check before: 2024-08-01
Product:
Purview Communication Compliance, Purview Insider Risk Management
Platform:
Online, US Instances, Web, World tenant
Status:
In development
Change type:
New feature, Admin impact
Links:
(171720)
156016
Details:
Summary:
Microsoft Purview Insider Risk Management is introducing enhancements for detecting potential high-impact users, including improved accessibility and detailed reasons for detections on the Alerts page. These updates are associated with Roadmap IDs 156016 and 171720, and will roll out between late August and early September 2024. The feature is on by default and requires no action to enable.
Details:
Microsoft Purview Insider Risk Management will be rolling out minor changes for when it detects a potential high impact user whose activities may lead to potential data security incidents. These changes will include improving accessibility and more prominently highlighting the reasons for the detection on the Alert page. Also, we will provide additional descriptors for how the risk score booster is applied to the user.
This message is associated with Microsoft 365 Roadmap ID 156016 and Roadmap ID 171720.
[When this will happen:]
General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out late August 2024 and expect to complete the rollout by early September 2024.
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2024-08-23
updated:
2024-08-23
Public Preview Start Date
XXXXXXX ... free basic plan only
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
linked item details
XXXXXXX ... free basic plan only
Direct effects for Operations**
Increased Alert Frequency
The enhancements may lead to an increase in alerts for potential high-impact users, causing alert fatigue among admins and potentially leading to missed critical alerts.
- roles: Purview Admin, Security Analyst
- references: https://learn.microsoft.com/purview/insider-risk-management-activities?view=o365-worldwide, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=156016
User Experience Confusion
With the new descriptors and changes in the Alerts page, users may experience confusion regarding their risk status, leading to unnecessary anxiety or misinterpretation of their actions.
- roles: End User, HR Manager
- references: https://learn.microsoft.com/purview/insider-risk-management-policies?view=o365-worldwide, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=171720
Configutation Options**
Disable Insider Risk Management Alerts
You can disable alerts for Insider Risk Management if you do not want to receive notifications about potential high-impact users.
- technical instructions: 1. Go to the Microsoft Purview compliance portal. 2. Navigate to 'Insider Risk Management'. 3. Select 'Policies' and choose the policy you want to modify. 4. Under 'Alerts', toggle the alert settings to 'Off'.
- references: https://learn.microsoft.com/purview/insider-risk-management-policies?view=o365-worldwide
Restrict Access to Insider Risk Management
You can restrict access to the Insider Risk Management features to specific roles or users to enhance security and privacy.
- technical instructions: 1. Go to the Microsoft Purview compliance portal. 2. Navigate to 'Permissions'. 3. Select 'Roles' and choose the role you want to modify. 4. Adjust the permissions to limit access to Insider Risk Management features.
- references: https://learn.microsoft.com/purview/insider-risk-management-activities?view=o365-worldwide
Data Protection**
XXXXXXX ... paid membership only
** AI generated content. This information is not reliable.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
