SharePoint Stuff

Microsoft Purview

Updates listed under this heading combines the following products: Azure Information Protection, Microsoft compliance center, Information Protection, Microsoft Defender, Microsoft Intune, Security & Compliance center and Cloud App Security:

• Launched (4)
• Rolling out (2)
• In development (16)

🍾 LAUNCHED

• Microsoft Purview compliance portal: Insider Risk Management – Policy wizard enhancements – The Insider Risk Management policy wizard will be revised to help simplify configuration of indicators, sequence detection, cumulative exfiltration detection, and risk score boosters. age security and compliance. Roadmap ID:122283
• Microsoft Purview compliance portal : Insider Risk Management – Recommended actions enhancements – Recommended actions enhancements will include the ability to turn on weekly or daily email notifications for key events such as high severity alerts and all warnings summary along with additional suggestions to help optimize policy configurations. age security and compliance. Roadmap ID:122285
• Microsoft Purview compliance portal: Audit (Premium) – Customized retention policies for 10-Year Audit Log Retention Add On – This feature will enable customers with the 10-Year Audit Log Retention Add On for Microsoft Purview Audit (Premium) to create additional customized retention policies. The new options are 7 days, 30 days, 3 years, 5 years, and 7 years retention. Roadmap ID:109533
• Microsoft Purview compliance portal: Insider Risk Management – Forensic evidence – The forensic evidence capability is an opt-in add-in to Insider Risk Management, helping customers’ security teams get visual insights into potentially risky user actions that might lead to a data security incident. Forensic evidence is off by default and policy creation requires dual authorization. Customers determine what triggers the feature and manage investigation processes. Roadmap ID:109540

🚂 ROLLING OUT

• Microsoft Defender for Office 365: End user reporting for suspicious messages in Microsoft Teams  – End users will be able to report suspicious Microsoft Teams messages as a security threat just like they do for emails – to help the organization to protect itself from attacks via Microsoft Teams.  Roadmap ID:100160
• Microsoft Purview compliance portal: Information Protection – Service side auto-labeling shows file labeling progress for turned on policies in SharePoint and OneDrive (U.S. Government clouds) – Service side auto-labeling will show files to be labeled, files labeled (past 7 days), and files labeled (total) for turned on policies in SharePoint and OneDrive. Clicking on the auto-labeling policy will show files to be labeled and files labeled (total) broken down by the different sites. If a policy includes Exchange as a location, the number of emails that were labeled won’t be displayed because labels are automatically applied as messages are sent. Roadmap ID:124850

⌛ IN DEVELOPMENT

Rollout starts – June 2023

• Microsoft Purview compliance portal: Insider Risk Management – Admin email notifications (U.S. Government clouds) – With this update, admins will have the ability to manage email notifications through the “Admin notifications” section of the insider risk settings. Admins will be able to control the types of emails they receive, including a daily notification for newly generated high-severity alerts, or weekly emails summarizing policies with unresolved warnings. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124966
• Microsoft Purview compliance portal: Endpoint Data Loss Prevention – Detect if a label is not assigned (not labeled as a condition) – U.S. Government clouds – With this capability you will be able to configure specific restrictions for PDF and Office files that are not labeled on the endpoint devices. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124799
• Microsoft Purview compliance portal: Data Loss Prevention – Visibility into configuration and policy sync status of devices – Provide visibility to admins about configuration status and solution health in addition to providing policy update sync status. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=109584
• Microsoft Purview | Endpoint DLP – Advanced classification scanning and protection (U.S. Government clouds) – Advanced classification scanning and protection allows the Microsoft 365 cloud-based data classification service to scan items, classify them, and return the results to the endpoint device. This enables admins to include more advanced classification techniques, such as exact data match, into data loss prevention policies. Admins will also have the flexibility to set a per-device bandwidth limit for a 24-hour period to regulate bandwidth usage.  Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=93275

Rollout starts – July 2023

• 🆕 Microsoft Purview compliance portal: Information Protection – Configure inheritance of attachment labels to email messages (U.S. Government clouds) – Configure label policies for email messages with attachments to inherit labels that match the highest classification of those attachments. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124887
• Microsoft Purview compliance portal: Information Protection – Keyword highlight support for document trainable classifiers – Highlight the keywords/phrases that contribute significantly to trainable classifier results, so that users can more easily understand the classification of the documents and use these insights to inform creation of DLP policies. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124815
• Microsoft Purview compliance portal: Insider Risk Management – Cumulative exfiltration detection – Cumulative exfiltration detection helps identify data exfiltration risks when a user’s exfiltration activities across all egress channels over the past 30 days exceed organization or peer group norms. A risk score is assigned if the user’s cumulative exfiltration activity is unusual compared with others within the same organization or with the same role. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117603
• Microsoft Purview | Information Protection: Secure collaboration on labeled and encrypted documents with user-defined permissions – SharePoint and OneDrive can process labeled documents that are encrypted with custom permissions, also referred to as user-defined permissions. As a result, these documents can be searched, inspected for data loss prevention, and used with eDiscovery. They can also be opened, edited, seamlessly co-authored, and support AutoSave in Word, Excel, and PowerPoint apps on all platforms (includes Office for the web). Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=85619

Rollout starts – August 2023

•  Microsoft 365 apps: Microsoft 365 Apps and Services update to AES256-CBC for encrypting emails and files with Purview Information Protection – Microsoft 365 Apps, Exchange Online, and SharePoint Online will begin to use AES256 in cipher block chaining (CBC) mode by default when emails and documents are encrypted with Microsoft Purview Information Protection. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117576
• Microsoft Purview compliance portal: Communication Compliance – Enhanced investigation and remediation experience (U.S. Government clouds) – Introducing enhancements to the investigation and remediation workflows to help designated investigators facilitate quicker and better-informed actions on policy matches. Enhancements will be available to designated Communication Compliance admins and investigators with the appropriate role-based access control permissions, and include bulk policy exports, interactive how-to demos, and additional context around policy settings and keywords/conditions flagged in a policy. Microsoft Purview Communication Compliance provides the tools to help organizations detect regulatory compliance violations (e.g. SEC or FINRA), such as sensitive or confidential information, harassing or threatening language, and sharing of adult content. Built with privacy by design, usernames are pseudonymized by default, role-based access controls are built in, investigators are opted in by an admin, and audit logs are in place to help ensure user-level privacy. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124976

Rollout starts – September 2023

• Microsoft Purview compliance portal: eDiscovery (Premium) – Review set data minimization – Identify exact duplicates by default – Harness the built-in review set query within eDiscovery (Premium) review sets, specifically designed to pinpoint exact duplicates and encompassing email threads, to systematically reduce your review set data by an average of 30%, eliminating the need to trigger analytics manually post ingestion. Gain full visibility into all hash values utilized in de-duplication and email threading algorithms, ensuring a seamless and efficient review process. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124961
• Microsoft Defender for Office 365: Tagging support for groups – Today, only individual users are able to be added to the Microsoft Defender for Office 365 user tag feature. With this release, organizations will be able to tag groups so that group members will be added to or removed from tags automatically on an ongoing basis. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117526
• Microsoft Purview | Audit: Granular scoping with role-based access control (RBAC) – IT departments in large organizations are built in a way that some of the day-to-day tasks are delegated to specific people or roles in the organization following the industry standard of least privilege access. Admins have a need to delegate role-based permissions to users or analysts in a granular way. In some cases, this delegation is based on function, and in other cases it is based on geography or scope of work. In this release, Audit will provide role-based information with Audit search results through the UI. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=98145
• Microsoft Purview | Communication Compliance: Recommended policy scope – Leverage policy scope insights to understand the aggregated volume of policy violations that are missed from users that are not currently scoped into the policy. Microsoft Purview Communication Compliance provides the tools to help organizations detect regulatory compliance violations (e.g. SEC or FINRA), such as sensitive or confidential information, harassing or threatening language, and sharing of adult content. Built with privacy by design, usernames are pseudonymized by default, role-based access controls are built in, investigators are opted in by an admin, and audit logs are in place to help ensure user-level privacy. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=93260

Rollout starts – January 2024

• Microsoft Purview compliance portal: Insider Risk Management – Sequence detections for obfuscation involving excluded events – This change enhances sequence detection to improve its effectiveness in identifying users who are performing obfuscation activities that may result in a data security incident, such as file renaming, to evade detection. With this improvement, Insider Risk Management can detect sequences that may result in potential data security incidents, even if the obfuscation activities in those sequences involve excluded events, such as an excluded keyword. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124970
• Microsoft Purview compliance portal: Insider Risk Management – Cumulative exfiltration detection tuning – With this update, cumulative exfiltration activities will no longer be detected and scored if they have already been identified in a previous cumulative exfiltration alert. This change will reduce unnecessary alerts generated from cumulative exfiltration activities. Find out more: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124971

---

Pages: 1 2 3 4