Enhancing Microsoft MIP in an era of enhanced regulatory obligation

The data protection landscape and its associated compliance environment changed fundamentally with the implementation of the European-wide GDPR in May 2018, with many other privacy regulations following suit around the globe. It is no longer about what organisations think they need to be doing in order to control their data, but that they are being told what they need to do by regulators such as the ICO.  

by Ekron Dries

Since the implementation of such data protection regulations, record fines have been issued, and these serve as a clear statement across the board that organisations simply cannot afford to ignore or fail in their data protection compliance obligations. 

The main (but not the only) reason that organisations look at classifying the data they create and handle is to ensure that sensitive information can be controlled. A big part of designing a classification policy is understanding what data is sensitive, what is less so, and what is not. Who should have access to this information, and whether you should be holding that information, archiving or deleting it. 

Organisations have myriads of relationships with external suppliers, partners, and vendors. When designing a classification policy, other aspects need to be taken into account, such as the way we communicate with external organizations. Just as organisations thrive from inter-dependent relationships, so should their data security tools.  

Classification has the ability to make so many other tools much more effective, whether that is DLP, discovery, RMS and many other applications that are considered important in the fight to keep data secure.  

Just as there is no “one-size-fits-all”, there is also no “one-stop-shop” – no single solution or magic bullet. Instead, what is important is how the best-of-breed tools can work together to create a seamless and highly effective solution. 

Would you like to find out how combining a best-of-breed classification solution with tools such as Microsoft Information Protection (MIP) enhances your data protection?