Engineering firm turns a paper classification policy into labels every employee sees
A utility-sector engineering consulting firm. Outcome verified
The problem
A utility-sector engineering consulting firm had written a data classification policy, but nothing enforced it. Its roughly 200 hybrid employees had no way to mark a document as public, internal or confidential, and no control noticed when a sensitive file left the company. Midway through the project, leadership redefined the classification tiers, so labels, guides and training had to be rebuilt.
Why it mattered
The firm handles confidential and regulated information belonging to its utility clients. A policy with no enforcement offers little protection and no evidence to customers or auditors that classification actually happens.
What we did
Vizius ran a crawl-walk-run rollout inside the firm's existing Microsoft 365 licensing. Labels went to a small pilot group first. Every data-loss-prevention policy started in simulation mode, logging violations without blocking anything, and was tuned against real false positives before enforcement. Decision guides and a recorded training video let the help desk own the platform afterward.
What changed
The firm went live with a six-label taxonomy, 17 data-loss-prevention policies and three custom sensitive-information types, with trained IT staff and documentation. Enforcement was planned as a later phase.
- Construction and engineering
- Midsize company