MC789307 – (Updated) Microsoft Purview | Insider Risk Management: Adaptive protection – Enhancements to risk level settings

cloudscout.one Icon

check before: 2024-05-15

Product:

Microsoft 365 suite, Purview Communication Compliance, Purview Insider Risk Management

Platform:

US Instances, Web, World tenant

Status:

Rolling out

Change type:

Admin impact, New feature, Updated message

Links:

388736

Details:

Summary:
Enhancements to Microsoft Purview Insider Risk Management include configurable expiration of insider risk levels in adaptive protection. Rollout begins May 2024, with general availability in July 2024. Admins can prevent risk level expiration when alerts are dismissed or cases resolved. Roadmap ID 388736.

Details:
Updated October 22, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon: Admins can configure whether they want to expire insider risk levels in adaptive protection when a user's alert is dismissed, or their case is resolved.
This message is associated with Microsoft 365 Roadmap ID 388736
[When this will happen:]
Public Preview: We will begin rolling out in early May 2024 and expect to complete by late June 2024.
General Availability: We will begin rolling out early July 2024 and expect to complete by mid-November 2024 (previously mid-October).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-05-01

updated:
2024-10-24

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Risk Level Management
If the change is implemented without preparation, there may be confusion among admins regarding the new expiration settings for insider risk levels, potentially leading to unintentional retention of risk levels that should have been expired, which could result in unnecessary alerts and investigations.
   - roles: IT Admin, Compliance Officer
   - references: https://learn.microsoft.com/purview/insider-risk-management-adaptive-protection?tabs=purview-portal, https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters=&searchterms=388736

User Experience
Users may experience increased scrutiny and monitoring if risk levels are not expired appropriately, leading to potential frustration and decreased morale among employees who may feel they are under constant surveillance.
   - roles: End User, HR Manager
   - references: https://learn.microsoft.com/purview/insider-risk-management-adaptive-protection?tabs=purview-portal, https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters=&searchterms=388736

Configutation Options**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Microsoft is introducing enhancements to its Purview Insider Risk Management tool, which is part of the Microsoft 365 suite. This tool helps organizations manage and mitigate potential insider threats, such as data leaks or intellectual property theft. The key update involves giving administrators more control over how risk levels are managed when an alert is dismissed or a case is resolved.

Imagine this update like a library's book checkout system. Previously, when a book (or risk level) was checked out (or an alert was raised), it would automatically be returned (or expire) once the due date (or case resolution) was reached. Now, librarians (or admins) have the option to keep the book checked out longer if they believe it might still be needed, even if the initial reason for checking it out has been resolved.

This change allows for more flexibility and customization in managing insider risks. Admins can decide whether they want risk levels to expire automatically or keep them active for further monitoring. This is particularly useful in scenarios where an alert might be dismissed, but the admin wants to continue observing the situation for any future issues.

The update will roll out in stages, starting with a public preview in May 2024 and becoming generally available by July 2024. Admins will find a new setting in the Risk levels tab called "Risk level expiration options," which they can adjust according to their organization's needs.

Overall, this enhancement aims to provide organizations with better tools to protect their data and ensure compliance with internal policies and governance standards.

** AI generated content. This information must be reviewed before use.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



change history

DatePropertyoldnew
2024-10-24MC Last Updated10/10/2024 01:23:582024-10-23T23:21:26Z
2024-10-24MC MessagesUpdated October 9, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon: Admins can configure whether they want to expire insider risk levels in adaptive protection when a user's alert is dismissed, or their case is resolved.
This message is associated with Microsoft 365 Roadmap ID 388736
[When this will happen:]
Public Preview: We will begin rolling out in early May 2024 and expect to complete by late June 2024.
General Availability: We will begin rolling out early July 2024 and expect to complete by mid-October 2024 (previously late September).
Updated October 22, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon: Admins can configure whether they want to expire insider risk levels in adaptive protection when a user's alert is dismissed, or their case is resolved.
This message is associated with Microsoft 365 Roadmap ID 388736
[When this will happen:]
Public Preview: We will begin rolling out in early May 2024 and expect to complete by late June 2024.
General Availability: We will begin rolling out early July 2024 and expect to complete by mid-November 2024 (previously mid-October).
2024-10-24MC End Time11/11/2024 08:00:002024-12-30T08:00:00Z
2024-10-24MC SummaryMicrosoft Purview Insider Risk Management is introducing enhancements allowing admins to configure the expiration of insider risk levels in adaptive protection. The rollout begins in May 2024 for Public Preview and July 2024 for General Availability, with completion expected by mid-October 2024. This update is associated with Roadmap ID 388736.Enhancements to Microsoft Purview Insider Risk Management include configurable expiration of insider risk levels in adaptive protection. Rollout begins May 2024, with general availability in July 2024. Admins can prevent risk level expiration when alerts are dismissed or cases resolved. Roadmap ID 388736.
2024-10-10MC MessagesUpdated September 10, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon: Admins can configure whether they want to expire insider risk levels in adaptive protection when a user's alert is dismissed, or their case is resolved.
This message is associated with Microsoft 365 Roadmap ID 388736
[When this will happen:]
Public Preview: We will begin rolling out in early May 2024 and expect to complete by late June 2024.
General Availability: We will begin rolling out early July 2024 and expect to complete by late September 2024 (previously late August).
Updated October 9, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon: Admins can configure whether they want to expire insider risk levels in adaptive protection when a user's alert is dismissed, or their case is resolved.
This message is associated with Microsoft 365 Roadmap ID 388736
[When this will happen:]
Public Preview: We will begin rolling out in early May 2024 and expect to complete by late June 2024.
General Availability: We will begin rolling out early July 2024 and expect to complete by mid-October 2024 (previously late September).
2024-10-10MC Last Updated09/11/2024 02:39:172024-10-10T01:23:58Z
2024-10-10MC SummaryMicrosoft Purview Insider Risk Management is introducing enhancements to risk level settings, allowing admins to configure the expiration of insider risk levels in adaptive protection. Rollout begins May 2024 for Public Preview and July 2024 for General Availability, with updates completed by September 2024. Roadmap ID: 388736.Microsoft Purview Insider Risk Management is introducing enhancements allowing admins to configure the expiration of insider risk levels in adaptive protection. The rollout begins in May 2024 for Public Preview and July 2024 for General Availability, with completion expected by mid-October 2024. This update is associated with Roadmap ID 388736.
2024-09-11MC Last Updated08/14/2024 01:38:162024-09-11T02:39:17Z
2024-09-11MC MessagesUpdated August 13, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon: Admins can configure whether they want to expire insider risk levels in adaptive protection when a user's alert is dismissed, or their case is resolved.
This message is associated with Microsoft 365 Roadmap ID 388736
[When this will happen:]
Public Preview: We will begin rolling out in early May 2024 and expect to complete by late June 2024.
General Availability: We will begin rolling out early July 2024 and expect to complete by late August 2024 (previously late July).
Updated September 10, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon: Admins can configure whether they want to expire insider risk levels in adaptive protection when a user's alert is dismissed, or their case is resolved.
This message is associated with Microsoft 365 Roadmap ID 388736
[When this will happen:]
Public Preview: We will begin rolling out in early May 2024 and expect to complete by late June 2024.
General Availability: We will begin rolling out early July 2024 and expect to complete by late September 2024 (previously late August).
2024-09-11MC End Time10/07/2024 09:00:002024-11-11T08:00:00Z
2024-09-11MC SummaryMicrosoft 365 is enhancing Insider Risk Management with configurable risk level expiration settings for adaptive protection. Admins can choose to retain or expire risk levels after a user's alert is dismissed or case is resolved. Public Preview starts in May 2024, with General Availability in late August 2024.Microsoft Purview Insider Risk Management is introducing enhancements to risk level settings, allowing admins to configure the expiration of insider risk levels in adaptive protection. Rollout begins May 2024 for Public Preview and July 2024 for General Availability, with updates completed by September 2024. Roadmap ID: 388736.
2024-08-14MC MessageTagNamesNew feature, Admin impactUpdated message, New feature, Admin impact
2024-08-14MC SummaryMicrosoft 365 is enhancing Insider Risk Management with configurable risk level expiration settings for adaptive protection. Admins can choose to retain or expire risk levels after a user's alert is dismissed or case is resolved. Public Preview starts in May 2024, with General Availability in July 2024.Microsoft 365 is enhancing Insider Risk Management with configurable risk level expiration settings for adaptive protection. Admins can choose to retain or expire risk levels after a user's alert is dismissed or case is resolved. Public Preview starts in May 2024, with General Availability in late August 2024.
2024-08-14MC Last Updated05/01/2024 01:39:042024-08-14T01:38:16Z
2024-08-14MC MessagesComing soon: Admins can configure whether they want to expire insider risk levels in adaptive protection when a user's alert is dismissed, or their case is resolved.
This message is associated with Microsoft 365 Roadmap ID 388736
[When this will happen:]
Public Preview: We will begin rolling out in early May 2024 and expect to complete by late June 2024.
General Availability: We will begin rolling out early July 2024 and expect to complete by late July 2024.
Updated August 13, 2024: We have updated the rollout timeline below. Thank you for your patience.
Coming soon: Admins can configure whether they want to expire insider risk levels in adaptive protection when a user's alert is dismissed, or their case is resolved.
This message is associated with Microsoft 365 Roadmap ID 388736
[When this will happen:]
Public Preview: We will begin rolling out in early May 2024 and expect to complete by late June 2024.
General Availability: We will begin rolling out early July 2024 and expect to complete by late August 2024 (previously late July).
2024-08-14MC TitleMicrosoft Purview | Insider Risk Management: Adaptive protection - Enhancements to risk level settings(Updated) Microsoft Purview | Insider Risk Management: Adaptive protection - Enhancements to risk level settings
2024-08-14MC End Time09/09/2024 09:00:002024-10-07T09:00:00Z

Last updated 2 weeks ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!