Microsoft Purview compliance portal: Insider Risk Management – Risky AI usage

Originally posted by Microsoft Apr 23, 2024 Uncategorized 0 Comments

With this update, Insider risk management will help admins identify risky AI usage. We are adding new detections of intentional and unintentional insider risk activity on generative AI apps that can pose a risk to an organization. Activities will include risky prompts containing sensitive info or risky intent and sensitive responses containing sensitive info or is generated from sensitive files or sites. Coverage will span across Microsoft Copilots and 3P generative AI apps. These detections will also contribute to Adaptive Protection insider risk levels.

Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

(more…)

Microsoft Purview compliance portal: Data Loss Prevention – Decoupling of Policy tips and Email notifications while configuring rules on Data Loss Prevention for Sharepoint and Onedrive

Originally posted by Microsoft Apr 23, 2024 Uncategorized 0 Comments

,As of today, whenever the user wants to enable email notifications the policy tips also need to be enabled and vice versa, but with this decoupling the admin can configure the following: 1) None of policy tips or email notification 2) Only policy tips 3) Only Email Notifications 4) Both Email Notifications and Policy tips

(more…)

Microsoft Purview compliance portal: Data Lifecycle Management – Enable associated SharePoint sites to be excluded from retention policies after deletion of Modern Group

Originally posted by Microsoft Apr 23, 2024 Uncategorized 0 Comments

If a modern M365 group is deleted, the associated SharePoint has a retention policy, a file with a retention label, or a legal hold, it remains active but orphaned. These sites cannot be excluded from the retention policy after the deletion of the group because of designed modern group scope. The site-level holds are applied when a group is added to a retention policy and the Tenant-level holds are applied when the complete modern group workload is added to a retention policy. Currently, to remove such a hold, the customer has to raise an escalation. With the rollout of this feature, users will be able to exclude the orphaned SPO site from both site-level holds and tenant-level holds as a self-service.

(more…)

Microsoft Copilot (Microsoft 365): Plugins in copilot.microsoft.com

Originally posted by Microsoft Apr 23, 2024 Uncategorized 0 Comments

Users can now use plugins via copilot.microsoft.com to expand Copilot skills.

(more…)