Multi-label Classification for Microsoft 365

Augmenting Microsoft Purview Information Protection Labelling and Classification Capabilities with NC Protect

Microsoft Purview Information Protection & NC Protect Better Together

Data classification and governance play a critical role in organizing and protecting sensitive data within Microsoft 365 and GCC High. Not implementing these practices can lead to data breaches, penalties from regulations, financial loss, and damage to reputation.

To address this, Microsoft Purview Information Protection offers sensitivity labels to classify and protect data in Microsoft 365. While these capabilities are robust, third-party solutions can help maximize their functionality to meet stringent regulatory compliance needs.

NC Protect supplements your Microsoft Purview Information Protection sensitivity labels and adds policy-driven attribute-based access and security controls made possible by the product’s tight integration with Microsoft Purview Information Protection, Entra ID and Microsoft Sentinel.

It enhances data labeling and protection capabilities in M365 and GCC High, offering customers a more robust solution for managing sensitive data classification and handling requirements to meet government, defense and enterprise needs.

Augment Labeling Capabilities in M365 with NC Protect

NC Protect helps to augment the labelling/classification capabilities of M365 and GCC High, and adds fine-grained, attribute-based access control (ABAC) and protection policies. NC Protect’s conditional attribute-based access and data protection policies can incorporate Microsoft Purview Information Protection (MPIP) sensitivity labels, other classification labels/metadata, Microsoft Entra ID user attributes and custom attributes to safeguard sensitive information.

NC Protect seamlessly integrates with your existing Microsoft Purview sensitivity labels to enhance functionality with the ability to:

Use unlimited labels. Although Microsoft Purview has a maximum of 500 labels per tenant, government and defense-related industries often quickly exceed this number. NC Protect allows you to create unlimited labels to meet complex classification needs while still allowing you to use your existing MPIP labels.
Utilize multi-label classification. MPIP supports one label per document; however, data is often associated with two or more categories. For example, a single document could contain ITAR-controlled information and CUI and must be labeled accordingly. With NC Protect, you can tag individual documents with unlimited labels to support complex taxonomies.
Apply ABAC policies using MPIP sensitivity labels. NC Protect uses attribute-based access control to control access and apply file and email protection in real time. Your existing sensitivity labels can be incorporated with other attributes in NC Protect policies to control access and apply file-level protection.
Control access using nationality and security clearance. ABAC policies enable NC Protect to control access and apply file-level protection based on the user’s nationality, security clearance, file sensitivity, and other custom attributes.
Add visual markings based on a file’s classification, including CUI Designation Indicator labels, headers and footers.

Apply user-specific watermarks. Automatically applies user-specific watermarks containing information about the user/viewer, including name, date, time, location, etc., based on sensitivity labels. This deters photos and provides a digital thumbprint of the document handler.
Employ At Rest and In Motion Encryption. Ensure data is encrypted at rest and whenever it moves across any external or internal networks automatically based on the policy.
Protect non-Microsoft file types. NC Protect is not limited to Office files and Outlook Emails. It can tag, control access to and apply file-level protection to PDF, CAD, image, text, HTML files, SharePoint list items and events, and Office and Exchange emails.
Control guest user access. Since NC Protect controls access at the file vs. the container level, you can use sensitivity labels to prevent guests from seeing or accessing sensitive content in a site or Team they are a member of.
Preserve the integrity of digitally signed documents. NC Protect and NC Encrypt do not break the integrity of a file, and all document signature technologies are supported.