SharePoint Stuff

Microsoft Purview

Updates listed under this heading combines the following products: Azure Information Protection, Microsoft compliance center, Information Protection, Microsoft Defender, Microsoft Intune, Security & Compliance center and Cloud App Security:

• Launched (6)
• Rolling out (8)
• In development (11)

🍾 LAUNCHED

• Microsoft Purview compliance portal: Data Loss Prevention – Extend DLP controls to Firefox browser – With this update, you will be able to extend the Microsoft Purview DLP controls to Firefox browsers. DLP admins will be able to set policies to prevent exfiltration of sensitive information through the Firefox browser by preventing actions such as copying data from a sensitive document to another document using the Clipboard, printing a sensitive document, copying to USB removeable media, or copying to a network share. Roadmap ID:106123
• Microsoft Purview compliance portal: Data Loss Prevention – Decoupling the User Notifications and Policy Tips on Exchange DLP (U.S. Government clouds) – With this update you will be able to configure policy tips and email notifications in your Microsoft Purview Data Loss Prevention (DLP) policies for Exchange Online independently for more granular control. Roadmap ID:124780
• Microsoft Purview | Information Protection: Assign a sublabel as the default when a parent label is selected in Word, Excel, PowerPoint, and Outlook – When using built-in sensitivity labels in Microsoft 365 Apps, admins can specify a sublabel to get applied automatically when a parent label is selected. This takes effect only when users select a parent label manually. Roadmap ID:115481
• Microsoft Purview | Endpoint DLP – Archived file support (U.S. Government clouds) – Support the scanning for sensitive content in ZIP and ARJ archive files in Windows devices.   Roadmap ID:93353
• Microsoft Purview | Endpoint DLP – Contextual policy conditions (U.S. Government clouds) – Support to identify when a file is sensitive based upon the file type or extension in Windows devices. Extend your Endpoint DLP policy controls to detect and protect even more content types such as CAD drawing files, video and audio files, and custom file types used in your specific industry. Roadmap ID:93354
• Microsoft Purview | Endpoint DLP – Classification globalization support (CCJK) (U.S. Government clouds) – Microsoft Endpoint DLP will support content authored using double-byte character sets in Windows devices (including Simplified Chinese, Traditional Chinese, and Japanese) in service workloads. Roadmap ID:93355

🚂 ROLLING OUT

• Microsoft Defender for Office 365: Security Threat Submission API – The current InformationProtection/Threat Assessment API does not support setting up end user reporting experiences and triaging samples reported by a user.  The new Security Threat Submission API will address these scenarios and further improve existing capabilities. It was created using the Microsoft Graph Platform. The current API will continue to exist for several years to ensure existing processes are not affected, with eventual deprecation. Roadmap ID:93364
• Microsoft Defender for Office 365: End user reporting for suspicious messages in Microsoft Teams  – End users will be able to report suspicious Microsoft Teams messages as a security threat just like they do for emails – to help the organization to protect itself from attacks via Microsoft Teams.  Roadmap ID:100160
• Microsoft Purview compliance portal: Data Loss Prevention – DLP Policy tips revamp for Outlook for Windows – Expand the functionality of DLP Policy Tips in Outlook for Windows to support additional top predicates and exceptions for all customers, and also advanced classification for E5 customers. Roadmap ID:109589
• Microsoft Defender for Office 365: End user can report from shared/delegate mailbox – End users can report messages from online shared/delegate mailbox using in-built report buttons in Outlook on the Web. Roadmap ID:115507
• Microsoft Purview compliance portal:  Data Lifecycle Management – Auto-labeling of cloud attachments – This update enables organizations to automatically apply retention labels to the version of files shared as cloud attachments, which are live links of SharePoint or OneDrive content that can be shared via emails or Teams messages. Roadmap ID:70580
• Microsoft Purview compliance portal:  eDiscovery (Premium) – Discover only the document version that has been shared – Many customers often consider shared documents or cloud attachments as a form of communication, and therefore are required to preserve and make that content discoverable. While end users benefit from quickly sharing files for visibility and collaboration, this practice has been challenging for eDiscovery and legal professionals. To help customers efficiently meet their regulatory obligations for discovery, eDiscovery (Premium) plans to support the ability to discover the version of the document at the time that it was shared. This helps ensure that the correct document information is available to eDiscovery processes. Roadmap ID:70718
• Microsoft Defender for Office 365: Easier to sort and filter messages reported by users – It will be easier to sort and filter messages by end users on User reported under Submissions. Roadmap ID:100159
• Microsoft Purview compliance portal: Data Lifecycle Management – Cloud attachments support file versions shared as links – Previously, cloud attachments worked only for links shared using the attachments button in Outlook and Microsoft Teams. Now, cloud attachments will retain files shared as hyperlinks in the body of an email or Teams message. Roadmap ID:106098

⌛ IN DEVELOPMENT

Rollout starts – May 2023

• 🆕 Microsoft Purview compliance portal: Compliance Manager – Salesforce & Zoom Connectors – Compliance Manager now integrates with Salesforce and Zoom, empowering customers to continuously monitor their compliance posture across their data estate. Roadmap ID:124884
• Microsoft Purview compliance portal: Information Protection – Service side auto-labeling shows file labeling progress for turned on policies in SharePoint and OneDrive (U.S. Government clouds) – Service side auto-labeling will show files to be labeled, files labeled (past 7 days), and files labeled (total) for turned on policies in SharePoint and OneDrive. Clicking on the auto-labeling policy will show files to be labeled and files labeled (total) broken down by the different sites. If a policy includes Exchange as a location, the number of emails that were labeled won’t be displayed because labels are automatically applied as messages are sent. Roadmap ID:124850
• Microsoft Purview | Compliance Manager: Microsoft Defender for Cloud (MDC) integration – Compliance Manager now integrates with Microsoft Defender for Cloud, allowing customers to assess their compliance posture across Microsoft 365, Azure, Google Cloud Platform, and Amazon Web Services with resource-level testing and cloud-specific guidance. Roadmap ID:102404
• Microsoft Purview compliance portal: Data Lifecycle Management – Disposition review auto-approval – Admins can enable automatic approval of items pending disposition if the reviewer doesn’t act within a specified number of days. Items will advance to the next stage of approval or auto-approved for deletion if in the final stage. Roadmap ID:124798
• Microsoft Purview compliance portal: eDiscovery (Premium) – Review set: Advanced filters – Updates to eDiscovery (Premium) review filters experience that allow admins to construct compound nested filters with either “AND” or “OR” conditions, go back and forth (undo/redo) between different iterations of filters, manage saved filter queries without navigating to a different panel, and use “Is empty/Is not empty” condition for each filter. Roadmap ID:124796
• Microsoft Purview compliance portal: Endpoint Data Loss Prevention – Detect if a label is not assigned (not labeled as a condition) – U.S. Government clouds – With this capability you will be able to configure specific restrictions for PDF and Office files that are not labeled on the endpoint devices. Roadmap ID:124799

Rollout starts – June 2023

• 🆕 Microsoft Purview compliance portal: Information Protection – Keyword highlight support for document trainable classifiers – Highlight the keywords/phrases that contribute significantly to trainable classifier results, so that users can more easily understand the classification of the documents and use these insights to inform creation of DLP policies. Roadmap ID:124815
• 🆕 Microsoft Purview compliance portal: Data Lifecycle Management – Disposition review auto-approval (U.S. Government clouds) – Admins can enable automatic approval of items pending disposition if the reviewer doesn’t act within a specified number of days. Items will advance to the next stage of approval or auto-approved for deletion if in the final stage. Roadmap ID:124880
• Microsoft Defender for Office 365: New filter option for messages blocked due to file type block – We are introducing a new filter for the ‘Quarantine Reason’ in the Quarantine page (Email). As part of this release, the SecOps can now apply this filter to display only the emails which are blocked when file extension/type of one or more of the attachments matches those configured in the common attachment filter in the Anti-malware policy. Currently these emails are shown under the ‘Malware’ as the Quarantine Reason. Roadmap ID:117520

Rollout starts – July 2023

• Microsoft Purview compliance portal: eDiscovery (Standard) to eDiscovery (Premium) case migration tool (U.S. Government clouds) – This feature release enables user to move their existing eDiscovery Standard case to eDiscovery Premium’s new case format. Existing search and hold inside the case will be maintained. After migration, user has the ability to continue their work in the migrated case following eDiscovery Premium’s workflow pipeline. Roadmap ID:109542

Rollout starts – December 2023

• Microsoft Purview compliance portal:  Insider Risk Management – Security policy violations by risky users – Enabled by the HR 1.2 connector, this policy template detects security violations by users near a stressor event. Includes activity generated by Microsoft Defender for Endpoint alerts, which detect possible security violations performed on devices on devices onboarded to your organization. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, security and policy violations, and more. Built with privacy by design, users are pseudonymized by default, and role-based access controls. Roadmap ID:83964

---