# A default sensitivity label is configured in label policies
Setting a default label ensures a base level of protection settings for all new and edited items that support sensitivity labels, and for new containers…
Source: https://maester.dev/docs/tests/ZTA.35017
## Overview
Setting a default label ensures a base level of protection settings for all new and edited items that support sensitivity labels, and for new containers such as Teams. Users can manually override the label if necessary, and other labeling methods such as auto-labeling can replace the default label with a label that has a higher sensitivity level. Setting a default sensitivity label extends your labeling reach and reduces decision fatigue for users, ensuring content has at least a minimum level of protection.
Unlabeled content might bypass data loss prevention (DLP) policies, and other protection solutions that rely on label detection. If appropriate, set a different default sensitivity label for unlabeled documents and Loop components and pages, emails and meeting invites, new containers, and also a default label for Power BI content.
## Remediation
- [Publish sensitivity labels by creating a label policy](https://learn.microsoft.com/purview/create-sensitivity-labels?wt.mc_id=zerotrustrecommendations_automation_content_cnl_csasci#publish-sensitivity-labels-by-creating-a-label-policy)
- [Default label policy for Fabric and Power BI](https://learn.microsoft.com/fabric/governance/sensitivity-label-default-label-policy?wt.mc_id=zerotrustrecommendations_automation_content_cnl_csasci)
## Run it
The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:
```powershell
Install-Module ZeroTrustAssessment -Scope CurrentUser
Connect-Maester
Invoke-Maester -Pack ZTA -SkipBuiltIn
```
Leave out `-SkipBuiltIn` to run Maester's own checks in the same run.
About this check
| | |
| --- | --- |
| Severity | Medium |
| Effort to fix | Low |
| Impact on users | Medium |
| Pillar | Data, AI |
| Category | Information Protection |
| Product | [Purview](/docs/tests/products/purview) |
| Feature | Information protection |
| Area | Data protection |
| Licence | RMS_S_PREMIUM, Microsoft 365 E3 |
| Tenant | Workforce |
Product, feature, area and ATT&CK are Maester's: the assessment does not record them, so Maester keeps them in the pack's `taxonomy.json`.