Microsoft Purview | Insider Risk Management: Network-based detection of sensitive data sharing to cloud apps and Gen AI
Microsoft Purview Insider Risk Management is introducing network-based detection for sensitive data sharing to cloud apps and Generative AI platforms. This feature, available from July 2025 (preview) and October 2025 (general), enhances insider risk detection and requires admin configuration. Organizations should review and update their Insider Risk Management settings. Microsoft Purview Insider Risk Management (IRM) is introducing enhanced detection capabilities that allow organizations to identify sensitive files and text shared to any cloud application or website—including Generative AI platforms—via the network layer. This capability is powered by integration with third-party network partners, enabling data capture at the network level. IRM correlates signals to detect potential insider risks such as IP theft, data leakage, and policy violations. Built with privacy by design, IRM pseudonymizes users by default and includes role-based access controls and audit logs to help ensure user-level privacy. This message is associated with Microsoft 365 Roadmap ID 484084. When this will happen: Public Preview: We will begin rolling out mid-July 2025 and expect to complete by late July 2025. General Availability (Worldwide): We will begin rolling out late September 2025 and expect to complete by early October 2025. How this will affect your organization: Organizations will gain visibility into sensitive data shared to any cloud application or website via the network layer. This helps strengthen insider risk detection and supports compliance and data protection efforts across cloud environments. This capability will be available by default but requires admin configuration to take effect at Insider Risk Management > Insider Risk Management settings > Policy indicators > Network indicators (preview): View image in new tab What you need to do to prepare: Learn more: Configure policy indicators in insider risk management | Microsoft Learn (will be updated before rollout) This rollout will happen automatically by the specified dates with no admin action required before the rollout. Review your current Insider Risk Management configuration to assess the impact on your organization. You may want to notify your admins and/or users about this change and update internal documentation. Complete network onboarding as outlined in Learn about Microsoft Purview Network Data Security (preview) | […]
The post Microsoft Purview | Insider Risk Management: Network-based detection of sensitive data sharing to cloud apps and Gen AI appeared first on M365 Admin.
Published on:
Learn moreRelated posts
Microsoft Outlook: Drag and drop calendar events to reschedule meetings
Microsoft Outlook will support drag-and-drop rescheduling of calendar events in day and multi-day views starting late August 2026. Users can m...
Microsoft 365 Copilot: Import Executive Assistant data with People connectors
Microsoft 365 People connectors now ingest Executive Assistant data from external HR systems like SAP SuccessFactors and Workday into Microsof...
Microsoft Viva: Viva Glint: Configure user and survey data retention for deleted users in Viva Glint
Microsoft Viva Glint introduces a new admin control to configure retention or deletion of survey responses and identifiable user data when use...
Microsoft OneDrive: Refreshed file browsing and filtering experience in OneDrive Web
OneDrive for the web will update its file browsing to match the modern SharePoint experience, featuring improved navigation and enhanced filte...
Windows device recovery in 2026: A guide for IT pros
Rollout schedule: The new guide is already available. All solutions and tools are already available as well. Impact on your organization: Wind...
Microsoft Copilot app: Opt in selected devices to test the updated Copilot desktop app
Starting August 18, 2026, administrators can opt in selected Windows and Mac devices to test the updated Microsoft Copilot desktop app with a ...
Microsoft Teams: Report a Security Concern in Meetings
Microsoft Teams will enable meeting organizers and attendees to report suspicious, malicious, or potentially fraudulent activity directly from...
Microsoft Copilot (Microsoft 365): Federated Copilot Connectors in Microsoft 365 Copilot
Federated Copilot connectors enable users to securely connect Microsoft Copilot to their favorite third party sources, retrieving data in real...
Microsoft Copilot (Microsoft M365): Delegated prompt publishing for organization prompts
This release follows the availability of organization prompts, providing admins the ability to upload custom prompts for their organization in...
Public preview: Manage agents across multiple tenants from the Microsoft 365 admin center
Multi-tenant agent management is in public preview, allowing partners and enterprise admins to view and manage agents across connected tenants...