Terms of Reference: Microsoft Purview Sensitivity Labels Training and Advisory Services

IDH is seeking a qualified consultant or training provider to deliver training and advisory services on Microsoft Purview sensitivity labels for IDH's IT and Knowledge and Data teams
This assignment will equip these teams with the practical knowledge, technical competence, and design confidence required to lead the deployment of a four-tier sensitivity classification framework across IDH's Microsoft 365 environment.
The consultant will deliver hands-on training in a dedicated sandbox tenant covering label configuration, DLP policy setup, audit logging, and analytics under IDH's current licensing, and will provide design advisory on the proposed label taxonomy, access model, and Purview feature configuration.
The engagement is scoped as a learning and advisory role that enables IT and KND to independently support configuration, testing, and staff enablement through the remaining project phases.
Applicants with demonstrated experience in Microsoft Purview information protection, Microsoft 365 data governance, sensitivity label and DLP configuration, and structured technical training delivery should submit proposals to Marjon van Emous (vanemous@idhtrade.org) and Noémie Palaffre (palaffre@idhtrade.org) by July 31th, 2026 at 18:00 CEST.
Know more about this ToR: Microsoft Purview Sensitivity Labels Training and Advisory Services
Background
IDH is establishing a structured sensitivity classification framework across its Microsoft 365 environment via Microsoft Purview, enabling staff, IT, and Legal to classify and protect information consistently across SharePoint and the broader M365 suite. This foundational classification layer also prepares IDH for responsible adoption of AI tools such as Microsoft 365 Copilot and supports the organisation's longer-term data governance maturity. The project follows a five-phase approach spanning May to September 2026, moving from design through pilot implementation, review, and organisation-wide rollout. Key preparatory milestones are already in place: a four-level label taxonomy (Public, Internal, Confidential, Highly Confidential) has been defined, pilot team candidates have been provisionally identified, and a Working Group and Data Governance Committee have been constituted. IDH currently operates on a Microsoft 365 E3 license, which shapes the available Purview feature set and therefore the scope of training required; an upgrade to E5 or the Purview Information Protection Plan 2 add-on is under consideration, which would expand the technical capabilities relevant to this engagement. Consultants should be aware that training content may need to address both the current E3 environment and, if approved, E5-specific functionality. The Scope of Work (May 2026) defines two distinct consultant engagement streams. This ToR covers Stream I — Learning.