Microsoft Purview Compliance Manager Reviews

We primarily use the solution for compliance. 

The solution helps centralize data governance. Its centralized platform is very convenient. It also allows for confidential data discovery. We can uncover what data is present on-premises, on the cloud, or in SaaS environments. 

The solution helps us with automating data classification. We can classify everything, including metadata. It makes it very easy to organize and categorize our data.

Since it integrates well with Microsoft, we can easily integrate everything together.

The product is very integrated with AI and can give us suggestions based on AI. It can help us better manage compliance.

The data classification, sensitivity labeling, and regulatory compliance capabilities are all very useful. They provide compliance with industry-specific regulations such as HIPPA, CCPA, and GDPR and can help us with future policy enforcement. We can enforce various policies, including data governance policies. Also, we can establish custom policies.

We have direct access control. We can control our data in terms of sensitivity labels. If it is a high sensitivity, we can label it so. We can also manage data retention and deletion. 

Purview delivers data protection across multi-cloud and multi-platform environments. It has good integration with third parties, including GCP. It also integrates very easily with Microsoft 365 and other Microsoft solutions. 

Purview can connect with iOS, Mac, Android devices, et cetera. This is important for us as we have different types of employees. Some are using Windows only. Others are on Mac. We can have a unified enforcement policy no matter the platform they use. 

We have different types of data connectors present. We can use GCP or AWS, and they would be supported. It provides cover for a wide range of sources, including those on the cloud and on-premises. 

It provides classification, cataloging, and data mapping. We can integrate all of our tools together. Since we can bring all sources together, we can more easily manage everything.

It helps with our ISO and other types of compliance. We can follow worldwide or US standards. We can also integrate with reporting tools like Power BI and can enable organizations to leverage business intelligence. 

AI does provide us with some useful suggestions for what compliance to follow. It can advise on what policies to implement and follow, and we can look at the information right on the dashboards. 

It saves time in terms of compliance. If you had to do everything manually, it would take a lot of time. However, this helps with automation. We might have saved 20% to 30% of our time overall since it's helped reduce manual work. A lot of the compliance is automatically set up by Purview if we configure it that way. It really does have the potential to help us stay on top of compliance. 

We've had issues with data connectors for Teams. I found that sometimes they lack features, and Purview does not easily integrate with Teams. It needs to improve behavior compliance. 

I've used the solution for a year and a half.

The solution is mostly stable. Microsoft does fix issues and provides updates regularly.

I'd rate stability eight out of ten. 

We don't have Purview in multiple offices. We have it at the head office. We have a specific team that works with Purview. It's mostly maintained by the security team, which is three to five people. 

I'd rate the scalability nine out of ten.

We rarely need to reach out to technical support unless there is a very big issue. 

Positive

I previously used a different solution. However, Microsoft is more widely used. It is also loaded with features that many third-party vendors do not offer, and it's better for integration with different platforms like GCP and AWS.

The initial deployment is straightforward. We're provided with a lot of information and guidance. There's lots of information about configuring the product as well. 

It did take me a few hours to understand the product, the UI, and all the features. However, if someone is familiar with Microsoft, it's a pretty normal amount of complexity.

Purview does not require any maintenance.

The product is cost-efficient as we already use many Microsoft products and have Microsoft licenses. 

We're a Microsoft customer. 

We do not specifically use Purview for DLP, although it is possible to do so. Right now, we use Defender for 365.

Since we use a lot of Microsoft products, it's very useful. 

I'd recommend the solution, especially if a company uses a lot of Microsoft.

I would rate Purview nine out of ten.

I am using the Microsoft Purview Compliance Manager primarily for applying regulations and ensuring compliance with internal regulations like communication policies and PLB policies. It helps in discovering security gaps and deciding how to move forward with improvements.

Microsoft Purview Compliance Manager allows us to apply various regulations, such as communication policies and PLB policies and verifies if we adhere to those policies. It discovers security gaps, enabling us to address them, automate tasks, and strengthens overall security.

The most valuable feature is its ability to apply regulations and ensure compliance with various policies. It also provides tools for investigation, risk assessment, and security score evaluations.

There could be improved automation for handling tasks in bulk or in an automated way. Additional initial monitoring would help ensure that expectations are met. Continued monitoring and policy adjustments after deployment are recommended.

The workload related to compliance has been added to my responsibilities for around one year.

It is scalable, and that is how it was designed, to move from pilot phases to broader deployment.

The support varies depending on the kind of plan you have. While basic support might be adequate for smaller organizations, unified support is recommended for larger organizations.

Positive

Pricing and licensing are usually user-based, especially for cloud solutions, and seem fair.

There is always room for improvement. The system should be monitored after deployment to ensure it meets expectations.

I would rate it a nine out of ten.