Azure Information Protection

Classifying data is the first part of protecting our data; however, it does not automatically encrypt the data. Therefore, you need to have a product/service that can encrypt data based on the sensitivity labels that have been defined on the data.

While there are many products on the market that have this capability, we are going to focus on a service from Microsoft called Azure Information Protection.

AIP has a wide set of features; it includes a labeling client that can be installed on end users’ machines, which is integrated into the File Explorer and Office applications. This means users can automatically label files and data, which can then be automatically encrypted by the client.

AIP also has an on-premises file scanner that can be used to scan networks and file shares for sensitive content and automatically apply classification and protection labels based on policies that have been defined.

Note

AIP requires a Microsoft E5...