SC-400: Microsoft Information Protection Administrator Course Outline
Overview
Learn how to protect information in your Microsoft 365 deployment. This course focuses on data governance and information protection within your organization. The course covers implementation of data loss prevention policies, sensitive information types, sensitivity labels, data retention policies and Office 365 message encryption among other related topics. The course helps learners prepare for the Microsoft Information Protection Administrator exam (SC-400).
Audience profile
The Information Protection Administrator plans and implements controls that meet organizational compliance needs. This person is responsible for translating requirements and compliance controls into technical implementation. They assist organizational control owners to become and stay compliant. They work with information technology (IT) personnel, business application owners, human resources, and legal stakeholders to implement technology that supports policies and controls necessary to sufficiently address regulatory requirements for their organization. They also work with the compliance and security leadership such as a Chief Compliance Officer and Security Officer to evaluate the full breadth of associated enterprise risk and partner to develop those policies. This person defines applicable requirements and tests IT processes and operations against those policies and controls. They are responsible for creating policies and rules for content classification, data loss prevention, governance, and protection.
Job role: Administrator, Information Protection Administrator, Risk Practitioner, Security Engineer
Preparation for exam: SC-400
Skills gained
• Explain and use sensitivity labels.
• Configure Data Loss Prevention policies.
• Secure messages in Office 365.
Prerequisites
Before attending this course, students should have:
• Foundational knowledge of Microsoft security and compliance technologies.
• Basic knowledge of information protection concepts.
• Understanding of cloud computing concepts.
• Understanding of Microsoft 365 products and services.
COURSE OUTLINE
Module 1: Implement Information Protection in Microsoft 365
Organizations require information protection solutions to protect their data against theft and accidental loss. Learn how to protect your sensitive information. Learn how Microsoft 365 information protection and governance solutions help you protect and govern your data, throughout its lifecycle – wherever it lives, or wherever it travels. Learn about the information available to help you understand your data landscape and know your data. Learn how to use sensitive information types to support your information protection strategy. Learn about how sensitivity labels are used to classify and protect business data while making sure that user productivity and their ability to collaborate are not hindered.
Lessons
Introduction to information protection and governance in Microsoft 365
Classify data for protection and governance
Create and manage sensitive information types
Describe Microsoft 365 encryption
Deploy message encryption in Office 365
Configure sensitivity labels
Apply and manage sensitivity labels
Lab : Implement Information Protection
Assign permissions for compliance
Manage Office 365 message encryption
Manage Sensitive Information Types
Manage Trainable Classifiers
Manage Sensitivity Labels
Module 2: Implement Data Loss Prevention in Microsoft 365
In this module we discuss how to implement data loss prevention techniques to secure your Microsoft 365 data. Learn how to discover, classify, and protect sensitive and business-critical content throughout its lifecycle across your organization. Learn how to configure and implement data loss prevention policies and integrate them with Microsoft Cloud App Security. Learn how to respond to and mitigate data loss policy violations.
Lessons
Prevent Data loss in Microsoft 365
Implement Endpoint data loss prevention
Configure DLP policies for Microsoft Cloud App Security and Power Platform
Manage DLP policies and reports in Microsoft 365
Lab : Implement Data Loss Prevention
Manage DLP policies
Mange Endpoint DLP
Test DLP policies
Mange DLP reports
Module 3: Implement Information Governance in Microsoft 365
In this module you will learn how to plan and implement information governance strategies for an organization. Learn how to manage your content lifecycle using solutions to import, store, and classify business-critical data so you can keep what you need and delete what you don't. Learn how to manage retention for Microsoft 365, and how retention solutions are implemented in the individual Microsoft 365 services. Learn how to use intelligent classification to automate and simplify the retention schedule for regulatory, legal, and business-critical records in your organization.
Lessons
Govern information in Microsoft 365
Manage data retention in Microsoft 365 workloads
Manage records in Microsoft 365
Lab : Implement Information Governance
Configure Retention Labels
Implement Retention Labels
Configure Service-based Retention
Use eDiscovery for Recovery
Configure Records Management
View outline in Word
ASC400