Massachusetts hospitals Heywood, Athol say outage was a cybersecurity incident

Microsoft Purview is a unified data governance and compliance solution that helps organizations manage, protect, and gain insights from their data across on-premises, multi-cloud, and SaaS environments. If youβre new to Purview, this guide will walk you through the essentials of setting up your first account and preparing for a successful deployment.
Before diving into the steps, itβs important to understand why Purview is critical:
Centralized Governance: Consolidates data discovery, classification, and lineage tracking.
Compliance & Risk Management: Offers sensitivity labels, Data Loss Prevention (DLP), and Insider Risk Management.
Multi-Cloud Support: Extends governance to Azure, AWS, Google Cloud, and on-premises sources.
Before creating your Purview account, ensure:
An active Azure subscription and associated Microsoft Entra tenant.
Appropriate roles: Global Administrator or Compliance Administrator.
Registered resource providers: Microsoft.Storage
, Microsoft.Purview
, and optionally Microsoft.EventHub
.
Defined network requirements if using private endpoints.
Access Azure Portal: Navigate to https://portal.azure.com
Create Resource: Search for Microsoft Purview and select Create.
Configure Basics:
Subscription: Choose your Azure subscription.
Resource Group: Select or create a resource group.
Account Name: Provide a unique name.
Region: Pick the closest region to your data.
Networking: Decide between open access or private endpoints for secure connectivity.
Review + Create: Validate settings and deploy.
Navigate to Purview Studio and open Data Map.
Register Data Sources: Add sources like Azure Blob Storage, SQL Server, or Microsoft 365.
Configure Scans: Define scope and frequency for automated metadata discovery.
Enable Classification: Apply system or custom classifications for sensitive data.
Use Role Assignments to grant access:
Admins: Full control.
Curators: Manage metadata.
Readers: View-only access.
For scanning, ensure Storage Blob Data Reader role is assigned to the Purview account.
Sensitivity Labels: Create and apply labels for files, emails, and sites.
DLP Policies: Prevent accidental sharing of sensitive data.
Retention Policies: Define lifecycle rules for compliance.
Use Compliance Manager to track adherence to regulatory standards like GDPR or HIPAA.
Monitor scans and classification results in Purview Insights.
Schedule periodic reviews to maintain governance maturity.
Start small: Enable core capabilities (Data Classification, Information Protection, DLP) before expanding to advanced features like Insider Risk Management.
Automate where possible: Use PowerShell modules (Az.Purview
, Microsoft.Graph.Compliance
) for bulk operations.
Document your taxonomy: Keep sensitivity labels simple and intuitive.
Rodβs Blog is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber.