{"id":1509,"date":"2026-02-16T14:39:18","date_gmt":"2026-02-16T13:39:18","guid":{"rendered":"https:\/\/www.osb.group\/?page_id=1509"},"modified":"2026-07-06T15:27:23","modified_gmt":"2026-07-06T13:27:23","slug":"data-protection-compliance","status":"publish","type":"page","link":"https:\/\/www.osb.group\/de\/data-protection-compliance\/","title":{"rendered":"Data Protection & Compliance"},"content":{"rendered":"

[et_pb_section fb_built=”1″ custom_padding_last_edited=”off|desktop” admin_label=”hero section” _builder_version=”4.27.6″ background_image=”https:\/\/www.osb.group\/wp-content\/uploads\/2025\/01\/Fond_Bleu_OSB_web_2025.png” parallax=”on” custom_margin=”|||” custom_padding=”3%||6%||false|false” custom_padding_tablet=”130px||130px|” da_disable_devices=”off|off|off” global_colors_info=”{}” theme_builder_area=”post_content” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.25.2″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”4_4″ _builder_version=”4.25.2″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_image src=”https:\/\/www.osb.group\/wp-content\/uploads\/2025\/01\/database-security_compliance.png” title_text=”database-security_compliance” _builder_version=”4.27.6″ _module_preset=”default” width=”15%” width_tablet=”25%” width_phone=”25%” width_last_edited=”on|tablet” max_width=”50%” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″ filter_invert=”100%”][\/et_pb_image][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_font=”Inter|700|||||||” header_text_color=”#FFFFFF” header_font_size=”3em” header_line_height=”1.2em” hover_enabled=”0″ header_font_size_tablet=”3em” header_font_size_phone=”2em” header_font_size_last_edited=”on|phone” global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Data Protection & Compliance<\/h1>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.6″ _module_preset=”default” da_disable_devices=”off|off|off” global_colors_info=”{}” theme_builder_area=”post_content” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”4_4″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font=”Inter||||||||” text_font_size=”1.2em” text_line_height=”1.4em” header_2_font=”Inter||||||||” header_2_text_color=”#000000″ header_2_font_size=”2em” header_2_line_height=”1.2em” hover_enabled=”0″ header_2_font_size_tablet=”2em” header_2_font_size_phone=”1.5em” header_2_font_size_last_edited=”on|phone” global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Ensures the secure management of sensitive data, while maintaining compliance with regulatory standards.<\/h2>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Data is both your organisation’s most valuable asset and its most regulated one. Sensitive information flows through Microsoft 365 \u2014 emails, Teams messages, SharePoint documents, OneDrive files, and cloud applications \u2014 and the consequences of a data breach or compliance failure are severe: regulatory penalties under nLPD and GDPR, reputational damage, and loss of client trust.<\/p>\n

One Step Beyond specialises in data protection and compliance within the Microsoft 365 and Azure ecosystem. As a certified Microsoft Solutions Partner for Modern Work & Security, our engineers implement Microsoft Purview \u2014 Microsoft’s comprehensive data governance, risk, and compliance platform \u2014 alongside AvePoint and Microsoft Defender for Cloud Apps, to protect sensitive data, enforce DLP policies, and demonstrate regulatory compliance across your entire Microsoft environment. For data protection platforms beyond Microsoft \u2014 Cribl, Forcepoint, Kiteworks, Proofpoint, Splunk, Semperis \u2014 these are delivered by our Swiss Expert Group partners e-Xpert Solutions and eb-Qual, who hold deep certified expertise across the full data protection vendor landscape.<\/p>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Our Data Protection & Compliance Capabilities :\u00a0<\/h2>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”1_2″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_3_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Microsoft Purview \u2014 Data Governance, Risk & Compliance<\/h3>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Microsoft Purview is Microsoft’s unified data governance, risk management, and compliance platform \u2014 covering data classification, information protection, data loss prevention, insider risk management, eDiscovery, and compliance management across Microsoft 365 and Azure.<\/p>\n

Our engineers implement Microsoft Purview across its core capability areas: sensitivity labels and data classification to identify and protect sensitive content wherever it lives, retention policies and records management to govern the data lifecycle in alignment with Swiss nLPD and FINMA requirements, compliance manager to assess and track regulatory compliance posture, and audit and eDiscovery for legal hold and investigation support. Purview is the foundation of a sustainable data compliance programme built on the Microsoft platform \u2014 and One Step Beyond has the certified expertise to deploy it effectively.<\/p>\n

[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_3_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Data Loss Prevention (DLP) \u2014 Microsoft Purview DLP<\/h3>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Microsoft Purview DLP prevents sensitive data from leaving your organisation through Microsoft 365 channels \u2014 email, Teams, SharePoint, OneDrive, and connected cloud applications. DLP policies detect sensitive information types \u2014 personal data, financial data, healthcare information, and custom-defined sensitive content \u2014 and automatically enforce protective actions: blocking sharing, requiring user justification, alerting administrators, or encrypting the content in transit.<\/p>\n

Our engineers design and implement Purview DLP policies tailored to your organisation’s data classification framework and regulatory obligations \u2014 covering nLPD personal data categories, FINMA-protected financial information, and sector-specific sensitive content types. We configure DLP across Microsoft 365 Unified DLP, Endpoint DLP for managed Windows devices, and Microsoft Defender for Cloud Apps for cloud application coverage \u2014 providing end-to-end data leakage prevention across your Microsoft estate.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”1_2″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_3_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Microsoft Information Protection \u2014 Sensitivity Labels & Encryption<\/h3>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Microsoft Information Protection (MIP) provides persistent data protection through sensitivity labels \u2014 classification tags applied to documents and emails that enforce protection wherever the content travels, including outside your organisation. Sensitivity labels can enforce encryption, content markings (watermarks, headers, footers), and access restrictions \u2014 ensuring that a confidential document emailed to an external partner remains encrypted and access-controlled even after it leaves your environment.<\/p>\n

Our engineers design sensitivity label taxonomies that reflect your organisation’s data classification framework, configure auto-labelling policies that classify sensitive content automatically, and deploy labels across Microsoft 365 applications \u2014 Word, Excel, PowerPoint, Outlook, Teams, and SharePoint. For organisations deploying Microsoft 365 Copilot, sensitivity label implementation is a prerequisite for safe Copilot activation \u2014 ensuring that AI-generated content inherits appropriate protection.<\/p>\n

[\/et_pb_text][\/et_pb_column][et_pb_column _builder_version=”4.27.6″ _module_preset=”default” type=”1_2″ theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_3_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Microsoft Defender for Cloud Apps \u2014 CASB & Shadow IT<\/h3>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Microsoft Defender for Cloud Apps is Microsoft’s Cloud Access Security Broker (CASB) \u2014 providing visibility into cloud application usage, control over data shared with cloud applications, and threat detection for cloud-delivered attacks. It discovers shadow IT (unsanctioned cloud applications used by employees without IT approval), assesses cloud application risk, and enforces data protection policies across both Microsoft and third-party cloud applications connected to your environment.<\/p>\n

Our engineers implement Defender for Cloud Apps to give your organisation a complete picture of cloud data risks \u2014 discovering which cloud applications your employees use, identifying data shared externally through cloud applications, blocking access to high-risk or non-compliant applications, and enforcing session controls that limit data download and sharing for sensitive applications accessed from unmanaged devices.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”1_2″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_3_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Microsoft 365 Data Governance \u2014 AvePoint<\/h3>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Microsoft 365 provides powerful collaboration capabilities \u2014 but without proper governance, data accumulates in ways that create compliance risk: stale permissions, abandoned sites, over-shared content, and expired data that should have been deleted. AvePoint extends Microsoft 365 data governance with automated lifecycle management, granular backup and recovery, migration management, and compliance reporting that goes beyond what Microsoft’s native tools provide.<\/p>\n

Our engineers deploy AvePoint to deliver the data governance capabilities that regulated Swiss organisations require: automated access reviews and permission management for SharePoint and Teams, point-in-time backup and recovery for Microsoft 365 data, migration management for mergers, acquisitions, and tenant-to-tenant migrations, and compliance reports mapped to nLPD and FINMA audit requirements. AvePoint is the data governance platform that makes Microsoft 365 auditable at scale.<\/p>\n

[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_3_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Insider Risk Management \u2014 Microsoft Purview<\/h3>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Not all data risks come from external attackers. Insider risks \u2014 employees exfiltrating data before leaving, accidental sharing of sensitive content, or policy violations \u2014 are among the hardest to detect and the most damaging. Microsoft Purview Insider Risk Management uses signals from Microsoft 365 activity \u2014 email, Teams, SharePoint, and endpoint activity \u2014 to detect risky patterns and alert security teams before data loss occurs.<\/p>\n

Our engineers implement Purview Insider Risk Management with careful attention to privacy \u2014 configuring pseudonymisation controls that protect employee privacy while enabling risk detection, designing investigation workflows that comply with Swiss labour law, and integrating insider risk alerts with Microsoft Sentinel for unified security operations.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”4_4″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_3_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

nLPD, GDPR & Regulatory Compliance Alignment<\/h3>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Swiss organisations face a layered compliance landscape: the revised nLPD (in force since September 2023), GDPR for EU data subjects, FINMA circulars for financial institutions, and ISO 27001 for information security management. Microsoft Purview Compliance Manager provides a continuous compliance assessment against these frameworks \u2014 identifying gaps, tracking remediation progress, and generating the compliance score evidence that auditors require.<\/p>\n

Our engineers configure Compliance Manager for the regulatory frameworks applicable to your organisation, implement the technical controls required by each framework within your Microsoft 365 environment, and produce the documentation and audit evidence that demonstrates compliance to internal and external auditors \u2014 including FINMA inspectors and ISO 27001 certification bodies.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.6″ _module_preset=”default” background_color=”rgba(214,214,214,0.25)” da_disable_devices=”off|off|off” global_colors_info=”{}” theme_builder_area=”post_content” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”4_4″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Why One Step Beyond for Data Protection & Compliance?<\/h2>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

One Step Beyond’s data protection and compliance practice is built on deep Microsoft Purview expertise \u2014 the platform that sits at the centre of every Microsoft 365 compliance programme. As a Microsoft Solutions Partner for Modern Work & Security, our engineers understand how Microsoft Purview, Defender for Cloud Apps, MIP, DLP, and AvePoint work together as an integrated compliance architecture \u2014 not as separate tools.<\/p>\n

Our approach is regulatory-first: we start from the compliance obligations that apply to your organisation \u2014 nLPD, GDPR, FINMA, ISO 27001 \u2014 and design the Microsoft technical controls that satisfy them. This means our implementations produce compliance evidence that holds up under audit, not just configurations that look good in a dashboard.<\/p>\n

For data protection platforms beyond Microsoft \u2014 Cribl, Forcepoint, Kiteworks, Proofpoint, Splunk, and Semperis \u2014 these capabilities are delivered by our Swiss Expert Group partners e-Xpert Solutions (Geneva, Lausanne) and eb-Qual (Givisiez, Kloten), who hold certified expertise across each of these platforms.<\/p>\n

We operate from our office in Gland (Vaud), serving organisations across French-speaking Switzerland and beyond.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.6″ _module_preset=”default” da_disable_devices=”off|off|off” global_colors_info=”{}” theme_builder_area=”post_content” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”4_4″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font=”Inter||||||||” text_font_size=”1.2em” text_line_height=”1.4em” header_2_font=”Inter||||||||” header_2_text_color=”#000000″ header_2_font_size=”2em” header_2_line_height=”1.2em” hover_enabled=”0″ header_2_font_size_tablet=”2em” header_2_font_size_phone=”1.5em” header_2_font_size_last_edited=”on|phone” global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Technologies We Work With :<\/h2>\n

One Step Beyond’s core data protection and compliance expertise is built on the Microsoft platform:<\/p>\n

 <\/p>\n

\"\"\"\"<\/p>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

For data protection beyond Microsoft \u2014 Cribl, Forcepoint, Kiteworks, Proofpoint, Splunk, Netskope, and Semperis \u2014 these platforms are delivered by our Swiss Expert Group partners e-Xpert Solutions and eb-Qual, who hold certified expertise across each technology.<\/p>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_font=”Inter||||||||” text_font_size=”1.2em” text_line_height=”1.4em” header_2_font=”Inter||||||||” header_2_text_color=”#000000″ header_2_font_size=”2em” header_2_line_height=”1.2em” header_4_font=”IBM Plex Mono||||||||” header_4_text_color=”#005596″ hover_enabled=”0″ header_2_font_size_tablet=”2em” header_2_font_size_phone=”1.5em” header_2_font_size_last_edited=”on|desktop” global_colors_info=”{}” sticky_enabled=”0″ theme_builder_area=”post_content”]<\/p>\n

\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.6″ _module_preset=”default” background_image=”https:\/\/www.osb.group\/wp-content\/uploads\/2025\/01\/Fond_Bleu_OSB_web_2025.png” parallax=”on” parallax_method=”off” da_disable_devices=”off|off|off” global_colors_info=”{}” theme_builder_area=”post_content” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”4_4″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_2_text_color=”#FFFFFF” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Ready to Strengthen Your Data Protection & Compliance Posture?<\/h2>\n

[\/et_pb_text][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” text_text_color=”#FFFFFF” text_font_size=”1.2em” text_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Whether you are implementing Microsoft Purview, deploying DLP across Microsoft 365, governing data with AvePoint, or preparing for a FINMA or nLPD compliance audit, One Step Beyond brings certified Microsoft expertise and a proven Swiss track record. Contact us to discuss your data protection and compliance challenges.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.6″ _module_preset=”default” da_disable_devices=”off|off|off” global_colors_info=”{}” theme_builder_area=”post_content” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”4_4″ _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Frequently Asked Questions \u2013 Data Protection & Compliance in Switzerland<\/h2>\n

[\/et_pb_text][et_pb_accordion _builder_version=”4.27.6″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″][et_pb_accordion_item title=”Q : What is Microsoft Purview and what does it cover?” open=”on” open_toggle_text_color=”#0C71C3″ _builder_version=”4.27.6″ _module_preset=”default” body_font_size=”1.1em” body_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” toggle_font_size=”1.2em” closed_toggle_font_size=”1.2em” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Microsoft Purview is Microsoft’s unified data governance, risk, and compliance platform \u2014 covering five core capability areas: data classification and information protection (sensitivity labels, encryption), data loss prevention (DLP policies across Microsoft 365, endpoints, and cloud apps), data lifecycle management (retention policies, records management), insider risk management (detecting risky employee behaviour patterns), and compliance management (regulatory assessment, audit evidence, eDiscovery). It is the central platform for any organisation running Microsoft 365 that needs to demonstrate compliance with nLPD, GDPR, FINMA, or ISO 27001.<\/p>\n

[\/et_pb_accordion_item][et_pb_accordion_item title=”Q : What is the Swiss nLPD and how does it affect Microsoft 365 environments?” open=”on” open_toggle_text_color=”#0C71C3″ _builder_version=”4.27.6″ _module_preset=”default” body_font_size=”1.1em” body_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” toggle_font_size=”1.2em” closed_toggle_font_size=”1.2em” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

The revised Swiss Federal Act on Data Protection (nLPD), in force since September 2023, significantly strengthened Swiss data protection requirements \u2014 introducing mandatory breach notification within 72 hours, privacy by design obligations, data processing record requirements, and stricter rules for cross-border data transfers. For Microsoft 365 environments, nLPD compliance requires: data classification and sensitivity labelling (to identify what personal data exists and where), DLP policies (to prevent unauthorised sharing), retention policies aligned with nLPD data minimisation principles, audit logging (to demonstrate compliance), and data subject rights workflows (to respond to access and deletion requests). One Step Beyond configures all of these within Microsoft Purview.<\/p>\n

[\/et_pb_accordion_item][et_pb_accordion_item title=”Q : What is a CASB and why is Microsoft Defender for Cloud Apps important?” open=”on” open_toggle_text_color=”#0C71C3″ _builder_version=”4.27.6″ _module_preset=”default” body_font_size=”1.1em” body_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” toggle_font_size=”1.2em” closed_toggle_font_size=”1.2em” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

A Cloud Access Security Broker (CASB) is a security control point between cloud service consumers and cloud service providers \u2014 providing visibility into cloud application usage, enforcement of security policies, and threat detection for cloud-based attacks. Microsoft Defender for Cloud Apps is Microsoft’s CASB solution. It discovers shadow IT (employees using unsanctioned cloud applications that bypass security controls), assesses the risk of cloud applications in use, enforces data protection policies for content shared through cloud applications, and detects anomalous user behaviour in cloud applications. For Microsoft 365 organisations, Defender for Cloud Apps extends DLP and compliance controls beyond the Microsoft boundary to third-party cloud applications.<\/p>\n

[\/et_pb_accordion_item][et_pb_accordion_item title=”Q : What is AvePoint and how does it complement Microsoft 365?” open=”on” open_toggle_text_color=”#0C71C3″ _builder_version=”4.27.6″ _module_preset=”default” body_font_size=”1.1em” body_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” toggle_font_size=”1.2em” closed_toggle_font_size=”1.2em” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

AvePoint is a Microsoft Solutions Partner providing advanced data governance, backup and recovery, and migration management for Microsoft 365. While Microsoft 365 includes basic retention and compliance features, AvePoint adds: granular point-in-time backup and recovery for Exchange, Teams, SharePoint, and OneDrive (beyond Microsoft’s native 93-day recycle bin), automated permission and access lifecycle management, Teams governance (provisioning policies, lifecycle management, guest access controls), and compliance reports mapped to nLPD and FINMA audit requirements. For regulated Swiss organisations that need auditable, granular control over their Microsoft 365 data, AvePoint is the governance platform that makes Microsoft 365 audit-ready at scale.<\/p>\n

[\/et_pb_accordion_item][et_pb_accordion_item title=”Q : How does Microsoft Purview DLP differ from traditional network DLP?” open=”on” open_toggle_text_color=”#0C71C3″ _builder_version=”4.27.6″ _module_preset=”default” body_font_size=”1.1em” body_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” toggle_font_size=”1.2em” closed_toggle_font_size=”1.2em” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

Traditional network DLP inspects data at the network perimeter \u2014 monitoring traffic leaving the corporate network and blocking content that matches sensitive data patterns. Microsoft Purview DLP operates at the content layer \u2014 protecting sensitive information within and across Microsoft 365 applications regardless of network location. It covers email, Teams messages, SharePoint documents, OneDrive files, and connected cloud applications, and extends to managed Windows endpoints through Endpoint DLP. For cloud-first organisations where data moves through Microsoft 365 rather than a corporate network perimeter, Purview DLP provides more comprehensive and contextually accurate data protection than network-based solutions.<\/p>\n

[\/et_pb_accordion_item][et_pb_accordion_item title=”Q : Where is One Step Beyond based?” open=”on” open_toggle_text_color=”#0C71C3″ _builder_version=”4.27.6″ _module_preset=”default” body_font_size=”1.1em” body_line_height=”1.4em” hover_enabled=”0″ global_colors_info=”{}” toggle_font_size=”1.2em” closed_toggle_font_size=”1.2em” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n

One Step Beyond is headquartered in Gland (Vaud) \u2014 Route de Cit\u00e9-Ouest 2, 1196 Gland, telephone +41 22 995 96 12. The company also operates an office in Budapest (Hungary). As part of Swiss Expert Group, One Step Beyond collaborates with e-Xpert Solutions (Geneva, Lausanne) and eb-Qual (Givisiez, Kloten) to deliver integrated cloud and cybersecurity solutions across Switzerland.<\/p>\n

[\/et_pb_accordion_item][\/et_pb_accordion][et_pb_code _builder_version=”4.27.6″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]