409966 – Microsoft Purview compliance portal: Insider Risk Management- New scenario based policy templates

Product:

Purview Communication Compliance, Purview Insider Risk Management

Platform:

US Instances, Web, World tenant

Status:

In development

Change type:

Links:

Details:

We are adding two additional pre-configured quick policy templates for crown jewel protection and email exfiltration for admins that want to deploy scenario specific policy templates with little configurations needed to get started faster. These templates are in addition to the existing data leak and data theft quick policies. All 4 scenario based quick policies can be found in the Policies page> Create Policies. Additional tuning post deployment to meet individual alert volume needs can be expected. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-07-31

updated:
2024-08-27

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

Direct effects for Operations**

- Direct Impact on IT Operations
- Implementation of new policy templates may require additional configuration and testing.
- Potential downtime or performance degradation during the deployment phase.
- Roles impacted: IT Operations Team, System Administrators.
- Increased alert volume due to new policies may lead to a higher workload for IT teams.
- Risk of alert fatigue, potentially causing genuine threats to be overlooked.
- Roles impacted: Security Analysts, Compliance Officers.

- Direct Impact on IT Services
- Integration of new templates may affect existing compliance workflows and processes.
- Possible disruptions in data monitoring and reporting capabilities.
- Roles impacted: Compliance Managers, Data Protection Officers.
- Dependencies on other IT services (e.g., email systems, data storage solutions) may introduce vulnerabilities if not properly aligned with new policies.
- Increased risk of data breaches or compliance violations if interdependencies are not managed.
- Roles impacted: IT Architects, Service Managers.

References:
- Microsoft Purview Insider Risk Management documentation: [Microsoft Docs](https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management?view=o365-worldwide)
- Insider Risk Management overview: [Microsoft Insider Risk Management](https://www.microsoft.com/en-us/security/business/insider-risk-management)