Key facts
With the introduction of Microsoft 365 (M365) in the Federal Administration, sensitivity labelling will also become compulsory for Office documents. Sensitivity labelling in Microsoft 365 allows documents to be allocated and labelled with confidentiality levels. The obligation to apply a sensitivity label to the document will apply irrespective of the location in which they are saved. This will result in additional work for employees, as all previously worked documents will have to be systematically classified. Labelling should primarily specify whether a document may be saved in the public cloud, in order to ensure that information protection requirements are being met. It also helps to increase awareness around the importance of document classification. However, since only a few documents have actually been saved in the public cloud so far, the immediate added value for users is currently low.
The Swiss Federal Audit Office (SFAO) has carried out a brief assessment on the user-friendliness of Microsoft 365, in particular regarding the cost of document labelling and data security.