MC795079 – Microsoft Purview | Insider Risk Management – Adaptive Protection – HR resignation date as a condition for risk level

Product:

Microsoft 365 suite, Purview Communication Compliance, Purview Insider Risk Management

Platform:

US Instances, Web, World tenant

Status:

Rolling out

Change type:

Admin impact, New feature, Updated message, User impact

Links:

MC681240
(171748)
124972

Details:

Summary:
The message details the General Availability rollout of a Microsoft Purview feature that allows configuring HR resignation date as a condition for risk level in Adaptive Protection. The rollout begins late June 2024 and completes by mid-October 2024. No action is required for the update.

Details:
Updated October 10, 2024: We have updated the rollout timeline below. Thank you for your patience.
Microsoft Purview: The feature to configure HR resignation date as a condition for risk level in Adaptive Protection will be rolling out to General Availability. We communicated the preview for this feature in MC681240 Adaptive Protection in Microsoft Purview: Public preview of HR resignation date as a condition for risk level (November 2023).
This message is associated with Microsoft 365 Roadmap ID 124972 and 171748
[When this will happen:]
General Availability: We will begin rolling out late June 2024 and expect to complete by mid-October 2024 (previously late September).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-05-23

updated:
2024-10-11

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Increased Risk of Data Breaches
Without proper preparation, the new feature may inadvertently classify users as high-risk, leading to unnecessary restrictions and potential data breaches if sensitive information is mishandled during the transition.
   - roles: IT Security Admin, Compliance Officer
   - references: https://learn.microsoft.com/purview/insider-risk-management-adaptive-protection#risk-levels, https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters=&searchterms=124972%2C171748

User Experience Degradation
If the HR resignation date is not accurately reflected in the system, users may face unexpected access issues or restrictions, negatively impacting their workflow and productivity.
   - roles: End User, HR Manager
   - references: https://learn.microsoft.com/purview/insider-risk-management-adaptive-protection#risk-levels, https://purview.microsoft.com/compliance

Compliance and Governance Challenges
The implementation of the new risk level feature without adequate preparation may lead to non-compliance with internal policies or regulations, resulting in potential legal ramifications.
   - roles: Compliance Officer, Legal Advisor
   - references: https://learn.microsoft.com/purview/insider-risk-management-adaptive-protection#risk-levels, https://www.microsoft.com/microsoft-365/roadmap?rtc=1%26filters=&searchterms=124972%2C171748

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

XXXXXXX ... free basic plan only

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Microsoft is introducing a new feature in its Purview suite that allows organizations to use an employee's resignation date as a factor in assessing risk levels. This update is part of the Adaptive Protection in Insider Risk Management, which will be available from late June 2024 to mid-October 2024.

Think of this feature like a security guard who pays extra attention to employees who have handed in their notice. Just as a guard might be more vigilant with someone who is leaving the company soon, this tool helps IT administrators assign different risk levels based on an employee's resignation date. For instance, if someone resigns, the system can automatically flag their activity as a higher risk, just in case they might be tempted to take sensitive information with them.

The process works by connecting HR systems to the Microsoft Purview platform. Once connected, administrators can set rules that adjust the risk level based on the resignation date. This helps organizations better manage potential insider threats, such as data theft or leaks, by focusing on those who might pose a higher risk due to their impending departure.

The system is designed with privacy in mind. Employees' identities are masked, and only authorized personnel can access detailed information. This is similar to how a hotel might keep guest information confidential, only revealing details to staff who need to know for specific tasks.

No immediate action is required from organizations to adopt this feature. Administrators can explore and configure these settings through the Microsoft Purview compliance portal. This update aims to enhance security measures while respecting user privacy, ensuring that organizations can protect their data without compromising employee trust.