A summary of Microsoft Purview tools

The new Microsoft Purview is a comprehensive set of solutions to help govern, protect, and manage your entire data estate. This new brand family combines the capabilities of the former Azure Purview and the Microsoft 365 Compliance portfolio, providing unified data governance and risk management. The benefits are it

• helps gain visibility into assets across the entire data estate.
• enables easy access to all data, security, and risk solutions. 
• helps safeguard and manage sensitive data across clouds, apps, and endpoints.
• manages end-to-end data risks and regulatory compliance.
• empowers organization to govern, protect, and manage data in new, comprehensive ways.

The full suite of combined products in the Microsoft Purview Suite announced recently here

There are 2 areas: 

Risk & Compliance – for risk, compliance and legal teams

Unified data governance – for data consumers, data engineers, data officers

The various tools are summarised below.

Microsoft Purview Audit

Helps respond to security events, forensic investigations, internal investigations, and compliance obligations. Microsoft Purview provides two auditing solutions: Audit (Standard) and Audit (Premium).

A comparison of the key capabilities

Microsoft Purview Communication Compliance

Communication compliance helps with complying with internal policies and regulatory compliance requirements. It has focused policy templates and a flexible workflow, with actionable insights to quickly resolve detected compliance issues.

 

Microsoft Purview Compliance Manager

This is a feature in the Microsoft Purview compliance portal that helps with management of organizational compliance requirements. Compliance Manager covers the entire journey, from taking inventory of the data protection risks to managing the complexities of implementing controls, staying current with regulations and certifications, and reporting to auditors.

Microsoft Purview Customer Lockbox

Customer Lockbox brings you into the approval workflow process that Microsoft uses to ensure only authorized requests allow access to your content. The audit record is logged in the audit log when a person in your organization approves or denies a Customer Lockbox request.Microsoft Purview Data Catalog

Data Catalog is an enterprise-wide metadata catalogue that enables data asset discovery. It’s a fully-managed service that lets you register, enrich, discover, understand, and consume data sources.

Microsoft Purview Data Connectors

Supported data sources , file types, and scanning concept

Microsoft Purview Data Lifecycle Management

Manage information lifecycle and records intelligently through

• Data retention and deletion: Manage risk and liability by keeping only what is needed across the entire digital estate.
• Records management: Manage high-value records while meeting the legal and regulatory requirements.
•  Automated policies: Classify and govern data at scale based on file properties, the presence of sensitive data, or machine learning.
• Proof of compliance: Demonstrate compliance with label analytics insights, defensible disposal, and rich audit trails.

Microsoft Purview Records Management

To manage legal obligations to demonstrate compliance with regulations, increase efficiency with regular disposition of items that are no longer required to be retained, no longer of value, or no longer required for business purposes. The capabilities for Microsoft 365 services and apps:

• Label content as a record. 
• Migrate and manage your retention requirements with file plan. 
• Configure retention and deletion settings with retention labels. 
• Start different retention periods when an event occurs 
•  Review and validate disposition
• Export information about all disposed items
• Set specific permissions

Microsoft Purview Data Map

The Microsoft Purview data map provides the foundation for data discovery and data governance. It captures metadata about data present in analytics, software-as-a-service (SaaS), and operation systems in hybrid, on-premises, and multi-cloud environments. The Microsoft Purview data map stays up to date with its built-in scanning and classification system.

Microsoft Purview Double Key Encryption

Double Key Encryption (DKE) uses two keys together to access protected content. Microsoft stores one key in Microsoft Azure, and you store the other key.  

Microsoft Purview eDiscovery (Standard and Premium)

Electronic discovery, or eDiscovery, is the process of identifying and delivering electronic information that can be used as evidence in legal cases. Microsoft Purview provides three eDiscovery solutions: Content search, eDiscovery (Standard), and eDiscovery (Premium).

Microsoft Purview Information Barriers

A compliance solution that allows two-way communication to be restricted and collaboration between groups and users in Microsoft Teams, SharePoint Online, and OneDrive for Business.

Microsoft Purview Information Protection

To enable discovery, classification, and protect sensitive information wherever it lives or travels.These information protection capabilities tools are to know your data, protect your data, and prevent data loss.

Microsoft Purview Data Loss Prevention

Identify and help prevent risky or inappropriate sharing, transfer, or use of sensitive data on endpoints, apps, and services. Microsoft Purview Insider Risk Management

A compliance solution that enables detection, investigation, and act on malicious and inadvertent activities in your organization. Insider risk policies allow the types of risks to be defined to identify and detect, including acting on cases and escalating cases to Microsoft eDiscovery (Premium) if needed. 

Microsoft Purview governance portal

Microsoft Purview is a unified data governance service that enables a foundational understanding of on-premises, multi-cloud, operational and SaaS data.

Microsoft Purview compliance portal

The Microsoft Purview compliance portal provides easy access to the data and tools you need to manage to your organization's compliance needs.

Microsoft Purview Data Estate Insights

In Microsoft Purview Data Estate Insights, you can get an overview of the assets that have been scanned into the Data Map and view key gaps that can be closed by governance stakeholders, for better governance of the data estate.

Microsoft Purview Customer Key  Customer Key only encrypts data at rest in the cloud. It provides extra protection against viewing of data by unauthorized systems or personnel, and complements. It helps meet regulatory or compliance obligations for controlling root keys. 

Microsoft Priva is a new category of features in Microsoft Compliance Centre, providing solutions for data privacy compliance

Priva Subject Rights Requests

Subject Rights Requests, sometimes called data subject access requests (DSARs), or consumer rights requests,  enquires are sorted with workflow, automation, and collaboration capabilities for helping data search for subject data, reviewing findings, appropriate file collection, and reports. 

Priva Privacy Risk Management

Privacy Risk Management enables the set up of policies that identify privacy risks in the Microsoft 365 environment and enable easy remediation. Privacy Risk Management policies are meant to be internal guides to 

• Detect overexposed personal data so that users can secure it.
• Spot and limit transfers of personal data across departments or regional borders
• Help users identify and reduce the amount of unused personal data that you store.

Workflows - preview feature

Workflows are automated, repeatable business processes that users can create within Microsoft Purview to validate and orchestrate CUD (create, update, delete) operations on their data entities. Enabling these processes allow organizations to track changes, enforce policy compliance, and ensure quality data across their data landscape.

Policies - preview feature

Access policies in Microsoft Purview enable management access to different data systems across the entire data estate. Data access policies can be enforced through Purview on data systems that have been registered for policy.