Purview sensitivity labels: starter rollout
Overview
Labels classify and protect documents and emails. Start small to avoid user fatigue.
Phase 1
- Define 3–5 labels max (Public, Internal, Confidential, Highly Confidential).
- Configure encryption only on highest tier initially.
- Default label for least sensitive sites/libraries after pilot.
Phase 2
Auto-labeling policies for credit card or PII patterns in SharePoint—tune false positives.
Change management
Executive sponsor, desk cheat sheet, and Teams office hours beat long policy PDFs.
Metrics
Label usage analytics; shrink over-classification if productivity tanks.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...