Microsoft Purview | Data Security Investigations: Introducing new custom examination focus areas
Microsoft Purview Data Security Investigations will support custom examination focus areas from mid-May 2026, allowing admins to tailor AI-powered investigations to prioritize specific sensitive information. This feature respects existing permissions, requires no pre-rollout action, and enhances investigation efficiency without changing data storage or access. Microsoft Purview Data Security Investigations (DSI) is adding support for custom examination focus areas. This feature will empower admins to tailor examinations to their specific needs based on the type of investigation being performed and the types of information they want to prioritize. This capability extends DSI’s existing AI‑powered deep content analysis used to identify data security risks. This message is associated with Microsoft 365 Roadmap ID 560598. When this will happen Public Preview: Rollout begins in mid‑May 2026 and is expected to complete by mid‑June 2026. General Availability (Worldwide): Rollout begins in mid‑June 2026 and is expected to complete by late June 2026. How this affects your organization Who is affected Microsoft 365 admins and investigators using Microsoft Purview Data Security Investigations Tenants with access to DSI What will happen Admins can create custom examination focus areas when running Data Security Investigations. Custom focus areas allow investigations to prioritize specific types of sensitive information relevant to the investigation. AI-powered deep content analysis uses these focus areas to surface potential data security risks more efficiently. The feature is available by default to eligible tenants once rolled out. Existing DSI permissions, policies, and workflows are respected. There is no change to user workflows unless an admin runs an investigation using custom focus areas. What you can do to prepare No action is required before this feature rolls out. You may want to: Review how your organization currently uses Data Security Investigations. Update internal investigation playbooks or documentation to include custom examination focus areas. Inform security and compliance teams about the new capability. Learn more: Learn about Data Security Investigations | Microsoft Purview | Microsoft Learn Use examination tools – Use AI analysis in Data Security Investigations | Microsoft Purview | Microsoft Learn Compliance considerations Question Answer Does the change alter how existing customer data is processed, stored, […]
The post Microsoft Purview | Data Security Investigations: Introducing new custom examination focus areas appeared first on M365 Admin.
Published on:
Learn moreRelated posts
Microsoft Outlook: Drag and drop calendar events to reschedule meetings
Microsoft Outlook will support drag-and-drop rescheduling of calendar events in day and multi-day views starting late August 2026. Users can m...
Microsoft 365 Copilot: Import Executive Assistant data with People connectors
Microsoft 365 People connectors now ingest Executive Assistant data from external HR systems like SAP SuccessFactors and Workday into Microsof...
Microsoft Viva: Viva Glint: Configure user and survey data retention for deleted users in Viva Glint
Microsoft Viva Glint introduces a new admin control to configure retention or deletion of survey responses and identifiable user data when use...
Microsoft OneDrive: Refreshed file browsing and filtering experience in OneDrive Web
OneDrive for the web will update its file browsing to match the modern SharePoint experience, featuring improved navigation and enhanced filte...
Windows device recovery in 2026: A guide for IT pros
Rollout schedule: The new guide is already available. All solutions and tools are already available as well. Impact on your organization: Wind...
Microsoft Copilot app: Opt in selected devices to test the updated Copilot desktop app
Starting August 18, 2026, administrators can opt in selected Windows and Mac devices to test the updated Microsoft Copilot desktop app with a ...
Microsoft Teams: Report a Security Concern in Meetings
Microsoft Teams will enable meeting organizers and attendees to report suspicious, malicious, or potentially fraudulent activity directly from...
Microsoft Copilot (Microsoft 365): Federated Copilot Connectors in Microsoft 365 Copilot
Federated Copilot connectors enable users to securely connect Microsoft Copilot to their favorite third party sources, retrieving data in real...
Microsoft Copilot (Microsoft M365): Delegated prompt publishing for organization prompts
This release follows the availability of organization prompts, providing admins the ability to upload custom prompts for their organization in...
Public preview: Manage agents across multiple tenants from the Microsoft 365 admin center
Multi-tenant agent management is in public preview, allowing partners and enterprise admins to view and manage agents across connected tenants...