Microsoft Purview | Insider Risk Management: DLP alerts as indicators
Coming soon to Microsoft Purview Insider Risk Management (IRM) admins will be able to select Data Loss Prevention (DLP) alerts as indicators in IRM policies. After this rollout, IRM admins can select DLP policies that they would like to bring into IRM and detect if a user has alerts for the pre-selected DLP policies. When an IRM alert is generated, admin and analysts can see if there are any high-risk alerts for this user within DLP for the policies that are enabled as indicators. This feature will help admins and analysts view this information in IRM without switching to DLP. This message is associated with Microsoft 365 Roadmap ID 475057. When this will happen: Public Preview: We will begin rolling out early March 2025 and expect to complete by late March 2025. General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out late May 2025 and expect to complete by mid-June 2025. How this will affect your organization: Admins will be able to enable this indicator in IRM’s global settings for policy indicators. When enabled, this indicator can be selected in the Data Theft by departing users, Data leaks, Data leaks by risky users, Data leaks by priority users, and Risky AI Usage policy templates. Using the indicator 1. In Settings > Insider Risk Management > Policy indicators > Built-in Indicators: Open the Data loss prevention (DLP) alerts indicators (preview) drop-down menu. Select Add DLP policies and choose the DLP policies to bring into IRM. Check the box for Generating alerts from selected DLP policies. Save the changes. Note: This indicator will not work if no DLP policies are added and if the checkbox is not selected. View image in new tab 3. Example of an alert generated by this indicator: The indicator will be available by default for admins to configure. What you need to do to prepare: 2. To use in a policy: In the policy wizard for Data theft by departing users, Data leaks, Data leaks by risky users, Data leaks by priority users, and Risky AI usage policy templates, configure the policies as applicable […]
The post Microsoft Purview | Insider Risk Management: DLP alerts as indicators appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Microsoft Purview | Insider Risk Management: DLP alerts as indicators
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Microsoft 365: [Education] Microsoft Learning Zone – Improve Lesson Insights
See where your class is struggling and which students need support, with lesson-level results for every student. Aggregated responses show the...
Dynamics 365 Project Operations: Invoice usability enhancements
When billing teams review an invoice, they need to see where it stands, which transactions it includes, and what’s still waiting to be b...
Dynamics 365 Commerce: Unified Pricing Management – Require manager approval for price overrides and manual discounts that exceed margin limits
Retailers can protect their profitability without slowing down store operations. Sales associates can still adjust prices to close a sale. Any...
Dynamics 365 Finance: Faster cube data loading with optimized dataflows
The Matrix visual now provides clearer control over how zero and blank values are handled during planning. Users can explicitly save 0 as a pl...
Dynamics 365 Commerce: Unified Pricing Management – Attribute-based margin thresholds and tiers for approvals and reporting
Pricing managers can set margin controls that match how the business actually sells, instead of one threshold for everything. Each product, ch...
Microsoft SharePoint Online and OneDrive for the web: Updated search experience with Copilot Search
SharePoint Online and OneDrive on the web are updating to a unified Copilot Search experience with natural-language prompts, AI summaries, and...
Microsoft Teams: Automatically add tag members to channels with Workflows
Microsoft Teams will introduce a Workflows app template to automatically add users to channels when they are added to a team tag. This optiona...
Microsoft SharePoint: Data access governance report for group permissions
Microsoft SharePoint is introducing a Data access governance report in the admin center to help administrators identify sites accessible to sp...
Action required: Exchange Online Admin API MailboxFolderPermission response update
Microsoft will update the Exchange Online Admin API v2.0 MailboxFolderPermission endpoint to return the User property as a structured object w...
Microsoft Planner: Planner capabilities in Copilot Cowork through the Planner Plugin
The Planner Plugin integrates Microsoft Planner with Copilot Cowork, enabling task prioritization, completion assistance, plan creation, visua...