Do your employees know which company information they may share, and with whom?
A simple classification scheme needs only three labels.
- Public. Can be shared outside the business: published job adverts, press releases, anything already on your website.
- Internal. For employees and approved contractors: procedures, meeting notes, internal reports, most drawings in progress.
- Confidential. Needs controlled access: client records, fee proposals, tender submissions, payroll, bank details, legal documents, anything personal about staff.
Confidential needs rules, not just a label
For confidential information, spell out who may access it, where it may be stored, how it may be sent (and how it may not, such as personal email or WhatsApp) and when it should be deleted.
Make the labels do work
Microsoft 365 sensitivity labels can apply these classifications to documents and emails and enforce the rules automatically: encrypt confidential files, block them from being forwarded externally, watermark them. That turns a policy into a control.
Need help drawing up clear rules for your company information, or turning them on in Microsoft 365? We'll work through it with you.
Want a hand with this? Talk to us.