Protect Sensitive Information with Microsoft Purview in the AI Era (SC-401)
Course 8753
4 DAY COURSE

Course Outline

This course equips Information Security and Compliance professionals with the skills needed to protect sensitive data using Microsoft Purview in a modern, AI-enabled environment. Participants learn how to design and implement information protection, data loss prevention (DLP), retention, insider risk management, auditing, and AI data protection controls across Microsoft 365. The course emphasizes real-world investigation, alerting, and incident response to reduce organizational risk.

Protect Sensitive Information with Microsoft Purview in the AI Era (SC-401) Benefits

  • In this course, you will:

    • Develop and implement comprehensive data protection strategies.
    • Mitigate risks associated with internal and external threats.
    • Ensure compliance with data retention and governance policies.
    • Enhance incident response capabilities.
    • Safeguard data in AI-integrated environments.
  • Prerequisites

    • Familiarity with Microsoft 365 services
    • Basic understanding of security, compliance, and risk concepts
    • Experience working with sensitive or regulated data
  • Exam Information

    This course helps prepare students for the Microsoft Certified: Information Security Administrator Associate Certification

Protect Data with Microsoft Purview Course Outline

Learning Objectives

1. Implement Microsoft Purview Information Protection

  • Information protection concepts and strategy
  • Sensitivity labels and label policies
  • Automatic and recommended labeling
  • Protecting content across Microsoft 365 apps

2. Implement and Manage Microsoft Purview Data Loss Prevention (DLP)

  • DLP concepts and regulatory compliance
  • Creating and managing DLP policies
  • Monitoring and responding to DLP alerts
  • Protecting data across endpoints, apps, and services

3. Implement and Manage Microsoft 365 Retention and Recovery

  • Retention and deletion principles
  • Retention labels and policies
  • Records management
  • Recovering retained and deleted content

4. Implement and Manage Microsoft Purview Insider Risk Management

  • Insider risk scenarios and indicators
  • Creating insider risk policies
  • Managing alerts and cases
  • Investigating risky user activity

5. Audit and Search Activity in Microsoft Purview

  • Audit logging concepts
  • Searching audit logs
  • Investigating user and admin activity
  • Supporting security and compliance investigations

6. Secure AI Interactions and Environments with Microsoft Purview

  • Risks introduced by AI and Copilot usage
  • Protecting sensitive data used by AI services
  • Applying Purview controls to AI-generated content
  • Monitoring and governing AI-related data activity
Course Dates
Attendance Method
Note about the Certification Exam

When you register for the course, you will be prompted to choose Y/N to take the exam. Please select yes, as all HHS CISO employees are required to attempt the exam if one is offered for the course. Please be advised, if your course if funded by DIR, the Certification Organization has agreed to provide DIR the pass/fail status of your exam. DIR will only share this information in an aggregated report to state leadership that reflects total exam pass or fails. No individual names of any students will be included in any reports.

DIR requires that you submit the request for your exam voucher within one month of the last day of your course. DIR requires that you take your exam within six months of the last day of your course.

Additional comments or questions (optional)