Azure Updates: Priva; Zero Trust; Firewall Manager; Arc

Microsoft highlighted the capabilities Priva in conjunction with Data Privacy Day. Announced in November, Priva actually includes two products: Priva Privacy Risk Management and Priva Subject Rights Requests. Alym Rayan, GM of Compliance and Privacy Marketing wrote:

For example, when a user collects personal data but hasn’t used it for more than 180 days, it may no longer have business value but can increase the risk surface area. To adhere to a principle of data minimization, Microsoft Priva can send a system-generated reminder to the data owner to review the file and make a decision to delete or provide a business justification to keep it. Users can easily take action within the Outlook interface, safeguarding personal data without impeding productivity.

Priva supports privacy policies for Teams messaging and helps to spot cross-jurisdiction messages that might run into problems. Additionally, it allows anonymization of many types of user data. Microsoft reports that major customers like Novartis have begun to use the offering.

Senior program manager Amir Dahan encouraged customers to enable Zero Trust. The Microsoft Zero Trust Framework has three principles: verify explicitly, use least privileged access, and assume a breach. As part of the Framework, Microsoft recommends verifying all access attempts even from trusted sources, with firewalls implemented both at the host level and outside of it. Network Security Groups, inbound and outbound filtering, and application security groups can also play an important role. Together with adopting the DDoS Protection Standard, Dahan recommends optimizing SecOps using Firewall Manager.