A company operating in the healthcare sector needs to implement a solution to prevent its employees from communicating with patients through unofficial channels (e.g., personal email, unapproved chat apps) while still allowing internal communication among healthcare professionals. They also need to ensure that any attempts to share patient information outside approved channels are flagged for review. Which Microsoft Purview feature should be configured?
- AMicrosoft Purview Information Barriers
- BMicrosoft Purview Communication Compliance
- CMicrosoft Purview Records Management
- DMicrosoft Purview Data Loss Prevention (DLP)
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Purview Communication Compliance
Communication Compliance is designed to help organizations detect, capture, and act on inappropriate messages in Microsoft 365, including monitoring for the use of unapproved communication channels or attempts to share sensitive information. While DLP can detect sensitive data, Communication Compliance focuses specifically on the context of communications and can be configured to flag interactions that violate organizational policies regarding communication channels with external parties like patients.
Why the other options are wrong
- A. Information barriers prevent certain user groups from communicating with each other, which is not the primary goal here; the goal is to monitor and prevent inappropriate *channels* of communication with *external* parties (patients).
- C. Records Management deals with data retention and disposal, not real-time communication monitoring or channel enforcement.
- D. DLP primarily focuses on preventing sensitive data from leaving the organization through various means, but it's less about monitoring the channels of communication themselves for policy violations regarding external interaction.
Communication Compliance
A Microsoft Purview solution that helps organizations detect, capture, and act on inappropriate messages in Microsoft 365, including policy violations related to sensitive information, harassment, or regulatory non-compliance.
- Monitors communications across Exchange, Teams, Yammer, etc.
- Detects policy violations (e.g., sensitive info, harassment, unapproved channels).
- Provides tools for review, investigation, and remediation.
- Uses machine learning for intelligent detection.
Memory trick: Comm Compliance keeps an eye on your digital chats for rule-breakers.