check before: 2025-08-01
Product:
Purview Communication Compliance, Purview Information Protection, Purview Insider Risk Management
Platform:
Web, World tenant
Status:
In development
Change type:
Links:
Details:
With this update, IRM will support the discovery of sensitive files and text shared to any cloud application or website (inc. GenAI) via network layer. This capability is based on integration with 3rd party network partners (with data being captured via network layer). Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2025-03-11
updated:
2025-03-11
Public Preview Start Date
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Data Leakage Risk
Without proper preparation, the new capability may lead to unintentional data leakage, as sensitive information could be shared without adequate monitoring or controls in place.
- roles: Compliance Officer, IT Security Manager
- references: https://www.microsoft.com/en-us/security/blog/2021/06/15/understanding-data-leakage-and-how-to-prevent-it/
User Privacy Concerns
The implementation of this feature without prior communication may raise privacy concerns among users, leading to distrust in the organization's data handling practices.
- roles: End Users, HR Manager
- references: https://www.forbes.com/sites/bernardmarr/2021/05/10/the-importance-of-user-privacy-in-the-digital-age/?sh=5c1c1b4e4c3b
Operational Disruption
The integration with third-party network partners may cause operational disruptions if not properly tested, affecting user access to applications and services.
- roles: Network Administrator, IT Operations Manager
- references: https://www.cio.com/article/243198/how-to-avoid-it-disruption-during-a-technology-change.html
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
Enhanced Data Loss Prevention (DLP)
The integration of Microsoft Purview's capabilities allows for more robust data loss prevention strategies. Organizations can identify and mitigate risks associated with sensitive data being shared externally, thus enhancing overall data security and compliance.
- next-steps: Conduct a risk assessment to identify sensitive data flows, and develop DLP policies leveraging the new capabilities of Purview. Train staff on new DLP protocols.
- roles: Compliance Officer, IT Security Manager, Data Governance Lead
- references: https://www.microsoft.com/en-us/security/business/products/purview, https://techcommunity.microsoft.com/t5/security-compliance-identity/announcing-microsoft-purview-compliance-portal/ba-p/3710953
Improved Insider Threat Detection
With the new capabilities in Insider Risk Management, organizations can more effectively detect and respond to insider threats. This can lead to a reduction in potential data breaches and enhance organizational trust.
- next-steps: Review existing insider threat policies and incorporate the new detection capabilities. Set up a monitoring system to analyze signals and alerts generated by the Purview system.
- roles: CISO, Risk Management Officer, IT Operations Manager
- references: https://www.microsoft.com/en-us/security/blog/2023/10/02/introducing-insider-risk-management-in-microsoft-purview/, https://www.microsoft.com/en-us/security/business/products/purview
" target="_blank" rel="nofollow noopener noreferrer">https://www.microsoft.com/en-us/security/business/products/purview
Streamlined Compliance Reporting
The compliance portal's features can simplify the reporting process for regulatory compliance. By automating data discovery and risk assessment, organizations can save time and resources while ensuring adherence to regulations.
- next-steps: Identify key compliance requirements and leverage the reporting features of the Purview compliance portal to automate and streamline reporting processes. Train compliance teams on utilizing the new tools effectively.
- roles: Compliance Officer, Legal Advisor, IT Administrator
- references: https://www.microsoft.com/en-us/security/business/products/purview, https://techcommunity.microsoft.com/t5/security-compliance-identity/announcing-microsoft-purview-compliance-portal/ba-p/3710953
Potentional Risks**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
Hypothetical Work Council Statement**
XXXXXXX ... paid membership only
DPIA Draft**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 1 week ago
