MC941861 – Microsoft Purview | Insider Risk Management: Updates to email scoring

cloudscout.one Icon

check before: 2024-11-01

Product:

Purview Communication Compliance, Purview Information Protection, Purview Insider Risk Management

Platform:

Online, Web, World tenant

Status:

In development

Change type:

New feature, Admin impact

Links:

469505

Details:

Coming soon: Microsoft Purview Insider Risk Management will be rolling out updates to email scoring.
This message is associated with Microsoft 365 Roadmap ID 469505.
[When this will happen:]
Public Preview: We will begin rolling out late November 2024 and expect to complete by late November 2024.
General Availability (Worldwide): We will begin rolling out early January 2025 and expect to complete by mid-January 2025.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability, Preview

Created:
2024-11-26

updated:
2024-11-26

Public Preview Start Date

XXXXXXX ... free basic plan only

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

linked item details

XXXXXXX ... free basic plan only

summary for non-techies**

Microsoft is updating its Insider Risk Management tool in Microsoft Purview to count an email sent to multiple recipients as a single instance rather than multiple, improving the accuracy of risk assessments, and this change will occur automatically without requiring IT administrator intervention.

Direct effects for Operations**

Email Scoring Logic Change
The update to email scoring logic may lead to a temporary increase in false positives for insider risk alerts, as the new scoring may not immediately align with existing policies, potentially overwhelming security teams with alerts that require investigation.
   - roles: Security Analyst, Compliance Officer
   - references: https://learn.microsoft.com/purview/insider-risk-management-settings-policy-indicators#create-a-variant-of-a-built-in-indicator" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/insider-risk-management-settings-policy-indicators#create-a-variant-of-a-built-in-indicator, https://www.microsoft.com/microsoft-365/roadmap?filters=&searchterms=469505

User Experience with Alerts
Users may experience confusion or frustration due to changes in how email alerts are generated and displayed, leading to potential misinterpretation of their actions as risky when they are not, impacting overall trust in the system.
   - roles: End User, IT Support Specialist
   - references: https://purview.microsoft.com/compliance, https://learn.microsoft.com/purview/insider-risk-management-settings-policy-indicators#create-a-variant-of-a-built-in-indicator" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/purview/insider-risk-management-settings-policy-indicators#create-a-variant-of-a-built-in-indicator

Configutation Options**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only

** AI generated content. This information must be reviewed before use.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



Last updated 3 days ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!