This program consists of four SC-400 courses designed to equip learners with the skills to implement and manage information protection and compliance within Microsoft 365.

The "SC-400: Implement Information Protection in Microsoft 365" course focuses on the foundational aspects of securing sensitive data within the Microsoft 365 environment. Learners will explore various facets of information protection, with key themes including Data Loss Prevention (DLP), Information Governance, and Compliance. The course delves into creating and enforcing DLP policies to prevent sensitive data from leaving the organization, encompassing the identification, monitoring, and protection of such data. In the realm of Information Governance, the course covers the classification, labeling, and retention of data in accordance with organizational and regulatory mandates, including retention policies, sensitivity labels, and record management. Furthermore, it addresses Compliance by teaching how to meet data protection and privacy regulations like GDPR and HIPAA using Microsoft 365 tools to demonstrate adherence.

The "SC-400: Implement Data Loss Prevention and Records Management" course centers on the practical implementation of DLP strategies and the management of records within an organization. Students will gain the knowledge necessary to identify, monitor, and protect sensitive data, thereby preventing unauthorized access or loss. The course also provides comprehensive instruction on records management practices, which involve the systematic control of records throughout their lifecycle, from creation to final disposition. This includes understanding and applying retention policies, adhering to legal and regulatory compliance, and effectively organizing and storing records.

The "SC-400: Monitor and investigate data using Microsoft Purview" course provides in-depth learning on leveraging Microsoft Purview for data monitoring and investigation. As a unified data governance service, Microsoft Purview enables organizations to manage and govern data across diverse environments. This course emphasizes the practical application of Purview's features for data monitoring and investigation, including data lineage tracking, data classification, audit logs, and reporting functionalities. These features enable users to gain insights into data flows, identify potential risks, and ensure regulatory compliance. The course aims to empower individuals with the expertise to effectively utilize Microsoft Purview for data governance, security, and compliance purposes.

The "SC-400: Manage Insider and Privacy Risk in Microsoft 365" course addresses the critical skills required to manage insider risks and maintain privacy within the Microsoft 365 ecosystem. Learners will acquire knowledge in identifying, investigating, and mitigating internal threats, such as data loss, data breaches, and compliance violations. Key themes include Insider Risk Management, which covers the policies, procedures, and tools for detecting and responding to risky user activities, including user behavior analytics and case management. Privacy Compliance is another focal point, detailing how to comply with privacy regulations like GDPR and CCPA within Microsoft 365, covering areas like data governance and DLP. The course also explores Microsoft 365 Security Tools, highlighting the features of solutions like Microsoft Purview used for managing insider risks and ensuring privacy through policy configuration and security data analysis.