Microsoft Data Security Engagement

The Data Security Engagement is a strategic, Ravanty-led initiative that aligns Microsoft Purview’s comprehensive data security and compliance capabilities with your organization’s risk management priorities — helping you drive governance, reduce data exposure, and enable confident business decisions.

This engagement is powered by the Data Security Check. The Data Security Check is a structured engagement that leverages a subset of Microsoft Purview products, services, and features to gain visibility into existing, and at times hidden, data security risks that may exist in the data that resides in the Client’s Microsoft 365 cloud environment. The outcome and findings of the Data Security Check serve as inputs to the overall consultative nature of this engagement and will be used to create awareness and identify potential areas for mitigation.

1. How the Data Security Engagement can help:
- Understand the risks of Dark Organizational Data
Discuss and understand the hidden data security risks of dark data and how to mitigate.
- Understand the risks organizational insiders may impose
Learn how to identify and respond to insider actions and behaviors that can impose risks on the organization.
- Assess the customer’s Microsoft 365 environment
Assess against a set of controls for key regulations and standards for data protection and general data governance.
- Analyze and report
Analyze the findings and associated data security risks. Provide insight and highlight those that are most impactful.
- Learn about tools and services that can mitigate risks
How can cloud services help and what does this mean for the end user.
- Recommendations and next steps
Provide recommendations for risk mitigation and define actionable next steps.

2. What is the Data Security Check?
An automated process that leverages Microsoft Purview services to look for customer-relevant sensitive information and risky user behavior that may impose a data security risk.

- Enable and Configure: Enable the services for automated discovery, configure the search artifacts
- Automated Discovery: Two weeks of automated discovery searching for data security risks and risky user behavior in organizational data
- Analyze & Report: Analyze the findings and report on the identified data security risks.

3. In scope for the Data Security Check Activity:
- Enable Data Security Check discovery services for Exchange Online, SharePoint Online, Teams, Insider Risk Management. Optional activities as necessary
- Automated discovery of sensitive data and user behavior. Identify sensitive information in Microsoft 365 data repositories, Monitor for risky user behavior. Discover Shadow AI. (Over)sharing of sensitive data.
- Analysis and Reporting: Collect reports, logs, and dashboard information. Analyze findings, map to solutions, and provide recommendations.

4. Outcome
- Have Data Security strategy documentation for your teams and stakeholders.
- Better understand, prioritize, and mitigate potential threats.
- Accelerate your compliance and data security journey with Microsoft Purview.
- Have defined next steps based on your needs and objectives.

Microsoft funding:
Microsoft Cybersecurity Investment (CSI) program is an initiative that provides funding to eligible organizations to expand their Microsoft security deployments, with partners like Ravanty offering services around Threat Protection and Data Security across organization’s IT layers. Customer eligibility considerations apply.