{"id":86737,"date":"2018-11-26T10:15:17","date_gmt":"2018-11-26T18:15:17","guid":{"rendered":"https:\/\/cloudblogs.microsoft.com\/microsoftsecure\/?p=86737"},"modified":"2023-05-15T23:03:26","modified_gmt":"2023-05-16T06:03:26","slug":"how-to-help-maintain-security-compliance","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2018\/11\/26\/how-to-help-maintain-security-compliance\/","title":{"rendered":"How to help maintain security compliance"},"content":{"rendered":"

This is the last post in our eight-blog series on deploying Intelligent Security scenarios. To read the previous entries, check out the Deployment series page<\/a>.<\/em><\/p>\n

\"Image<\/p>\n

Your employees need to access, generate, and share organizational information ranging from extremely confidential to informal; you must ensure that all information and the movement of that information comply with industry standards without inhibiting workflow. Microsoft 365 security solutions can help you know what\u2019s happening with your data, set permissions and classifications, and discover and help prevent leaks.<\/p>\n

How can I make it easier to manage compliance processes?<\/h3>\n

To better manage compliance processes, the first thing you\u2019ll want to do is distribute the work out to compliance \u201cspecialists\u201d across your organization. The Microsoft 365 Security & Compliance Center<\/a> (Figure 1) makes this easy by providing a central location to assign people to specific compliance tasks, such as data loss prevention, eDiscovery, and data governance.<\/p>\n

\"\"<\/p>\n

Figure 1: The Microsoft 365 Security & Compliance Center Dashboard.<\/em><\/p>\n

Next, you\u2019ll need to decide on your policies and data classifications that will allow you to take actions on data. To streamline this compliance task, Microsoft Advanced Data Governance<\/a> offers automatic data classification and proactive policy recommendations\u2014such as retention and deletion policies\u2014throughout the data lifecycle. You can enable default system alerts to identify data governance risks, for example, detecting an employee deleting a large volume of files. You can also create custom alerts by specifying alert-matching conditions, thresholds, or other activities that require admin attention.<\/p>\n

How do I assess data protection controls in an ever-changing compliance landscape?<\/h3>\n

The Microsoft Security Compliance Manager<\/a> (Figure 2) provides tools to proactively manage evolving data privacy regulations. You can perform ongoing risk assessments on security, compliance, and privacy controls across 11 assessments, including these standards:<\/p>\n