Sensitivity labels are configured
Overview
Section titled “Overview”Sensitivity labels are the foundation of Microsoft Purview Information Protection. They enable organizations to classify and protect sensitive data across Microsoft 365, on-premises locations, and non-Microsoft applications.
Without sensitivity labels, organizations lack a standardized way to protect their data, leaving it vulnerable to unauthorized access and sharing. A well-designed label taxonomy typically includes 3-7 top-level labels—too many labels overwhelm users and reduce effectiveness.
Remediation
Section titled “Remediation”Run it
Section titled “Run it”The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:
Install-Module ZeroTrustAssessment -Scope CurrentUserConnect-MaesterInvoke-Maester -Pack ZTA -SkipBuiltInLeave out -SkipBuiltIn to run Maester’s own checks in the same run.
About this check
| Severity | High |
| Effort to fix | Medium |
| Impact on users | Low |
| Pillar | Data, AI |
| Category | sensitivity-labels |
| Product | Purview |
| Feature | Information protection |
| Area | Data protection |
| Licence | RMS_S_PREMIUM, Microsoft 365 E3 |
| Tenant | Workforce |
Product, feature, area and ATT&CK are Maester’s: the assessment does not record them, so Maester keeps them in the pack’s taxonomy.json.
A Microsoft check, part of the Zero Trust Assessment pack. Text from ZeroTrustAssessment 3.1.0, © Microsoft, MIT licence.