How to Implement Secure Emails in Office 365

When people ask me how secure email is, I tell them, “Never put anything in an email that you wouldn’t want posted on a public bulletin board.” In other words, email really isn’t secure.

So, can I send sensitive information (account numbers, social security numbers, credit card information, bank accounts, etc.) through email?

Yes, you can, if you implement a secure email system. For those of us with Office 365, that’s called the “Azure Information Protection client“, (AIPC) an inexpensive add-on to O365 from Microsoft.

Your O365 dealer (or Microsoft) can sell you this add-on for $2/month/email address that needs the protection. (Not every email address you have in O365 has to have the protection.)

Installation of Azure Information Protection

You will need administrative rights to your Office 365 account to do this.

  1. Purchase Azure Information Protection from Microsoft or your dealer.
  2. Log in to portal.office.com
  3. Click the “waffle” waffle icon in the upper left-hand corner of the portal screen.
  4. Click the Admin icon Office Portal Admin Icon in the left-hand menu.
  5. Click “Users” and then “Active Users” in the left-hand menu 
  6. In the list of users that will appear, click the email account to which you want to add the Azure Information Protection.
  7. In the mailbox detail pop-up, click the “Edit” link in the Product Licenses area.
  8. In the Product licenses pop-up click the “Off” switch of “Azure Information Protection Plan 1” to turn it on. 
  9. Click “Save”.
  10. Close the mailbox detail pop-up.
  11. You may log out of the portal.
  12. On the PC where you already have Office 365 installed, download and install the Azure Information Protection Client
    • Go to this website: https://www.microsoft.com/en-us/download/confirmation.aspx?id=53018 then click the “Download” button. (Note: if you’re going to be doing more than one installation, chose the MSI installation file, which you can put on a thumb drive or a shared drive. That way you only have to download the software once. See the Azure Information Protection Client Administrator Guide for details.)
    • Select and download AZInfoProtection.exe
    • Double-click the file to start the installation
    • Select Install a demo policy if you want to experience Azure Information Protection labeling by using a demo policy that doesn’t require connecting to Azure
    • Click I agree to install the client.
    • When the installation completes, click Finish.
    • If you had Office application open (Outlook, Word, Excel, PowerPoint), close and restart them to view the Information Protection bar.
  13. Configure your Azure Information Protection policy:

[More to come]

Source: https://docs.microsoft.com/en-us/information-protection/get-started/infoprotect-quick-start-tutorial