Data Retention and DLP Policy Coverage Check
The prompt
In Microsoft Purview, review the current state of DLP and retention policies. Provide: 1. List all active DLP policies: name, sensitive information types covered, workloads (Exchange, SharePoint, Teams, Endpoint), and enforcement mode (enforce, audit, or report-only) 2. List all active retention policies: name, retention period, and workloads covered 3. Identify any workloads with no active DLP policy 4. Identify any sensitive information types (e.g. credit card, national ID, health data) not covered by any active policy 5. Flag any policies in report-only mode that should be enforced Return as a coverage matrix table. Mark gaps in red (missing coverage) and report-only policies in amber.
How to use it
- 1Select Copy the prompt above.
- 2Paste it into Microsoft 365 Copilot.
- 3Replace anything in brackets with your own detail, then send it.
Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.
Written for
Compliance Manager, DLP Analyst
More for Microsoft Copilot for Security
- First Look — Incident Summary
- Alert Triage — Is This a True Positive?
- Multi-Alert Correlation — Single Incident Thread
- Device Investigation — Rapid Scope
From the source collection in awesome-microsoft-copilot-prompts, licensed CC BY-SA 4.0.