Information Security Administrator

The course aims to provide IT professionals with the knowledge and practical skills to protect and govern data across Microsoft 365 environments. It focuses on implementing data loss prevention, information protection, insider risk management, and compliance solutions using Microsoft Purview.

This course is intended for information protection and compliance professionals, security administrators, and IT professionals responsible for implementing data loss prevention, information protection, and compliance solutions in Microsoft 365 environments. It is also suitable for individuals preparing for the Microsoft Certified: Information Security Administrator Associate certification.

• Explain the capabilities and components of Microsoft Purview;
• Classify and protect data using sensitivity labels;
• Implement data loss prevention (DLP) policies across Microsoft 365 services;
• Configure information protection for Microsoft 365 workloads;
• Manage insider risk policies and analyze alerts;
• Set up and manage data lifecycle and records management policies;
• Monitor compliance and respond to data protection incidents;
• Use Microsoft Purview to govern and secure data used by AI and collaboration tools.

Before attending this course, participants should have:

• A fundamental understanding of Microsoft security and compliance technologies.
• Basic knowledge of Microsoft 365 services and workloads, such as Exchange, SharePoint, and Teams.
• Experience with identity and access management concepts.
• Familiarity with data protection concepts and regulatory compliance standards.

Participants will use official digital course materials provided through the Microsoft Learn platform, ensuring up-to-date and interactive learning content.
The course also includes access to a hands-on lab environment, allowing students to practice real-world scenarios and reinforce their knowledge through guided exercises.

Microsoft Certified: Information Security Administrator Associate certification exam (SC-401) (the exam fee is already included in the course price).

1. Implement Information Protection

Lessons:

• Protect sensitive data in a digital world;
• Classify data for protection and governance;
• Review and analyze data classification and protection;
• Create and manage sensitive information types;
• Create and manage sensitivity labels with Microsoft Purview;
• Apply and manage sensitivity labels;
• Describe Microsoft 365 encryption;
• Deploy message encryption in Microsoft Purview.

Lab: Implement Information Protection:

• Manage compliance and security roles;
• Create and manage sensitive information types;
• Create and manage sensitivity labels;
• Deploy Microsoft Purview Message Encryption.

2. Implement and manage data loss prevention

Lessons:

• Plan and design data loss prevention policies;
• Create and manage DLP policies;
• Implement Endpoint data loss prevention;
• Investigate Microsoft Purview DLP alerts.

Lab: Implement and manage data loss prevention:

• Implement and manage DLP policies;
• Implement and manage endpoint DLP.

3. Implement and manage Microsoft Purview Insider Risk Management

Lessons:

• Plan and prepare for Insider Risk Management;
• Create and manage insider risk policies;
• Manage the insider risk management workflow;
• Investigate insider risk management activities;
• Implement Adaptive Protection in Insider Risk Management

Lab: Implement and manage Microsoft Purview Insider Risk Management:

• Implement Insider Risk Management;
• Implement Adaptive Protection.

4. Protect data in AI environments with Microsoft Purview

Lessons:

• Discover AI interactions with Microsoft Purview;
• Protect sensitive data from AI-related risks;
• Govern AI usage with Microsoft Purview;
• Assess and mitigate AI risks with Microsoft Purview.

Lab: Protect data in AI environments with Microsoft Purview:

• Create a DLP policy to prevent data exposure to generative AI tools;
• Detect risky AI usage with Insider Risk Management;
• Block Microsoft 365 Copilot from accessing labeled content;
• Run a data assessment to uncover unlabeled content risks.

5. Implement and manage retention and recovery in Microsoft Purview

Lessons:

• Understand retention in Microsoft Purview;
• Implement and manage retention and recovery in Microsoft Purview.

Lab: Implement and manage retention and recovery in Microsoft Purview:

• Create and publish a retention label;
• Apply retention labels using auto-apply conditions;
• Use static and adaptive retention policies;
• Recover deleted SharePoint content to support investigation or restore access.

6. Audit and search activity in Microsoft Purview

Lessons:

• Search and investigate with Microsoft Purview Audit;
• Search for content with Microsoft Purview eDiscovery.

Lab: Implement and manage retention and recovery in Microsoft Purview:

• Search the Audit log;
• Perform a content search.

7. Validate sensitivity, DLP, and retention policies

Lab: Validate sensitivity, DLP, and retention policies