SC-401: Protect sensitive information with Microsoft Purview in the AI era

This course equips you with the skills needed to plan and implement information security for sensitive data using Microsoft Purview and related services. The course covers essential topics such as information protection, data loss prevention (DLP), retention, and insider risk management.

You learn how to protect data within Microsoft 365 collaboration environments from internal and external threats. Additionally, you learn how to manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. You also learn how to protect data used by AI services within Microsoft environments and implement controls to safeguard content in these environments.

As an Information Security Administrator, you plan and implement information security for sensitive data using Microsoft Purview and related services. You're responsible for mitigating risks by protecting data within Microsoft 365 collaboration environments from internal and external threats, as well as safeguarding data used by AI services.

Your role involves implementing information protection, data loss prevention (DLP), retention, and insider risk management. You also manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. In this role, you collaborate with other roles responsible for governance, data, and security to develop policies that address your organisation's information security and risk reduction goals. You work with workload administrators, business application owners, and governance stakeholders to implement technology solutions that support these policies and controls.

Before attending this course, students should be familiar with all Microsoft 365 services, PowerShell, Microsoft Entra, the Microsoft Defender portal, and Microsoft Defender for Cloud Apps.

After completing this course, students will be able to:

• Implement information protection
• Implement data loss prevention and retention
• Manage risks, alerts, and activities

Implement Information Protection

• Protect sensitive data in a digital world
• Classify data for protection and governance
• Review and analyse data classification and protection
• Create and manage sensitive information types
• Create and configure sensitivity labels with Microsoft Purview
• Apply sensitivity labels for data protection
• Understand Microsoft 365 encryption
• Deploy Microsoft Purview Message Encryption

Implement and manage data loss prevention

• Prevent data loss in Microsoft Purview
• Implement endpoint data loss prevention (DLP) with Microsoft Purview
• Configure DLP policies for Microsoft Defender for Cloud Apps and Power Platform
• Implement Adaptive Protection in Insider Risk Management

Implement and manage Microsoft Purview Insider Risk Management

• Understand Microsoft Purview Insider Risk Management
• Prepare for Microsoft Purview Insider Risk Management
• Create and manage Insider Risk Management policies
• Implement Adaptive Protection in Insider Risk Management

Protect data in AI environments

• Manage AI data security challenges with Microsoft Purview
• Manage compliance with Microsoft Purview for Microsoft 365 Copilot
• Identify and mitigate AI data security risks

Implement and manage retention in Microsoft Purview

• Introduction to information security and compliance in Microsoft Purview
• Implement and manage retention with Microsoft Purview