Azure Information Protection Re-classification and justification Organizations no longer operate within their own perimeter. Data is traveling between users, devices, apps and services more than ever before. So how can you identify and secure your data when it’s being stored in disparate locations and shared across boundaries? Microsoft Azure Information Protection allows users to: Manually/Automatically classify data based on sensitivity. Protect sensitive data by encrypting it and allowing authorized users access to the data. Track activities on shared files and revoke access if unexpected activities are encountered. Classification labels and protection travel with the data making it identifiable and protected at all times, regardless of where it is stored or whom it is shared. CLICK STEP(S) Click anywhere on the slide to begin

After installing the Azure Information Protection client, you will be presented the Information Protection bar, which displays: Point Out: Information Protection Bar The document’s current classification. Point Out: Sensitivity: Not Set (left edge of Information Protection bar) The available classification labels to apply to a document. Point Out: Different classification labels. Before moving on, let’s label this PowerPoint presentation using the Confidential label. CLICK STEP(S) On the Information Protection bar, click Confidential.

Now that the document has been classified as Confidential, you can see that the current Sensitivity label has changed from “Not Set” to “Confidential”. Point Out: Sensitivity: Confidential CLICK STEP(S) Navigate to the second slide.

The slides now have a footer denoting the sensitivity. Point Out: Sensitivity: Confidential In addition to displaying classification labels, you can apply Rights Management Service (RMS) templates to Azure information policies as well. CLICK STEP(S) On the Ribbon, click File.

As you can see, a RMS template was also applied in addition to the classification labels. Now your document is both appropriately classified and protected from unauthorized usage. CLICK STEP(S) Click the back arrow.

Once a document has been classified, you still have the ability to change the classification, whether it needs to be upgraded or downgraded. In order to do this, you will need to click Edit Label, the pencil icon. CLICK STEP(S) On the Information Protection bar, click Edit label (the pencil icon).

By clicking the Edit Label button, you are once again presented the classification bar. For this demonstration, let’s downgrade the current label of this PPT from Confidential to Internal. CLICK STEP(S) On the Information Protection bar, click Internal.

Azure Information Protection also has a feature that can be enabled during the policy creation phase, which require users to provide a justification as to why a documents classification label is to be downgraded. Regardless of their response. the action will be permitted however it will also be tracked. CLICK STEP(S) Click in the text box.

You can say classification is no longer required or leave a message indicating the justification for the change. This information is logged and used for auditing purposes. CLICK STEP(S) Click Confirm.

As you can see here, the document’s classification label has been successfully downgraded from Confidential to Internal. Closing Statement: Azure Information Protection lets you classify, label, and protect your documents and emails. When you classify this data, persistent labels are added to the data, so that the classification is identifiable at all times, regardless of where the data is stored or with whom it’s shared. The persistent labels include visual markings such as a header, footer, or watermark. For your most sensitive data, you can also use Azure Rights Management encryption, identity, and authorization policies, to help prevent data loss. For end users, Azure Information Protection easily integrates with their existing workflows by adding an Information Protection bar to their Office applications. Azure Information Protection = Encryption + Authentication + Use Rights + Tracking