Data Security SOW Generator | Microsoft Partner Tool

Engagement Details

Partner Company Name *

Customer Name *

Prepared By

Estimated Start Date

Engagement Duration

Customer Environment

Number of Licensed Users

Microsoft 365 License

Customer Industry

MIP Maturity

DLP Maturity

Data Security Services: Foundation Priority 1

Core labeling and DLP capabilities included with M365 Business Premium. Recommended for all customers regardless of maturity.

Enable Audit Logging

Activate Purview audit log, a required prerequisite for all MIP features and compliance reporting.

Sensitivity Label Taxonomy Design

Define label hierarchy aligned to customer's data classification needs: Public → General → Confidential → Highly Confidential.

Sensitivity Label Creation & Configuration

Configure labels with encryption, content marking (headers/footers/watermarks), and access restrictions.

Label Policy Deployment

Publish label policies to targeted security groups, including default label and justification settings.

Mandatory & Default Label Enforcement

Require users to label all documents and emails before saving/sending; set a default label for unlabeled content.

End-User Training & Adoption

Deliver training covering label usage, justification prompts, and change management best practices.

Enable Sensitivity Labels for SharePoint & OneDrive

Activate sensitivity label support for Office files stored in SharePoint and OneDrive so labels persist and are enforceable.

Container Label Configuration

Apply sensitivity labels to Teams, SharePoint sites, and M365 Groups to enforce privacy, access, and sharing restrictions.

DLP Policies: Exchange, SharePoint & OneDrive

Configure DLP policies for Exchange, SharePoint, and OneDrive to detect and restrict sensitive content sharing. Covers policy simulation and tuning, alert dashboards, and incident notification setup. Included with M365 Business Premium.

Data Security Services: Intermediate Priority 2

Data retention, governance, and DLP operational readiness. Per the Microsoft Data Security Deployment Guide, these capabilities are the recommended next step after foundational labeling and DLP.

Retention Policy: Exchange Online

Deploy retention policies for Exchange mailboxes to retain or delete email content based on compliance requirements; expandable to SharePoint, OneDrive, and Teams.

Data Security Services: Advanced Priority 3

Advanced protection capabilities. Some items require Microsoft Purview Suite add-on (marked with 🔒 when locked).

Engagement Type

Service Delivery Model

One-Time Deployment

A defined-scope deployment engagement with a fixed start and end date.

30-Day Hypercare

Post-deployment support period for issue resolution, user questions, and minor tuning.

Ongoing Managed Services

Recurring partner-managed support covering monitoring, tuning, and incident response.

Managed Service Options

Monthly Health Monitoring

Monthly review of MIP label coverage, auto-labeling effectiveness, DLP policy match rates, false positive trends, and user compliance.

Quarterly Policy Tuning

Quarterly review and update of sensitivity label policies, SITs, auto-labeling rules, and DLP policies to address false positives, business changes, and new data types.

Incident Response Support

Priority support for data security incidents including mislabeled content, DLP policy violations, false positive spikes, and policy exception requests.

Microsoft Purview Data Security: SOW Generator

Engagement Details

Customer Environment

Data Security Services: Foundation Priority 1

Data Security Services: Intermediate Priority 2

Data Security Services: Advanced Priority 3

Engagement Type

Your SOW will appear here

Microsoft Purview Data Security: SOW Generator

Engagement Details

Customer Environment

Data Security Services: Foundation Priority 1

Data Security Services: Intermediate Priority 2

Data Security Services: Advanced Priority 3

Engagement Type

Your SOW will appear here

Service Decision Tree

⚠ Important Notice — Please Read Before Proceeding