check before: 2024-05-14
Product:
Entra, Microsoft 365 suite, Purview Communication Compliance, Purview Insider Risk Management
Platform:
US Instances, Web, World tenant
Status:
Launched
Change type:
Admin impact, New feature, Updated message
Links:
Details:
Summary:
After further review we have decided not to proceed with this change at this time. We apologize for any inconvenience. Microsoft Purview Insider Risk Management will roll out a public preview of granular trigger throttling limits from late October 2024 to late January 2025. The update introduces limits to manage noisy triggers and enhance policy health warnings. No action is needed, but admins should be notified. Further details are available in the Microsoft Purview compliance portal.
Details:
Updated March 28, 2025: After further review we have decided not to proceed with this change at this time. We apologize for any inconvenience.
Coming soon, Microsoft Purview Insider Risk Management will be rolling out public preview of granular trigger throttling limits.
[When this will happen:]
Public Preview: We will begin rolling out late October 2024 (previously late August) and expect to complete by late January 2025 (previously late October).
General Availability: We will communicate via Message center when we are ready to proceed.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2024-04-30
updated:
2025-03-29
Public Preview Start Date
XXXXXXX ... free basic plan only
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
linked item details
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft's Purview Insider Risk Management tool is introducing granular trigger throttling to limit the number of daily alerts, with sensitive triggers capped at 15,000 and others at 5,000, to help organizations focus on critical alerts without being overwhelmed by less important ones.
Direct effects for Operations**
Granular Trigger Throttling Limits
Implementation of new throttling limits may lead to delayed alerts for critical insider risks, potentially allowing malicious activities to go undetected for longer periods.
- roles: Security Administrators, Compliance Officers
- references: https://learn.microsoft.com/purview/insider-risk-management-solution-overview, https://purview.microsoft.com/compliance
Policy Health Warnings
Enhanced policy health warnings may not be effectively communicated to admins, leading to mismanagement of noisy triggers and increased risk of overlooking significant alerts.
- roles: IT Administrators, Compliance Officers
- references: https://learn.microsoft.com/purview/insider-risk-management-solution-overview, https://purview.microsoft.com/compliance
User Experience with Alerts
Changes in alert management could frustrate users if critical alerts are missed or delayed, impacting their ability to respond to potential insider threats.
- roles: End Users, Security Analysts
- references: https://learn.microsoft.com/purview/insider-risk-management-solution-overview, https://purview.microsoft.com/compliance
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
Enhanced Alert Management
With the introduction of granular trigger throttling, organizations can manage alert volumes more effectively, reducing the risk of critical alerts being lost in noise. This improves the response time to actual risks and enhances overall security posture.
- next-steps: Review current alert configurations and adjust them based on the new throttling limits to ensure critical alerts are prioritized. Train IT staff on the updated alert management process to leverage the enhanced policy health warnings.
- roles: Security Analysts, Compliance Officers, IT Administrators
- references: https://learn.microsoft.com/purview/insider-risk-management-solution-overview, https://purview.microsoft.com/compliance
Policy Optimization
The enhanced policy health warnings will assist admins in identifying and addressing noisy triggers effectively. This can lead to more efficient policy management and reduce unnecessary investigations, allowing resources to focus on genuine threats.
- next-steps: Conduct a review of existing insider risk policies to identify areas where noise is prevalent. Use the insights from the health warnings to refine policies and reduce false positives.
- roles: Compliance Officers, Risk Management Teams, IT Administrators
- references: https://learn.microsoft.com/purview/insider-risk-management-solution-overview, https://purview.microsoft.com/compliance
Training and Documentation Improvement
As the new throttling limits and health warnings are implemented, it is crucial to update documentation and provide training to relevant staff. This ensures that all stakeholders are aware of the changes and can act accordingly.
- next-steps: Develop a training program and update internal documentation regarding the new features and best practices for managing insider risk. Schedule training sessions for affected teams to ensure they understand the new processes.
- roles: IT Administrators, Security Teams, Compliance Officers
- references: https://learn.microsoft.com/purview/insider-risk-management-solution-overview, https://purview.microsoft.com/compliance
Potentional Risks**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
Hypothetical Work Council Statement**
XXXXXXX ... paid membership only
DPIA Draft**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2025-03-29 | MC Last Updated | 11/13/2024 20:51:35 | 2025-03-28T22:25:57Z |
| 2025-03-29 | MC Messages | Updated November 13, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon, Microsoft Purview Insider Risk Management will be rolling out public preview of granular trigger throttling limits. This message is associated with Microsoft 365 Roadmap ID 382130. [When this will happen:] Public Preview: We will begin rolling out late October 2024 (previously late August) and expect to complete by late January 2025 (previously late October). General Availability: We will begin rolling out early March 2025 (previously late December) and expect to complete by late March 2025 (previously late January). | Updated March 28, 2025: After further review we have decided not to proceed with this change at this time. We apologize for any inconvenience.
Coming soon, Microsoft Purview Insider Risk Management will be rolling out public preview of granular trigger throttling limits. [When this will happen:] Public Preview: We will begin rolling out late October 2024 (previously late August) and expect to complete by late January 2025 (previously late October). General Availability: We will communicate via Message center when we are ready to proceed. |
| 2025-03-29 | MC Summary | Microsoft Purview Insider Risk Management is introducing granular trigger throttling limits in a public preview, with a rollout timeline updated to start in late October 2024 and general availability in early March 2025. This update will help organizations receive critical alerts without being affected by surge in trigger volumes. | After further review we have decided not to proceed with this change at this time. We apologize for any inconvenience. Microsoft Purview Insider Risk Management will roll out a public preview of granular trigger throttling limits from late October 2024 to late January 2025. The update introduces limits to manage noisy triggers and enhance policy health warnings. No action is needed, but admins should be notified. Further details are available in the Microsoft Purview compliance portal. |
| 2025-03-29 | MC End Time | 02/17/2025 09:00:00 | 2025-04-04T10:00:00Z |
| 2025-03-29 | MC prepare | No action is needed from you to prepare for this rollout. You may want to notify your admins about this change and update any relevant documentation as appropriate.
Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. You can access the Insider Risk Management solution in the Microsoft Purview compliance portal. Learn more: Insider risk management | Microsoft Learn https://learn.microsoft.com/purview/insider-risk-management-solution-overview https://purview.microsoft.com/compliance https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=382130 | No action is needed from you to prepare for this rollout. You may want to notify your admins about this change and update any relevant documentation as appropriate.
Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. You can access the Insider Risk Management solution in the Microsoft Purview compliance portal. Learn more: Insider risk management | Microsoft Learn https://learn.microsoft.com/purview/insider-risk-management-solution-overview https://purview.microsoft.com/compliance |
| 2024-11-14 | MC Messages | Updated September 5, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon, Microsoft Purview Insider Risk Management will be rolling out public preview of granular trigger throttling limits. This message is associated with Microsoft 365 Roadmap ID 382130. [When this will happen:] Public Preview: We will begin rolling out late October 2024 (previously late May) and expect to complete by late January 2024 (previously late October). General Availability: We will begin rolling out late January 2024 (previously late December) and expect to complete by late January 2024. | Updated November 13, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon, Microsoft Purview Insider Risk Management will be rolling out public preview of granular trigger throttling limits. This message is associated with Microsoft 365 Roadmap ID 382130. [When this will happen:] Public Preview: We will begin rolling out late October 2024 (previously late August) and expect to complete by late January 2025 (previously late October). General Availability: We will begin rolling out early March 2025 (previously late December) and expect to complete by late March 2025 (previously late January). |
| 2024-11-14 | MC Last Updated | 09/06/2024 01:48:41 | 2024-11-13T20:51:35Z |
| 2024-11-14 | MC Summary | Microsoft Purview Insider Risk Management's public preview of granular trigger throttling will begin rollout in late October 2024 with general availability in late January 2025. This update introduces more detailed trigger throttling limits to prevent policy interference and includes enhanced policy health warning messages. No preparation is needed from users. | Microsoft Purview Insider Risk Management is introducing granular trigger throttling limits in a public preview, with a rollout timeline updated to start in late October 2024 and general availability in early March 2025. This update will help organizations receive critical alerts without being affected by surge in trigger volumes. |
| 2024-09-06 | MC MessageTagNames | New feature, Admin impact | Updated message, New feature, Admin impact |
| 2024-09-06 | MC Summary | Microsoft Purview Insider Risk Management is introducing granular trigger throttling limits in a public preview by late May 2024, with general availability in late December 2024. This update aims to prevent policy interference from high trigger volumes, setting daily limits for sensitive and other triggers, and enhancing policy health warning messages. No preparation is needed from users. | Microsoft Purview Insider Risk Management's public preview of granular trigger throttling will begin rollout in late October 2024 with general availability in late January 2025. This update introduces more detailed trigger throttling limits to prevent policy interference and includes enhanced policy health warning messages. No preparation is needed from users. |
| 2024-09-06 | MC Last Updated | 04/30/2024 01:11:25 | 2024-09-06T01:48:41Z |
| 2024-09-06 | MC Messages | Coming soon, Microsoft Purview Insider Risk Management will be rolling out public preview of granular trigger throttling limits.
This message is associated with Microsoft 365 Roadmap ID 382130. [When this will happen:] Public Preview: We will begin rolling out late May 2024 and expect to complete by mid-June 2024. General Availability: We will begin rolling out late December 2024 and expect to complete by late December 2024. | Updated September 5, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon, Microsoft Purview Insider Risk Management will be rolling out public preview of granular trigger throttling limits. This message is associated with Microsoft 365 Roadmap ID 382130. [When this will happen:] Public Preview: We will begin rolling out late October 2024 (previously late May) and expect to complete by late January 2024 (previously late October). General Availability: We will begin rolling out late January 2024 (previously late December) and expect to complete by late January 2024. |
| 2024-09-06 | MC Title | Microsoft Purview | Insider Risk Management: Granular trigger throttling | (Updated) Microsoft Purview | Insider Risk Management: Granular trigger throttling |
| 2024-09-06 | MC End Time | 02/11/2025 09:00:00 | 2025-02-17T09:00:00Z |
Last updated 1 month ago
