--- title: Microsoft Purview's 14 Key Controls description: Dive into the powerful features and capabilities of Microsoft Purview Controls, a comprehensive data governance solution designed to help organisations manage and protect their data assets. Microsoft Purview Controls can help you comply with regulatory requirements, enhance data privacy and security. image: https://blog.coeo.com/hubfs/Victoria%20blog%202%20Microsoft%20Purview%20controls.png --- [![](https://www.coeo.com/wp-content/themes/coeo/images/logo.svg)](https://blog.coeo.com/) +44 (0)20 3051 3595 | [info@coeo.com](mailto:info@coeo.com) | [Client portal login](https://my.coeo.com) # Microsoft Purview's 14 Key Controls # The Coeo Blog ![Dr Victoria Holt](https://blog.coeo.com/hubfs/Victoria.png) #### Certification for Unified Data Governance Microsoft Purview Controls, a comprehensive data governance solution, empowers businesses to understand, manage, and protect their data assets across hybrid and multi-cloud environments. Microsoft Purview is based on a knowledge graph and data is collected from sources that are listed in the application or through the [Apache Atlas API](https://atlas.apache.org/#/).  It uses elements such as [Open Lineage](https://openlineage.io/) and is [Apache Airflow](https://airflow.apache.org/) enabled. [Microsoft](https://www.microsoft.com/en-us/security/blog/2023/03/20/microsoft-achieves-first-native-cloud-data-management-capabilities-certification/) have announced together with [Cloud Data Management Capabilities](https://edmcouncil.org/announcement/microsoft-achieves-first-cloud-data-management-capabilities-cdmc-certification/) (CMDC) that Microsoft Purview, the unified data governance and compliance solution is certified against 14 key controls to keep data safe. This certification will help customers feel assured that their sensitive data is protected when thinking of cloud adoption. With the movement to the cloud comes the heighten need to use best practices to govern the data.     The controls are: **Governance and accountability** 1. *Data Control Compliance* must be monitored for all data assets containing sensitive data through metrics and automated notifications. 2. The *Ownership field* in a data catalog must be populated for all sensitive data or otherwise reported to a defined workflow. 3. A register of *Authoritative Data Sources and Provisioning Points* must be populated for all data assets containing sensitive data. 4. The *Data Sovereignty and Cross-Border Movement* of sensitive data must be recorded, auditable, and controlled according to defined policy. **Cataloging and classification** 1. *Cataloging* must be automated for all data at the point of creation or ingestion, with consistency across all environments. 2. *Classification* must be automated for all data at the point of creation or ingestion and must always be on. **Accessibility and usage** 1. *Entitlements and Access for Sensitive Data* must default to the creator and owner and access must be tracked for all sensitive data. 2. *Data Consumption Purpose* must be provided for all Data Sharing Agreements involving sensitive data. **Protection and privacy** 1. *Appropriate Security Controls* must be enabled for sensitive data and evidence must be recorded. 2. *Data Privacy Impact Assessments* must be automatically triggered for all personal data according to its jurisdiction. **Data lifecycle** 1. *Data Quality Measurement* must be enabled for sensitive data with metrics distributed when available. 2. *Data Retention, Archiving, and Purging* must be managed according to a defined retention schedule. **Data and technical architecture** 1. *Data Lineage* information must be available for all sensitive data. 2. *Cost Metrics* directly associated with data usage, storage, and movement must be available in the catalog. These controls enable confidence to be gained on your companies data and aid in meeting regulatory requirements across all data. To get started with managing your data, consider a [Microsoft Purview Proof of Concept](https://azuremarketplace.microsoft.com/en-us/marketplace/consulting-services/coeo.coeo_purview_poc?tab=Overview), a [Data Strategy](https://azuremarketplace.microsoft.com/en-us/marketplace/consulting-services/coeo.coeo_data_strategy?search=coeo&page=1) or a Data Governance Strategy Review. Let us know in the comments your thoughts ### Subscribe to Email Updates ## Related posts --- ### [Go Beyond Data Protection with Microsoft Purview](https://blog.coeo.com/go-beyond-data-protection-with-microsoft-purview) ### [Three ways to profile data with Azure Databricks](https://blog.coeo.com/three-ways-to-profile-data-with-azure-databricks) ### [Data Toboggan - Cool Runnings event](https://blog.coeo.com/data-toboggan-cool-runnings-event) ### [SQLBits 2022 session - Data Governance with Azure Purview - Ask the Experts](https://blog.coeo.com/sqlbits-2022-session-data-governance-with-azure-purview-ask-the-experts) ![](https://www.coeo.com/wp-content/uploads/2016/12/logo-invert.png) +44 (0)20 3051 3595 | info@coeo.com ## Contact Us By clicking submit below, you consent to allow Coeo to store and process the personal information submitted above to provide you the content requested. You may unsubscribe from these communications at any time. For more information on how to unsubscribe and our commitment to your privacy, please review our **[Privacy Policy](https://www.coeo.com/privacy/)**. ## Upcoming Events [See all events](https://www.coeo.com/events/) #### NOW Building, Thames Valley Park Drive, Reading, RG6 1RB [![](https://www.coeo.com/wp-content/themes/coeo/images/social-glass.png)](https://www.glassdoor.co.uk/Overview/Working-at-Coeo-EI_IE959052.11,15.htm)[![](https://www.coeo.com/wp-content/themes/coeo/images/social-in.png)](https://www.linkedin.com/company/coeo-ltd)[![](https://www.coeo.com/wp-content/themes/coeo/images/social-twitter.png)](https://twitter.com/CoeoLtd)[![](https://www.coeo.com/wp-content/themes/coeo/images/social-fb.png)](https://www.facebook.com/coeoltd/) ![](https://www.coeo.com/wp-content/themes/coeo/images//menu-icon.png) ![](https://www.coeo.com/wp-content/themes/coeo/images//menu-close.png) ![](https://www.coeo.com/wp-content/uploads/2016/12/logo-invert.png) +44 (0)20 3051 3595 | [info@coeo.com](mailto:info@coeo.com) - [Solutions](https://www.coeo.com/solutions/) - [Next Steps](https://www.coeo.com/next-steps/) - [Dedicated Support](https://www.coeo.com/dedicated-support/) - [Case studies](https://www.coeo.com/case-studies/) - [Technologies](https://www.coeo.com/solutions/technologies/) - [Industries](https://www.coeo.com/industries/) - [Finance](https://www.coeo.com/industries/finance/) - [Retail](https://www.coeo.com/industries/retail/) - [Technology](https://www.coeo.com/industries/technology/) - [The Team](https://www.coeo.com/people/) - [Join Us](https://www.coeo.com/careers/) - [Graduate Programme](https://www.coeo.com/graduate-programme/) - [About Coeo](https://www.coeo.com/about-coeo/) - [The Coeo Blog](https://www.coeo.com/blog/) - [Contact us](https://www.coeo.com/contact-us/) - [Privacy Notice](https://www.coeo.com/privacy/) - [Cookie Policy](https://www.coeo.com/privacy#Cookie_Policy) - [Events](https://www.coeo.com/events) Sign up to our newsletter ![go arrow](https://www.coeo.com/wp-content/themes/coeo/images/newsletter-go.png) Back to top