Knowledge Article View - Service Portal

Introduction

Sensitivity labels are Microsoft and Google classifications that can be automatically or manually applied to emails and files to help people handle information appropriately.

Explanation

A label can:

Visually mark content (so recipients understand the risk level),
Prevent accidental sharing of sensitive content outside of the university (default high and moderate risk labels limit sharing to inside the university only)
Prevent the forwarding of sensitive emails to new recipients
Enforce encryption when content is shared outside of the university (Microsoft 365 only)

Labels are intended to identify and protect high or moderate risk data at Virginia Tech. To understand these types of data and how to protect them, please visit the IT Security Office (ITSO) at Virginia Tech Risk Classifications and Protecting Sensitive Data.

What protections do the labels apply?

Labels	Microsoft Protections	Google Protections
High Risk: Internal Use Only	Notifies users that the content is "high risk" Only invited VT recipients can open the email or document Prevents email forwarding Enforces encryption if the content is downloaded or shared by email External editors cannot change the label Forces Teams and SharePoint sites to become Private Can work with file in offline mode for up to 30 days	Notifies users that the content is "high risk" External sharing is blocked Can work with file in offline mode for up to 30 days Protections end if the document is downloaded
High Risk: Specific Users	Notifies users that the content is "high risk" All invited recipients can open the email or document Prevents email forwarding Enforces encryption if the content is downloaded or shared externally by email or direct link External editors cannot change the label Forces Teams and SharePoint sites to become Private Can work with file in offline mode for up to 30 days	Notifies users that the content is "high risk" All invited recipients can open the document Can work with file in offline mode for up to 30 days Protections end if the document is downloaded or shared externally by direct link
Moderate Risk: Internal Use Only	Notifies users that the content is "moderate risk" Only invited VT recipients can open the email or document Prevents email forwarding Enforces encryption if the content is downloaded or shared by email External editors cannot change the label Forces Teams and SharePoint sites to become Private Can work with file in offline mode for up to 30 days	Notifies users that the content is "moderate risk" External sharing is blocked Can work with file in offline mode for up to 30 days Protections end if the document is downloaded
Moderate Risk: Specific Users	Notifies users that the content is "moderate risk" All invited recipients can open the email or document Prevents email forwarding Enforces encryption if the content is downloaded or shared externally by email or direct link External editors cannot change the label Forces Teams and SharePoint sites to become Private Can work with file in offline mode for up to 30 days	Notifies users that the content is "moderate risk" All invited recipients can open the document Can work with file in offline mode for up to 30 days Protections end if the document is downloaded or shared externally by direct link
Low Risk	Notifies users that the content is "low risk"	Notifies users that the content is "low risk"

Where will I see them?

Sensitivity labels can appear or be applied in:

Microsoft Office apps (Word, Excel, PowerPoint, etc.)
Google Workspace apps (Docs, Sheets, Slides, etc.)
Outlook (desktop and web)
OneDrive
My Drive
Shared resources (shared drives, SharePoint, Teams, etc.)
Microsoft 365 Groups
Viva Engage Communities
Loop Workspaces
Power BI
Fabric

What are Sensitivity Labels?

Introduction

Explanation

What protections do the labels apply?

Where will I see them?