373400 – Microsoft Purview compliance portal: Data Loss Prevention for endpoints – Ability to fetch the original file resulting in a DLP policy match as evidence (Microsoft managed storage) (archived)

Product:

Purview Communication Compliance, Purview Data Loss Prevention

Platform:

Web, World tenant

Status:

Launched

Change type:

Links:

Details:

With this capability, Admins can choose to store a copy of the file that resulted in a DLP policy match. The admin uses this data to analyze the contents to confirm the full set of data that was exfiltrated to assess severity. To configure Microsoft managed storage, similar to customer managed storage, the user can go to endpoint DLP settings and select Microsoft managed storage. As compared to customer managed storage, the admin need not configure any additional settings like adding a blob, assigning permissions, or selecting storage in policy workflow.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
Preview, General Availability

Created:
2024-01-11

updated:
2024-08-07

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

Direct effects for Operations**

- Direct Impact on IT Operations
- Increased Storage Management Requirements
- The introduction of Microsoft managed storage for DLP policy matches may lead to increased storage consumption, requiring IT operations to monitor and manage storage capacity more closely.
- Roles impacted: IT Operations Managers, Storage Administrators
- Changes in Incident Response Procedures
- The ability to fetch original files may necessitate updates to incident response protocols, as admins will need to analyze stored evidence for compliance and security assessments.
- Roles impacted: IT Security Analysts, Compliance Officers

- Direct Impact on IT Services
- Potential Downtime During Configuration
- Transitioning to Microsoft managed storage may require temporary downtime or service interruptions while configurations are applied, impacting user access to services.
- Roles impacted: IT Service Desk, System Administrators
- Dependency on Microsoft Purview Compliance Portal
- The new feature relies on the Microsoft Purview compliance portal, which may introduce dependencies on its availability and performance, affecting overall service reliability.
- Roles impacted: IT Service Managers, Application Support Teams

References:
- Microsoft Purview Compliance Portal Documentation: [Microsoft Purview](https://docs.microsoft.com/en-us/microsoft-365/compliance/purview-compliance-portal?view=o365-worldwide)
- Data Loss Prevention Overview: [Microsoft DLP](https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide)

Data Protection**

XXXXXXX ... paid membership only