Advanced Data Solutions : Become a Communication Compliance Ninja

Become a Communication Compliance Ninja

**Communication Compliance is a solution in Microsoft Purview. Some assets and past recordings may refer to it as Communication Compliance in Microsoft 365 or in Microsoft Compliance; these all refer to the same solution. **

In this Ninja page, we share the top resources for Communication Compliance users to become more proficient with the Microsoft Purview Communication Compliance solution. For official documentation please check http://aka.ms/CommunicationCompliance.

We are very excited and pleased to announce this rendition of the Ninja Training Series. There are several videos and resources out there and the overall purpose of the Communication Compliance Ninja training is to help you get the relevant resources to get started and become more proficient in this area.

After each section, there will be a knowledge check based on the training material you’ve just finished! Since there’s a lot of content, the goal of these knowledge checks is to help you determine if you were able to get a few of the major key takeaways.

Lastly, this training will be updated on a quarterly basis to ensure you all have the latest and greatest material! We are continuously delivering product updates and thus you should check both the public roadmap and message center posts to stay up to date.

Let us know what you think below in the comments!

Latest Communication Compliance blog – https://aka.ms/communicationcomplianceblog

Legend:

Product videos	Webcast recordings	Tech Community
Docs on Microsoft	Blogs on Microsoft	GitHub
New items	Interactive guides	Learning path
⤴ External Sites

Why do I need Communication Compliance?

With the shift towards a hybrid work environment, organizations seek out technology like Microsoft Teams to empower their employees to do their best work digitally. At the same time, organizations also need to manage risk in communications to protect company assets, and flag sharing code of conduct violations to help build a safe and inclusive workplace environment. In a Microsoft Market research study done in May 2021, 60% of information workers stated that detection of offensive language would boost company morale. It also stated that 74% of organizations are likely to adopt risk detection models for Insider trading, offensive content, and bribery.

Ready for the Why do I need Communication Compliance Knowledge Check?

Overview

Protecting sensitive information and detecting and acting on workplace harassment incidents is an important part of compliance with internal policies and standards. Communication Compliance helps minimize these risks by helping you quickly detect, capture, and take remediation actions for email and Microsoft Teams communications. These include inappropriate communications containing profanity, threats, and harassment and communications that share sensitive information inside and outside of your organization. Protecting the privacy of users that have policy matches is important and can help promote objectivity in data investigation and analysis reviews for communication compliance alerts. That is why Communication Compliance allows for pseudonymized users, allows you to control who can review policy matches and set up role-based controls.

Ready for the Overview Knowledge Check?

Getting Started

This section will focus on considerations and tasks for a successful deployment, setup, and investigation of Communication Compliance, including licensing requirements, user permissions, audit log configuration, and policy configuration. Once you have the licensing, permissions, and audit logs configured, you can create a Communication Compliance policy. Communication Compliance policies allow you to scope which communication locations and users are subject to review in your organization, define which custom conditions the communications must meet, and specify who should be scoped to review policy violations.

After you've configured your Communication Compliance policies, you'll start to receive alerts in the Microsoft Purview compliance portal for messages that match your policy conditions. Alerts are reviewed by analyst or investigator role groups who have been explicitly assigned to a policy. These users review the alerts and take the appropriate remedial actions such as sending a notification to the user, deleting a message from Teams, escalating to another reviewer, or in severe cases, creating an Advanced eDiscovery case for possible legal action.

Solution Guides
Licensing
- Communication Compliance License Requirements
Permissions
- Plan for permissions in Communication Compliance
Understand your risk
- Communication Compliance Recommended Actions
Creating Policies
- Create and manage policies
- Case study - Configure an inappropriate text policy
Investigate and Remediate alerts
- Investigate and remediate Communication Compliance alerts
- Setting alert notifications

Ready for the Getting Started Knowledge Check?

Detecting violations of Non-Microsoft Communications

Communication Compliance allows you to scan communications for data imported into mailboxes across Microsoft and non-Microsoft sources, like Instant Bloomberg, Slack, Zoom, SMS, and many others. You must configure a third-party connector before you can assign the connector to a Communication Compliance policy.

Ready for the Detecting Violation on Non-Microsoft Communications Knowledge Check?

Integrating with other tools

Communication Compliance can ingrate with other tools such as PowerAutomate, which can be configured to automatically remediate an alert, or SIEM integration using the O365 Management APIs. You may also identify trends in Communication Compliance that you want to block or take more proactive action on using Microsoft Purview Data Loss Prevention. Communication Compliance can utilize the same sensitive information types that can be used across Microsoft Purview solutions such as Data Loss Prevention, Information Protection, Information Governance, and others. If the policy match warrants further investigation, then you can escalate the policy violations seamlessly from Communication Compliance to an Advanced eDiscovery case for deeper legal review or action.

Ready for the Integrating with other tools Knowledge Check?

Fine-tuning your conditions

With the conditions you have in Communication Compliance policies and the flexibility you have with Sensitive Information types, you can work to fine-tune your policies and reduce false positives. You can also provide feedback on the trainable classifiers models to help improve their accuracy.

Ready for the Fine-tuning of your conditions Knowledge Check?

Reporting and Auditing

Communication Compliance has a central reporting area for viewing all Communication Compliance reports. Report widgets provide a quick view of insights most needed for an overall assessment of the status of Communication Compliance activities such as Recent policy matches and Policy with most matches. Detailed reports provide in-depth information related to specific Communication Compliance areas and offer the ability to filter, group, sort, and export information while reviewing.

You can also run and export per policy detailed reports that can help you meet your own custom reporting needs.

In some instances, you must provide information to regulatory or compliance auditors to prove supervision of user activities and communications. This information may be a summary of all activities associated with a defined organizational policy or anytime a Communication Compliance policy has been updated or settings have been changed. Communication Compliance policies have built-in audit trails for complete readiness for internal or external audits. Detailed audit histories of every create, edit, and delete action are captured by your communication policies to provide proof of supervisory procedures.