
Prerequisites for using eDiscovery in Microsoft Purview
Create an eDiscovery search
Conduct an eDiscovery search
Export eDiscovery search results
Module assessment
23 - Understand How to Secure AI Data with Microsoft Purview
Understand AI data security risks
Understand how Microsoft Purview secures AI data
Evaluate compliance risks for AI usage
Identify AI-related data exposure risks
Understand how Microsoft Purview controls AI data access
Detect and respond to risky AI activity
Retain and search Copilot prompts and responses
Module assessment
24 - Secure Microsoft 365 Copilot Interactions with Microsoft Purview
Understand how Microsoft 365 Copilot changes data protection needs
Assess Copilot regulatory compliance with Compliance Manager
Audit Copilot interactions with Microsoft Purview
Analyze Copilot interactions with Communication Compliance
Classify and protect Copilot content with sensitivity labels
Apply DLP policies to Microsoft 365 Copilot
Apply retention policies to Copilot prompts and responses
Investigate and delete Copilot activity with eDiscovery
Module assessment
25 - Secure Enterprise and Browser-Based AI Apps with Microsoft Purview
Understand risks from enterprise and non-Microsoft AI tools
Assess AI usage for security and compliance
Identify policy violations with Communication Compliance
Detect risky AI usage with Insider Risk Management
Protect sensitive data in AI apps with Microsoft Purview DLP
Case study: Use Adaptive Protection to respond to AI-related risk
Apply retention policies to AI app prompts and responses
Module assessment
26 - Secure Developer AI Environments with Microsoft Purview
Understand risks and responsibilities in AI development environments
Discover and assess AI apps with DSPM for AI
Classify, restrict, and retain AI prompt data
Enforce protections in Microsoft Foundry and Foundry Tools
Apply controls for Microsoft Entra-registered custom AI apps
Secure AI agents built in Copilot Studio
Manage data risks in Copilot in Fabric
Investigate and respond to risky AI activity
Module assessment
Familiarity with Microsoft Purview compliance solutions
Basic understanding of data protection and security concepts
Foundational knowledge of Microsoft security and compliance technologies
Awareness of Microsoft 365 data governance capabilities
