HANDS ON SharePoint
HANDS ON Teams
HANDS ON Lists
HANDS ON tek
M365 Admin
Microsoft Purview Communication Compliance: Enrich triage with Insider Risk Management context
The new Microsoft Purview compliance portal feature integrates Insider Risk Management (IRM) with Communication Compliance (CC), enhancing compliance investigations by providing a comprehensive view of a user’s risk profile and activity history. Public Preview begins late August 2024, with General Availability starting mid-September 2024. Organizations must enable Data sharing in IRM settings to prepare for this update. This feature is detailed in Microsoft 365 Roadmap ID 408534.
A new Microsoft Purview compliance portal introduces a pivotal communications enhancement that integrates Insider Risk Management (IRM) alerts within Communication Compliance (CC) triage flows, providing a holistic approach to compliance risk assessment. This integration empowers investigators with enriched insights by correlating communication alerts with a user’s risk profile and activity history from IRM directly in a CC triage flow. This synergy between IRM and CC facilitates a more nuanced and informed decision-making process during investigations.
This message is associated with Microsoft 365 Roadmap ID 408534.
When this will happen:
Public Preview: We will begin rolling out late August 2024 and expect to complete by mid-September 2024.
General Availability (Worldwide): We will begin rolling out mid-September 2024 and expect to complete by late September 2024.
How this will affect your organization:
The integration of IRM context into CC is a significant stride towards enhancing the efficacy of compliance investigations. This will allow investigators to view a user’s risk profile and history alongside communication alerts, enabling a more informed and efficient triage process.
The insider risk severity (Low, Medium, or High) determined by activity detected in IRM policies helps to prioritize and respond to user activity accordingly. A new user activity timeline will show messages and activities from IRM in one screen, simplifying the review process.
What you need to do to prepare:
To use this feature, please connect with IRM administrators to enable Data sharing from IRM settings. If you don’t turn this setting on, you will see Insider risk activity not available.
Message ID: MC878431
