Information Security Administrator (SC-401) [M-SC401]

OVERVIEW

Implement information security of sensitive data by using Microsoft Purview and related services.

The Information Security Administrator course equips you with the skills needed to plan and implement information security for sensitive data using Microsoft Purview and related services. The course covers essential topics such as information protection, data loss prevention (DLP), retention, and insider risk management. You learn how to protect data within Microsoft 365 collaboration environments from internal and external threats. Additionally, you learn how to manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. You also learn how to protect data used by AI services within Microsoft environments and implement controls to safeguard content in these environments.

AUDIENCE

As an Information Security Administrator, you plan and implement information security for sensitive data using Microsoft Purview and related services. You're responsible for mitigating risks by protecting data within Microsoft 365 collaboration environments from internal and external threats, as well as safeguarding data used by AI services. Your role involves implementing information protection, data loss prevention (DLP), retention, and insider risk management. You also manage security alerts and respond to incidents by investigating activities, responding to DLP alerts, and managing insider risk cases. In this role, you collaborate with other roles responsible for governance, data, and security to develop policies that address your organization's information security and risk reduction goals. You work with workload administrators, business application owners, and governance stakeholders to implement technology solutions that support these policies and controls.

CONTENT

Module 1: Implement Microsoft Purview Information Protection

• Protect sensitive data in a digital world
• Classify data for protection and governance
• Review and analyze data classification and protection
• Create and manage sensitive information types
• Create and configure sensitivity labels with Microsoft Purview
• Apply sensitivity labels for data protection
• Classify and protect on-premises data with Microsoft Purview
• Understand Microsoft 365 encryption
• Protect email with Microsoft Purview Message Encryption

Module 2:Implement and manage Microsoft Purview Data Loss Prevention

• Prevent data loss with Microsoft Purview
• Implement endpoint data loss prevention (DLP) with Microsoft Purview
• Configure DLP policies for Microsoft Defender for Cloud Apps and Power Platform
• Investigate and respond to Microsoft Purview Data Loss Prevention alerts

Module 3: Implement and manage Microsoft Purview Insider Risk Management

• Understand Microsoft Purview Insider Risk Management
• Prepare for Microsoft Purview Insider Risk Management
• Create and manage Insider Risk Management policies
• Investigate insider risk alerts and related activity
• Implement Adaptive Protection in Insider Risk Management

Module 4: Secure AI interactions and environments with Microsoft Purview

• Understand How to Secure AI Data with Microsoft Purview
• Secure Microsoft 365 Copilot interactions with Microsoft Purview
• Secure enterprise and browser-based AI apps with Microsoft Purview
• Secure developer AI environments with Microsoft Purview

Module 5: Implement and manage Microsoft 365 retention and recovery

• Understand retention in Microsoft Purview
• Implement and manage Microsoft 365 retention and recovery

Module 6: Audit and search activity in Microsoft Purview

• Search and investigate with Microsoft Purview Audit
• Search for content with Microsoft Purview eDiscovery