400444 – Microsoft Purview compliance portal: Insider Risk Management – Adaptive Protection and Conditional Access (archived)

Product:

Microsoft 365 Apps, Purview Communication Compliance, Purview Insider Risk Management

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

Details:

Organizations can use insider risk levels in their Conditional Access policies. This includes some minor experience changes in the Adaptive Protection tab in Insider Risk Management, including adding total counts for Conditional Access policies that use Adaptive Protection and new user insights in the user activity timeline when a user is added or removed from an insider risk level. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-06-15

updated:
2024-09-26

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

Direct effects for Operations**

- Direct Impact on IT Operations
- Changes in Conditional Access Policies
- Potential for misconfiguration leading to unauthorized access or denial of service.
- Increased monitoring and management overhead for IT administrators.
- Roles impacted: IT Security Team, IT Administrators, Compliance Officers.
- User Activity Timeline Updates
- Need for training and adjustment for administrators to interpret new user insights effectively.
- Possible confusion among users regarding changes in access levels and monitoring.
- Roles impacted: IT Support Staff, End Users, Compliance Officers.

- Impact on IT Services
- Integration with Existing Security Protocols
- Dependencies on other security services (e.g., Identity Protection, Data Loss Prevention) may require updates or adjustments.
- Risk of service disruptions if interdependencies are not managed properly.
- Roles impacted: IT Security Team, IT Architects, Service Managers.
- User Experience Changes
- Changes in user interface may lead to temporary disruptions in user productivity as users adapt to new features.
- Increased support tickets related to user confusion or issues with access levels.
- Roles impacted: IT Support Staff, End Users, Training Coordinators.

References:
- Microsoft Purview Insider Risk Management documentation: [Microsoft Docs](https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management?view=o365-worldwide)
- Conditional Access policies overview: [Microsoft Docs](https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview)