Protecting Confidential Cloud Data

Question

Hello -

We recently moved from GCP to Azure and have all of our file shares on prem. We now want to move our storage to the cloud in a centralized Document Library. My biggest concern is confidential data (HR info, for example). While on prem provides a bit more protection, I know there are probably ways to provide the same, or more protection within the cloud. I did see Information Rights Management (IRM) and looked that over a bit. What are the best ways to to avoid a data breach from external attacks? I say this after we have already setup MFA, conditional access rules, etc. etc. Is there anything else that I am not thinking of? For those who use it, would Information Rights Management (IRM) help?

Thanks

Answer 1

Hi @BmoreOs ,

Yes, you could enable Information Rights Management (IRM). After site owners enable IRM for a list or library when people download files in an IRM-enabled list or library, the files are encrypted so that only authorized people can view them. Each rights-managed file also contains an issuance license that imposes restrictions on the people who view the file. Typical restrictions include making a file read-only, disabling the copying of text, preventing people from saving a local copy, and preventing people from printing the file. Client programs that can read IRM-supported file types use the issuance license within the rights-managed file to enforce these restrictions. This is how a rights-managed file retains its protection even after it is downloaded.

And here is a article about policy recommendations for securing SharePoint sites and files.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.