Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
In Microsoft Purview, we group our security recommendations into multiple themes based on the Secure Future Initiative (SFI). This structure allows organizations to logically break up projects into related consumable chunks.
Tip
Some organizations might take these recommendations exactly as written, while others might choose to make modifications based on their own business needs.
We recommend that all of the following controls be implemented where licenses are available. These patterns and practices help to provide a foundation for other resources built on top of this solution. More controls will be added to this document over time.
Automated assessment
Manually checking this guidance against a tenant's configuration can be time-consuming and error-prone. The Zero Trust Assessment transforms this process with automation to test for these security configuration items and more. Learn more in What is the Zero Trust Assessment?
Licensing and billing requirements
Several Microsoft 365 subscriptions support the capabilities covered by this assessment. To identify the licenses required, see the Microsoft Purview service description.
Some Microsoft Purview capabilities also require pay-as-you-go billing—for example, when the configuration includes non–Microsoft 365 data sources, AI hub locations, or retention scopes that cover some Copilots or other AI apps.
Protect data
Reduce risk by ensuring encryption and collaboration settings are correctly configured for your organization's data.