• 1. Configure protection and marking settings
• 2. Manage publishing and auto-labeling policies
• 3. Apply labels to containers and workloads

– Implement and manage data classification

• 1. Create and manage sensitive information types
• 2. Identify sensitive information requirements
• 3. Implement document fingerprinting and exact data match
• 4. Create and manage trainable classifiers

– Protect data for AI services

• 1. Manage Data Security Posture Management (DSPM) for AI
• 2. Implement controls in Microsoft Purview
• 3. Implement controls in Microsoft 365 workloads

• 1. Configure records management
• 2. Plan and implement retention policies
• 3. Manage retention labels and dispositions

– Design and implement data loss prevention (DLP)

• 1. Configure roles and permissions for DLP
• 2. Configure Adaptive Protection and integration with Defender for Endpoint
• 3. Design policies based on organizational requirements
• 4. Create and manage DLP policies and rules

• 1. Respond to DLP and insider risk alerts
• 2. Perform compliance and security investigations
• 3. Respond to alerts in Defender XDR and Defender for Cloud Apps

– Configure and manage insider risk management

• 1. Manage evidence, levels, alerts, and cases
• 2. Set up settings and policy indicators
• 3. Create and manage insider risk policies

– Manage audit and investigation capabilities

• 1. Use Activity Explorer and Content Search
• 2. Configure Microsoft Purview Audit (Premium)
• 3. Investigate activities and configure retention policies