{"id":8469,"date":"2021-10-29T17:30:19","date_gmt":"2021-10-29T16:30:19","guid":{"rendered":"https:\/\/nboldapp.com\/?p=8469"},"modified":"2021-10-29T17:38:15","modified_gmt":"2021-10-29T16:38:15","slug":"adaptive-policy-scopes","status":"publish","type":"post","link":"https:\/\/nboldapp.com\/fr\/adaptive-policy-scopes\/","title":{"rendered":"R\u00e9solution des probl\u00e8mes de conformit\u00e9 des donn\u00e9es : Introduction des champs d'application de la politique adaptative"},"content":{"rendered":"

Everyone will agree that dealing with compliance and regulation frameworks can be a headache. It’s especially topical if your organization is present in multiple locations. Each country can have its own standards, even within the European Union. You might have to retain your customers\u2019 data in the German office for, say, 2 years; meanwhile, it\u2019s 5 years in France.<\/p>\n\n\n\n

The regulations get tougher in industries dealing with sensitive information such as financial records, health data, or personal identification information. In some cases we\u2019ve seen with our customers, they needed to delete their chat conversations within 24 hours.<\/p>\n\n\n\n

To manage their data and records in accordance with regulations and compliance rules, organizations use information governance systems. The Information Governance by Microsoft allows to do just that, making sure the necessary information is safely kept while all the outdated content or sensitive conversations are deleted within a specified period.<\/p>\n\n\n\n

In this blog post we will talk about adaptive policy scopes \u2013 a new feature which in now in Public Preview<\/a> \u2013 that has taken retention of data to the next level, allowing more automation, flexibility, and scalability. We will explain how new adaptive scopes work and how you can leverage them to improve your data management at scale.<\/p>\n\n\n\n

<\/div>\n\n\n\n

Common constraints<\/h2>\n\n\n\n
<\/div>\n\n\n\n

The most common constraint we briefly described above \u2013 geography<\/em><\/strong>. Having branches in multiple countries means more compliance regulations to adhere to. It would require having a separate retention policy for each location.<\/p>\n\n\n\n

You might also require establishing different retention rules for specific departments<\/strong> <\/em>in your organization that deal with sensitive data. That could be your legal or financial departments. So normally, you would need to exclude them from the organization-wide policies.<\/p>\n\n\n\n

Specific people<\/strong> <\/em>in your organization may also need to have special policies applied to the data they receive and share. That could be, for example, your executives\u2019 chats and mailboxes.<\/p>\n\n\n\n

To consider all these differences and restrictions in the retention and label policies, previously organization had to update information manually and build complex scripts to scale the process.<\/p>\n\n\n\n

Let\u2019s delve a bit into that.<\/p>\n\n\n\n

<\/div>\n\n\n\n

How label and retention policies used to work<\/h2>\n\n\n\n
<\/div>\n\n\n\n

Up till now, retention scopes have been static. You could apply either retention policies at a site or a mailbox level, or retention labels at an individual item level (folder, document, email).<\/p>\n\n\n\n

You can apply retention policies to Teams and Yammer chats and channel<\/a> messages, emails, SharePoint<\/a> sites, OneDrive accounts, and public folders.<\/p>\n\n\n\n

If you wish to retain all the data stored in a specific SharePoint site for 1 year, it makes more sense to apply a retention policy. However, if within this site there are files that should be retained for 5 years you would need to use labels.<\/p>\n\n\n\n

Retention labels are used to classify the content and decide which piece of data should be retained or deleted in the cloud. They travel with the files they are applied to when they are moved to a different location.<\/p>\n\n\n\n

You could also include or exclude specific locations in a retention or label policy. However, there are limits to how many inclusions\/exclusions you can apply per policy. If you exceeded the limits, you needed to create additional policies with the same retention settings.<\/p>\n\n\n\n

\"\"\/
Microsoft Tech Community<\/a> <\/figcaption><\/figure><\/div>\n\n\n\n

And this is where adaptive policy scopes come to the rescue.<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/div>\n\n\n\n

Adaptive policy scopes<\/h2>\n\n\n\n
<\/div>\n\n\n\n

Adaptive scopes allow you to apply more dynamic label and retention policies. You can set dynamic conditions for inclusion\/exclusion, and the policy will be automatically updated. The conditions can be based on users\u2019 Azure AD attributes, SharePoint sites, and Microsoft 365 groups<\/a>. And per policy limits that we previously mentioned no longer apply in adaptive scopes.<\/p>\n\n\n\n

Adaptive scopes consist of properties that define all the sites, groups, and people in your organization. For example, you may have branches in various locations where different compliance regulations apply. So, if you want all your data in the Italian branch to be retained for, say, 2 years, you can select this location in the scope. The policy will be automatically updated to match this rule.<\/p>\n\n\n\n

Similarly, you can apply scopes for chats or mailboxes of all your VPs or any other employees with a specified job title. You can so the same for certain departments that have different compliance regulations. Dynamic rules to data retention greatly facilitate this process and makes it more scalable.<\/p>\n\n\n\n

So, even when some employees leave and others enter the organization, the retention policy will be automatically updated, triggered by the changes of users\u2019 attributes.<\/p>\n\n\n\n

\"Adaptive
Microsoft Tech Community<\/a><\/figcaption><\/figure><\/div>\n\n\n\n
<\/div>\n\n\n\n

Taking a step further<\/h2>\n\n\n\n
<\/div>\n\n\n\n

For some organizations it can be topical to implement retention policies on data around specific business processes. For example, you may want to have a defined retention policy for each research project<\/a>.<\/p>\n\n\n\n

You can achieve that by defining the right naming convention for all project teams and including it into the scope for this policy.<\/p>\n\n\n\n

Avec Collaboration Templates by SalesTim<\/a>, you can templatize any business process \u2013 be that Gestion des comptes<\/a>, Deal Room Collaboration<\/a>, Gestion de projet<\/a>, Marketing Campaigns<\/a>, Int\u00e9gration<\/a>, etc. And you can apply specific retention policies for any of those processes. After creating the structure of the template that you’ll use for creating new teams, you can configure Governance rules, including a naming convention. Based on the convention d'appellation<\/a> you can set up a retention policy.<\/p>\n\n\n\n

Exemple<\/h4>\n\n\n\n

Let us take our research project example. You can define static and dynamic rules for naming your teams, for instance:<\/p>\n\n\n\n

Project name \u2013 Project \u2013 Country<\/em><\/p>\n\n\n\n

Where users will define the Project name; the word Project will remain static; and Country will depend on the user\u2019s location.<\/p>\n\n\n\n

Then, you can create a Microsoft 365 group alias. It will define the group email for the teams created from this template.<\/p>\n\n\n\n

\"microsoft<\/figure>\n\n\n\n

You can choose either the defined name for future project teams or the Group alias to define the scope for your retention policies. However, we recommend using the latter<\/em> since the team owner can change the team name. The Group alias, on the other hand, will stay permanent.<\/p>\n\n\n\n

By doing so, the teams created from the template will be automatically added in the scope of these policies.<\/p>\n\n\n\n

This will allow to ensure collaboration confidence, with an elevated level of compliance, and easier IT governance in your organization.<\/p>\n\n\n\n

\"\"<\/figure>
\n

Download White Paper with free Teams Naming Convention examples <\/strong>\ud83d\ude09<\/p>\n\n\n\n