Regional benefits firm · Small office
A labeled file stays protected after it leaves the library.
The firm had Microsoft 365 and no sensitivity labels. A file could be downloaded or emailed and leave every control behind. An older encryption rule had already been turned off.
Representative profile. Figures are illustrative.
The work
What we did, and why
The firm had Microsoft 365 and no sensitivity labels. A file could be downloaded or emailed and leave every control behind. An older encryption rule had already been turned off. The firm needed protection that stays with the file.
AI prepared the label design from a read-only export of the account. A person reviewed that design and applied it in Microsoft Purview, the labeling service in Microsoft 365. Four labels cover the range from ordinary files to the ones that must stay encrypted. A person chooses the label. The service does not read every document and label it on its own.
A labeled file keeps its encryption after it is downloaded, copied, or attached to a message. Email encryption is there when someone chooses it, and it is not forced on every message. The firm's own team keeps day-to-day administration. The setup project is finished.
Where they stand
The outcome
The label set is in place. A confidential file keeps its protection after it leaves SharePoint. Email is encrypted only when someone chooses that, and the setup project is finished.
For leadership
What changed
The office lead can tell a colleague to label a file before it is sent, and can trust that the protection travels with the file. Ordinary mail is left alone.
This is a representative profile, drawn from the kinds of companies we work with. Figures are illustrative. We publish named results only with a client's written permission.
More profiles
Your turn next
The same method, applied to your systems.
Every engagement on this site started with a written assessment of what the company already ran. Yours starts the same way, and the assessment is yours to keep either way.