What is new with Microsoft’s Information Protection tools?

Recently, Microsoft made some interesting announcements at their Ignite 2018 conference, of these, many were linked to Azure Information Protection (AIP).

What are the hot topics? New capabilities linked to the user experience, logging, and a better integration within M365.

From what we see, early in 2019 we will have the capability to provide the same user experience on a Windows computer, Mac device, mobile device, or Web browser:

1. Microsoft will “merge” AIP and O365 labels in order to get unified labels

2. The labels will be embedded in MS Office and available in Outlook on the Web

The integration of all products and extended capabilities is now called Microsoft Information Protection( MIP) , the new name for the suite of products which includes AIP, IRM, RMS, O365 labeling, and WIP.

One thing to note: if you haven’t already created O365 labels, wait for the integration as you can copy the labels from AIP to O365 (This is strictly a COPY, not a real merge).

With the release of the SDK and the partnership with different software companies, AIP will be supported by many more applications. The first application (announced some time ago) is Adobe Acrobat, supporting the new ISO PDF format replacing PPDF (if you want to use the new PDF format, you have to specify it on your Azure tenant).

Administrators and Security teams will enjoy some new management capabilities:

  • Usage Reports, based on log analytics – Log analytics is now collecting more information (including justification for declassifying a document)
  • Message encryption reports
  • Graphic interface for AIP scanner
  • Ability to revoke an e-mail (Currently using PowerShell, planned to be available on a graphic interface)


Along with these changes, Microsoft will also be able to provide better integration within M365, including MCAS, DLP services, and Windows 10.

What to take away from all of this? Everything looks new and exciting, but plan your migration accordingly.

  • The auto-classification and BYOK (bring your own key) functionalities are currently not supported with the unified labels, and there is no official release date for this yet.
  • Already in the midst of an information protection strategy? If you are starting to look at labelling and protecting your documents, you can still build your foundations with AIP as it exists today.


Avaleris can help you plan the implementation of data classification & protection strategy, and recommend the best way to migrate from AIP to unified labels.

Nicolas Buache
Practice Lead, Cybersecurity & Information Protection

Avaleris focuses exclusively on hybrid identity, enterprise mobility, and cloud security, enabling businesses to improve their agility and security while enabling employee productivity and collaboration.

Reach out to us to discuss your project objectives.
1-844-996-9695 • info@avaleris.com • www.avaleris.com


Find out how we can help your business.

Contact Us

We look forward to collaborating with you to transform your business.
Please fill out the form below or send us a note at info@avaleris.com.