Forum Discussion

Sophie_Bruehl's avatar
Sophie_Bruehl
Iron Contributor
Dec 11, 2024

How Can We Extend Data Protection Beyond Microsoft 365?

Hey everyone,

 

I am running into a bit of a roadblock. I am trying to find a way to ensure consistent data classification and protection across our diverse IT landscape. While Microsoft Protection Policies are greeat for Microsoft Solutions, I'm struggling to extend that coverage to systems like SAP and our HR solution.

 

Has anyone else faced a similar challenge? I'd love to hear any tips or solutions ou've come up with.

  • Extending Microsoft Protection Policies to systems like SAP and HR solutions can indeed be challenging. However, there are tools and strategies that can help bridge this gap:

    1. HaloCORE: This solution by SECUDE extends Microsoft Purview Information Protection (MPIP) to SAP systems. It automatically applies sensitivity labels to data exports from SAP, ensuring consistent data protection without manual intervention.
    2. Endpoint Targeting: Some organizations have found success by targeting endpoints. For example, if a Microsoft laptop accesses an on-premise file, it gets labeled using existing policies.
    3. Microsoft Purview: This comprehensive information protection solution helps discover, classify, protect, and govern sensitive information across various platforms.

    Check this one: HaloCORE - Information Protection for SAP

  • duliprb's avatar
    duliprb
    Brass Contributor

    Hi Sophie_Bruehl Various businesses have different requirements, Some organizations are working hard to deep dive in to their content, while having departmental sensitivity labels. When it comes to external sources like sap or any other solution, 1. purview data maps 2. Information protection SDK 3. MIP Client, Hope these helps. 

  • kangadala's avatar
    kangadala
    Copper Contributor

    if you want to apply sensitivity label across your IT landscape. you need Governance in place. Create Domains access the assets and label the items. 

  • StaceyWAG's avatar
    StaceyWAG
    Copper Contributor

    The on-premises target is not easy.  We are still working on it, but what has helped is that we have targeted endpoints. Meaning all Microsoft laptops.  If a laptop looks at an on-premise file, then it gets labeled using our polices. It is a start.

Resources