Hands-on experience implementing Microsoft Purview DLP in regulated or compliance-driven environments. Practical experience with sensitivity labels, encryption, content marking, and access restrictions. Experience protecting CUI or similarly regulated data within Microsoft 365. Strong understanding of how DLP and information protection map to CMMC Level 2 / NIST 800-171 requirements. Experience supporting compliance audits or assessments with technical evidence and configuration artifacts.