PwC uniquely offer policy, process and controls services across the entire information lifecycle (from legal, regulatory and IP protection to data discovery and analytics to data protection and insider threat to response services and resilience planning). By exploiting PwC’s broader expertise, these services ensure alignment to a client’s digital transformation needs (hybrid / multi-cloud and extended supply chain risk), ESG ambitions, M&A considerations and vertical specific drivers and challenges. For some clients, the starting point is a data discovery / map assessment to understand what data you have, where it is and how it is being used. For others, maturity and effectiveness of data loss controls and associated policy is a top priority.

Data loss controls typically evolve over many years with disparate solutions provided by many vendors in an inconsistent way across the enterprise. Data loss and compliance solutions are more directly aligned to business policy and process than many other security controls. As such, it is vital that they all work together against commonly defined policies that align to the current needs of the business. From an architectural perspective, this inevitably means client’s should focus on a platform approach for information compliance where policy can be applied in an auditable, consistent and simplified manner. Whilst there maybe a need to integrate other third-party controls to that platform for specific needs, by minimising the latter, complexity is reduced, cyber skills maintenance and operational costs are contained & end user experience is optimised ensuring mitigation of associated business risk.

Microsoft’s E5 Information Compliance suite (Purview) offers a strong foundation for the entire information lifecycle and integrates with other E5 and Azure security controls. The latter also enables effective integration with other third-party privacy and compliance solutions where required (either to meet specific requirements not yet covered by the Microsoft solutions, or to help support a transition from third party solutions).

PwC’s Information Compliance Data Loss Prevention architecture and policy assessments:

Examines existing DLP controls in line with business needs. Enables development of a strong Purview platform centric architecture, that will evolve to meet changing business needs. Identifies areas for operational efficiency and streamlines end user experience whilst minimising compliance risk.

Microsoft’s significant investment in Purview and the wider Microsoft 365 E5 platform will be leveraged to help identify and support closure of control gaps,. This will include effective integration of third-party solutions, to extend the value of your existing Microsoft 365 investment.

PwC can help clients exploit these consolidation opportunities at the appropriate time. From the policy and workflow perspective, PwC will work with the client to simplify and consolidate all relevant and currently applicable information policies, ensuring they are effectively and consistently enforced across the architected data loss prevention platform.

PLEASE NOTE: Pricing and duration is subject to scope of work and may vary

PwC Information compliance: 4wk Assessment

PricewaterhouseCoopers UK

Details

Links