Updated: July 23, 2020 (July 17, 2018)

Controlling Azure Information Protection Keys

Wes Miller analyzes and writes about Microsoft’s security, identity management, and systems management technologies. Before joining Directions on Microsoft, Wes... more

Azure Information Protection lets customers retain control over encryption keys used to protect documents and e-mail.
Controlling keys could help organizations certify their key management practices to comply with certain regulations or policies.
Customer control of keys implies additional risk and may require purchase of premium licenses.

Organizations have three models available for managing the encryption keys used by Azure Information Protection (AIP) to protect documents and e-mail, two of which offer a level of customer control. AIP is a Microsoft-hosted service that helps organizations classify, label, and protect documents and e-mails to prevent unauthorized access. Highly regulated customers are likely to opt for more control of AIP keys, but doing so will likely lead to organization-wide purchases of additional licenses such as the Enterprise Mobility + Security suite.

Understanding Azure Information Protection

AIP consists of two components that can operate independently but are most effective when integrated:

Atlas Members have full access

Get access to this and thousands of other unbiased analyses, roadmaps, decision kits, infographics, reference guides, and more, all included with membership. Comprehensive access to the most in-depth and unbiased expertise for Microsoft enterprise decision-making is waiting.

Membership Options

Already have an account? Login Now