Living with encryption An employee opens a Strictly Confidential file that is encrypted for employees only, in Word, on iPhone with Outlook and with the built-in Mail app, and as a protected PDF in Edge. A partner outside the organization gets the file and is denied access. Encryption is the last line of defense, behind DLP. W SENSITIVITY LABELS · ENCRYPTION Living with encryption Ada Admin Eli Employee Anna Partner WHY ENCRYPT Encryption follows the content DLP decides what can leave. Encryption decides who can open the content, wherever it ends up. E3 or Business Premium No Endpoint DLP. Content can leave the devices on USB, private cloud and AI services. Encryption is often the only protection outside the ring. E5 or E7 A complete DLP ring around email, sharing and devices. Many encrypt only the most sensitive content, because encryption affects how people work. In our policy: Strictly Confidential is encrypted, and only employees can open it. Who can open Board minutes.docx? Board minutes.docx · Word Strictly Confidential FileHomeInsertReview RESTRICTED ACCESS Only people in Contoso can open this document. Copy and print may be limited. STRICTLY CONFIDENTIAL Board minutes Checking permissions with Contoso… Microsoft Outlook app Board meeting Ada Admin · 09:12 Board minutes.docx Strictly Confidential STRICTLY CONFIDENTIAL Board minutes Opens in the app iPhone Mail app Board meeting Ada Admin · 09:12 Ada Admin has sent you a protected message. Read the message The content is not shown in Mail. outlook.office365.com/encryption Sign in to read eli@contoso.com Next Encrypted message portal Board meeting Board minutes.docx Read in the browser Microsoft Edge Board minutes.pdf STRICTLY CONFIDENTIAL Board minutes Opens with built-in support Another browser Board minutes.pdf This PDF is protected Open it in Microsoft Edge or another supported reader. Board minutes.docx · Word · partnerco.example Microsoft Sign in Enter the email address of the account you want to use to open this document. Email address Next Contoso Pick an account Selected user account does not exist in tenant 'Contoso' and cannot access the application 'd3590ed6-52b3-4102-aeff-aad2292ab01c' in that tenant. The account needs to be added as an external user in the tenant first. Please use a different account. Anna Partner anna@partnerco.example Connected to Windows Use another account Good to know NEXT Strictly Confidential in email 1/7 SENSITIVITY LABELS Living with encryption A Strictly Confidential file is encrypted for employees only. We test how it opens in Word, on iPhone and as a PDF, and what happens when it reaches a partner. Encryption is the last line of defense, behind DLP. informasjonsbeskyttelse.no