477364 – Microsoft Purview compliance portal: Insider Risk Management – Increasing policy template limits for Insider Risk Management

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Insider Risk Management

Platform:

US Instances, Web, World tenant

Status:

Launched

Change type:

Links:

MC1011148

Details:

Insider Risk Management will increase policy creation limits from 20 policies per template to 100 maximum overall active policies. For example, an organization may have 50 data leak policy templates because the limit will now apply to all active policies versus each policy template. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-02-11

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Please, look at the most relevant linked item for details

explanation for non-techies**

Imagine you're managing a library. Previously, you could only have 20 books on a specific topic on a shelf, even if you had more space and more books on that topic. Now, you can organize up to 100 books on that shelf, allowing you to cover a broader range of topics and provide more resources to your patrons. This change doesn't mean you have to fill the shelf to capacity, but it gives you the flexibility to do so if needed.

In the world of Microsoft Purview's Insider Risk Management, a similar change is happening. Previously, organizations could create up to 20 policies per template to manage insider risks like data leaks or security violations. Now, they can have up to 100 active policies overall, regardless of the number of templates. This means more flexibility in tailoring risk management strategies to meet specific organizational needs.

Think of these policies as the rules or guidelines you set in your library to ensure books are used properly and not misplaced or damaged. With more policies, you can better address various scenarios, such as ensuring rare books are handled with care or digital resources are accessed securely.

Microsoft Purview's system works by collecting different signals, much like a librarian noticing if a book is repeatedly returned late or damaged. It helps identify potential risks, whether intentional or accidental, and allows organizations to create policies that align with their internal rules and governance.

Privacy is a key consideration, much like ensuring library users' personal information is protected. In this system, users are pseudonymized, meaning their identities are hidden by default, and access is controlled based on roles. This is akin to only allowing certain staff members to access sensitive library records, ensuring user privacy is maintained.

Overall, this update provides organizations with more tools to manage insider risks effectively, similar to how a library can better organize and protect its collection with more comprehensive guidelines.