518226 – Microsoft Purview: Data Security Investigations – Introducing integration with Data Security Posture Management and deepening integration with Defender XDR, Insider Risk Management

Product:

Defender, Purview, Purview Communication Compliance, Purview compliance portal, Purview Insider Risk Management

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

Details:

Data Security Investigations (DSI) insights are now being incorporated into Data Security Posture Management to support the prevention of sensitive content exfiltration. Additionally, DSI integrations with Defender XDR and Insider Risk Management are being enhanced, reflecting customer feedback received during the Public Preview phase.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-11-18

updated:
2026-01-21

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Integration Issues
Without proper preparation, the integration of Data Security Investigations with existing systems may lead to compatibility issues, resulting in system downtime or degraded performance.
   - roles: IT Operations Manager, System Administrator
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-security-investigations/ba-p/3741230, https://www.microsoft.com/en-us/security/blog/2023/10/01/microsoft-purview-data-security-investigations/

User Experience Degradation
Users may experience delays or interruptions in accessing sensitive data due to untested changes, leading to frustration and decreased productivity.
   - roles: End Users, Compliance Officers
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-security-investigations/ba-p/3741230, https://www.microsoft.com/en-us/security/blog/2023/10/01/microsoft-purview-data-security-investigations/

Configutation Options**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Imagine your office as a secure building where sensitive documents are stored. Microsoft Purview acts like a security team that monitors and protects these documents from being taken out without permission. Recently, this security team has improved its methods to ensure even better protection.

Data Security Investigations (DSI) is like a detective unit within this security team. It looks for clues and patterns that might indicate someone is trying to take sensitive information out of the building. Now, DSI is working more closely with Data Security Posture Management, which is like a system that checks all the locks and alarms in the building to prevent unauthorized access.

Moreover, DSI is also enhancing its collaboration with Defender XDR and Insider Risk Management. Think of Defender XDR as a network of cameras and sensors around the building that detect any suspicious activity, and Insider Risk Management as a system that keeps an eye on employees to ensure they aren't unintentionally or intentionally taking documents they shouldn't.

These improvements mean that the security team can better prevent sensitive information from leaving the building, based on feedback from users who tried out these features in a test phase. This is like adjusting the security measures based on real-world experiences to make sure the building is as secure as possible.