CTRL + ALT + Data Security #15

Product Updates and Announcements

Purview Extended Report Experience

Our goal with this package is to enable faster and more integrated communication between leaders and cyber operations teams, fostering effective collaboration. The structure helps showcase the positive outcomes of prevented attacks by measuring the distance to corporate secrets. It also provides a clear view of the impact of incidents by listing the sensitive systems and content accessed by attackers.

With this information, you can identify patterns and areas where your security posture needs improvement based on sensitive content and systems. This approach makes improvement projects more aligned with company value. In the fast-paced world of cybersecurity, understanding future threats is just as crucial as knowing the current state. With this data, you can input details about future threats and project their impact. Additionally, we're developing Security Copilot skills to help identify future risks.

Check out the full blog post here!

AI Hub

For those that don't know much about Purview AI Hub, I've added in a brief summary before the updates:

The Purview AI Hub is a central location within Microsoft Purview designed to help organisations secure their data in AI applications, including both Microsoft AI applications like Copilots and non-Microsoft AI applications

The AI Hub offers several key capabilities:

• Viewing insights and analytics: It provides insights and analytics into AI activity within your organization, helping you understand how AI is being used and its impact.
• Data protection policies: You can use policies to protect data and prevent data loss in AI prompts, ensuring that sensitive information is handled appropriately.
• Compliance controls: The AI Hub allows you to implement compliance controls to apply optimal data handling and storing policies, helping you meet regulatory requirements

This hub is particularly useful for organisations looking to adopt AI while maintaining a balance between productivity and protection.

Now, for the update:

• Improvements to permissions: You can now also use the Microsoft Purview Compliance Administrator role to access the Microsoft Purview AI Hub.

Audit

• Updated: Clarified the CreationTime property meaning - it now reflects "The date and time in Coordinated Universal Time (UTC) when the audit log record is generated."
• Updated: Documented that SearchQueryInitiated events are now included in Audit (Standard).

Compliance Manager

• Updated: Clarified settings for automatic testing of improvement actions to specify that Compliance Manager Administrators can turn on or off automatic testing for all improvement actions, not just on a per-action basis.

Data connectors

Keep in mind, this a retirement of Veritas data connectors - not a feature update.

• Retired: All Veritas data connectors in Microsoft Purview were retired in June 2024. Non-Veritas data connectors in your organization aren't affected by this change. Contact your Veritas account representative if you have questions about Veritas archiving services.

eDiscovery

• In preview: Use the new eDiscovery (preview) solution in the Microsoft Purview portal to identify, review, and manage content in Microsoft 365 services to support your investigations. The new experience supports most of the features and capabilities from the previous experience, with more features being added over the coming months.
• Updates: New scenarios added for the Invoke-ComplianceSecurityFilterAction cmdlet for compliance boundaries.

Microsoft Purview portal

• Updated: The global search feature now supports the new User category in the Microsoft Purview portal.

Sensitivity labels

A bunch of features are now in preview; have a look through and make sure you're across them!

• In preview: New privacy control for Office apps that prevents sending labeled content to some connected experiences for analysis. This setting impacts services such as data loss prevention, automatic and recommended labeling, and Microsoft Copilot for Microsoft 365.
• In preview: Dynamic watermarks to deter leakage of labeled and encrypted documents by rendering over the document the reader's Universal Principal Name (UPN) or other identifying information. Unlike standard content markings, dynamic watermarks can't be changed or removed by the user.
• In preview: Rolling out, the condition builder to create search queries in eDiscovery from the Microsoft Purview portal supports sensitivity labels. For example, as part of your eDiscovery case, restrict content to files and emails that have a Highly Confidential sensitivity label. Or conversely, exclude content to files and emails that have a Public sensitivity label.
• Improvements to Microsoft Copilot for Microsoft 365: Outlook for iOS and Outlook for Android join the platforms that support Copilot in Outlook for encrypted items.

Blogs and Media

Learn how to customize and optimize Copilot for Security with the custom Data Security plugin

This is a step-by-step guided walkthrough of how to use the custom Copilot for Security pack for Microsoft Data Security and how it can empower your organization to understand the cyber security risks in a context that allows them to achieve more. By focusing on the information and organizational context to reflect the real impact/value of investments and incidents in cyber.

Check out the full blog post here!

eDiscovery launches a modern, intuitive user experience

This month, we are launching a redesigned Microsoft Purview eDiscovery product experience in public preview. This improved user experience revolutionizes your data search, review and export tasks within eDiscovery. Our new user-friendly and feature-rich eDiscovery experience is not just about finding and preserving data, it's about doing it with unprecedented efficiency and ease. The modern user experience of eDiscovery addresses some long-standing customer requests, such as enhanced search capabilities with MessageID,? Sensitive Information Types (SITs) and sensitivity labels.

It also introduces innovative features like draft query with Copilot and search using audit log. These changes, driven by customer feedback and our commitment to innovation, offer tangible value by saving time and reducing costs in the eDiscovery process.?

Check out the full blog post here!