518291 – Microsoft Purview: Insider Risk Management – Enhancements to variant limits and detection groups

Product:

Purview, Purview Communication Compliance, Purview compliance portal, Purview Insider Risk Management

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

Details:

Microsoft Purview Insider Risk Management variant limit is being increased from 3 to 10 per indicator and an overall limit of 100 across all indicators. Along with this, the number of items in one detection group is being increased from 200 to 500. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2025-10-24

updated:
2025-10-24

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Increased Detection Limits
Without proper preparation, the increase in variant limits and detection groups may lead to an overwhelming amount of data being processed, potentially causing system slowdowns or failures in real-time monitoring capabilities.
   - roles: IT Operations Manager, Compliance Officer
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-insider-risk-management/ba-p/123456, https://www.microsoft.com/en-us/security/blog/2023/10/01/insider-risk-management-enhancements/

User Privacy Concerns
The changes may inadvertently expose sensitive user data if not properly managed, leading to potential privacy violations and loss of user trust, especially if the increased detection capabilities are not aligned with privacy regulations.
   - roles: Data Protection Officer, HR Manager
   - references: https://www.privacy-regulation.eu/en/, https://www.microsoft.com/en-us/trustcenter/privacy

Configutation Options**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only