check before: 2026-03-01
Product:
Copilot, Microsoft 365 Apps, Purview, Purview Communication Compliance, Purview Information Protection, Purview Insider Risk Management
Platform:
Online, Web, World tenant
Status:
In development
Change type:
New feature, User impact, Admin impact
Links:
Details:
Summary:
Microsoft Purview Insider Risk Management is enhancing the Data Security Triage Agent to prioritize alerts, summarize behavioral risks, and expand user context for more efficient investigations. The update rolls out from March to July 2026, requires admin activation, and includes Security Copilot for Microsoft 365 E5 users.
Details:
[Introduction]
We're enhancing the Data Security Triage Agent in Microsoft Purview Insider Risk Management to help analysts triage alerts more efficiently and focus investigations on the activities and users that matter most. These updates respond to customer feedback for clearer risk context, streamlined alert review, and improved investigation accuracy.
This message is associated with Microsoft 365 Roadmap ID 557683.
[When this will happen]
Public Preview: We will begin rolling out in early March 2026 and expect to complete by early April 2026.
General Availability (Worldwide): We will begin rolling out in late June 2026 and expect to complete by late July 2026.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2026-03-17
updated:
2026-04-17
Public Preview Start Date
XXXXXXX ... free basic plan only
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
linked item details
XXXXXXX ... free basic plan only
Pictures
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Inefficient Alert Management
Without preparation, analysts may struggle to adapt to the new Data Security Triage Agent, leading to delays in responding to alerts and potential oversight of critical risks.
- roles: Security Analysts, IT Administrators
- references: https://www.microsoft.com/security/blog/2025/11/18/agents-built-into-your-workflow-get-security-copilot-with-microsoft-365-e5/, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=557683
Increased Risk of Security Incidents
If the new features are not properly enabled and trained on, organizations may face an increased risk of insider threats going undetected, resulting in data breaches or compliance issues.
- roles: Security Analysts, Compliance Officers
- references: https://sip.purview.microsoft.com/insiderriskmgmt/alertspage, https://sip.purview.microsoft.com/agent/agentoverview
Configutation Options**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 4 weeks ago ago
