Sensitivity Labels guides
Microsoft Purview labels that classify, protect, and govern files, emails, and containers. See the glossary entry →
22 guides touch on sensitivity labels.
- Building a Microsoft 365 Center of Excellence
How to structure a CoE programme for Microsoft 365 — roles, deliverables, and the operating model.
- Customer Key for Microsoft 365
How Customer Key lets you bring your own encryption keys for Microsoft 365 service encryption — and when to use it.
- Entra ID authentication contexts
Authentication contexts let Conditional Access trigger step-up authentication for specific actions, not just specific apps.
- How to publish sensitivity labels in Microsoft Purview
How to publish sensitivity labels in Microsoft Purview: create the label set, configure encryption and marking, publish a label policy, set defaults, pilot.
- Microsoft 365 Business Premium deep dive
What Microsoft 365 Business Premium actually delivers — and why it's the right answer for most SMBs.
- Microsoft 365 Copilot data access and permissions
How Copilot decides what content to surface — permissions, sensitivity labels, and the controls that gate access.
- Microsoft 365 Copilot data security and privacy
How Microsoft 365 Copilot handles your tenant's data — what's sent to the model, what's retained, and what compliance covers.
- Microsoft 365 for small business
How to choose, set up, and run Microsoft 365 in a small business — the plan, the basics, and the security baseline.
- Microsoft 365 security and compliance
A practical tour of the Microsoft 365 security and compliance stack — Defender, Purview, Entra, and how they fit together.
- Microsoft Loop external sharing and governance
How Loop components and workspaces work with external users — and the governance considerations.
- Microsoft Purview Compliance Manager
Compliance Manager scores your tenant against compliance frameworks and tracks improvements over time.
- Microsoft Purview Data Loss Prevention — a deep dive
DLP policies detect and prevent sensitive data from leaving Microsoft 365. Here's the architecture and how to roll them out.
- Microsoft Purview records management
Records management is retention with teeth — declaring content as a record locks it for legal/regulatory compliance.
- Office 365 Message Encryption
OME is Microsoft's email encryption service — what it does, how to enable it, and what it looks like for recipients.
- Office 365 Message Encryption deep dive
How OME works under the hood — encryption flow, branding, custom templates, and the recipient experience.
- OneDrive Personal Vault
What OneDrive Personal Vault is, why it exists only in consumer OneDrive, and the equivalent protections for sensitive files in a work or school tenant.
- Power BI content certification and endorsement
How endorsement and certification surface trusted content in Power BI and Fabric — and the operational programme behind it.
- Restricted Content Discovery for Copilot
How SharePoint Restricted Content Discovery hides sensitive sites from Microsoft 365 Copilot without breaking access, how it works with labels, and its limits.
- Sensitivity labels for Teams meetings
How sensitivity labels apply to Teams meetings — controlling who can join, what's allowed, and how the meeting is protected.
- SharePoint external sharing
The layered controls that decide who outside your organisation can access SharePoint and OneDrive content — and a sane baseline configuration.
- SharePoint information architecture
How to design a SharePoint site structure that scales — hubs, sites, navigation, and the patterns that work.
- What is Microsoft Purview?
What Microsoft Purview is: labels, DLP, retention, eDiscovery, insider risk, and the data-governance catalogue — how the two halves differ and where to start.