Continuous Compliance Documentation

Information Protection and Records Management Visibility

Information Protection Policy Visibility

Microsoft Graph Permission:

InformationProtectionPolicy.Read.All

This allows us to read information protection policy settings.

We use it to understand how sensitivity labels, classification rules, and information protection policies are configured.

This is important because information protection policies help prevent sensitive data from being exposed or mishandled. Reviewing them helps confirm that data classification and protection controls are in place.

Records Management Visibility

Microsoft Graph Permission:

RecordsManagement.Read.All

This allows us to read records management configuration.

We use it to review retention labels, retention policies, records settings, and related governance configuration.

This is important because records management controls help organizations meet legal, regulatory, and internal retention requirements. Reviewing these settings helps confirm that data is retained or disposed of according to policy.