- Governance handbook
- Oversharing
-
Sensitivity labels
- Sensitivity labels
- Why use sensitivity labels?
- How do sensitivity labels work in Microsoft 365?
- Licensing in Microsoft 365 for sensitivity labels
- Best practices for implementing sensitivity labels
- Real-world sensitivity labels framework
- Auto-labeling: Can sensitivity labels be applied automatically?
- Sensitivity labels governance with Syskit Point
- Microsoft 365 provisioning
- Access reviews
- Storage management
Real-world sensitivity labels framework
Below is a sample sensitivity labeling framework:
| Label | Description | Private Team | Sharing to Non-Members | Sharing to External Users | Access Review Cadence |
|---|---|---|---|---|---|
| Highly Confidential |
Content is visible only to members of the container/team; files cannot be shared externally or beyond members. |
Yes |
No |
No |
30 days |
| Confidential (Internal) |
Internal Sharing: Content visible to members of the container/team, with the ability to invite other company employees and share files internally. |
Yes |
Yes |
No |
90 days |
| Confidential (External) |
Internal and External Sharing: Marked sensitive, but files can be shared with both internal and external users. |
Yes |
Yes |
Yes |
90 days |
| General Access |
No restrictions on content sharing. |
No |
Yes |
Yes |
180 days |
Learn how to govern Microsoft 365 the right way
Discover how to prevent oversharing in Microsoft 365, control file access, and protect sensitive data with smart governance practices.