MC934733 – (Updated) Microsoft Purview | Insider Risk Management: Downgrade or remove sensitivity label

Product:

Microsoft 365 Apps, OneDrive, Purview Communication Compliance, Purview Information Protection, Purview Insider Risk Management, SharePoint

Platform:

Online, Web, World tenant

Status:

In development

Change type:

Admin impact, New feature, Updated message

Links:

466742

Details:

Summary:
Microsoft Purview Insider Risk Management will soon update to capture sensitivity label changes on OneDrive, Azure Information Protection, and endpoints, not just SharePoint. Public Preview starts mid-November 2024, with General Availability in late March 2025. No action is required for this automatic update.

Details:
Updated February 5, 2025: We have updated the rollout timeline below. Thank you for your patience.
Coming soon to Microsoft Purview Insider Risk Management (IRM): We have enhanced these existing Microsoft Office 365 indicators:
Downgrading sensitivity labels applied to SharePoint files
Removing sensitivity labels from SharePoint files
This message is associated with Microsoft 365 Roadmap ID 466742.
[When this will happen:]
Public Preview: We will begin rolling out mid-November 2024 and expect to complete by early December 2024.
General Availability (Worldwide): We will begin rolling out late March 2025 (previously late January) and expect to complete by late April 2025 (previously early February).

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-11-15

updated:
2025-02-06

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

Pictures

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Sensitivity Label Management
Changes in sensitivity label management may lead to unintentional downgrading or removal of sensitive data protection, increasing the risk of data leakage.
   - roles: Data Protection Officer, IT Security Manager
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=466742

User Access Control
Automatic updates may disrupt existing user access controls, leading to unauthorized access to sensitive information if not properly managed.
   - roles: System Administrator, Compliance Officer
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=466742

User Experience
Users may experience confusion or frustration due to changes in how sensitivity labels are applied and reported, impacting their workflow and productivity.
   - roles: End User, Help Desk Support
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=466742

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Risk Management Capabilities
The upcoming update to Microsoft Purview Insider Risk Management will allow organizations to capture sensitivity label changes across OneDrive, Azure Information Protection, and endpoints, improving the detection of insider threats. This enhancement broadens the scope of monitoring and can help identify potential data leaks or security violations more effectively.
   - next-steps: Review current IRM policies and configurations to integrate the new sensitivity label tracking capabilities. Train security and compliance teams on the updated features to maximize the benefits of enhanced monitoring.
   - roles: IT Security Team, Compliance Officers, Data Protection Officers
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=466742

Improved User Experience with Sensitivity Labels
By automatically capturing sensitivity label changes on various platforms, users will have a more seamless experience when managing sensitive information. This reduces the risk of user error when downgrading or removing labels, which can lead to data exposure.
   - next-steps: Communicate the changes to end-users and provide training on how to properly manage sensitivity labels. Update internal documentation to reflect the new processes.
   - roles: End Users, IT Support Staff, Training Coordinators
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=466742

Operational Efficiency in IT Management
The automatic update of sensitivity label monitoring means less manual oversight is required by IT administrators. This can lead to improved operational efficiency and allow IT teams to focus on other critical tasks.
   - next-steps: Assess current administrative workloads and identify areas where resources can be reallocated due to the reduced need for manual sensitivity label monitoring. Consider implementing automation tools for other IT processes.
   - roles: IT Administrators, Operations Managers, Project Managers
   - references: https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=466742

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only