MC1074097 - Microsoft Purview | Insider Risk Management: Custom Communication Compliance policy as IRM indicator

Updated June 27, 2025: We have updated the timeline below. Thank you for your patience.

Coming soon to Microsoft Purview | Insider Risk Management (IRM), admins will be able to select any Communication Compliance (CC) policy alerts as indicators in IRM policies. After this rollout, IRM admins can select any CC policies that they would like to bring into IRM and detect if a user has alerts for these selected CC policies. When an IRM alert is generated, admins can review if there are any alerts for the user in CC under the policies that are enabled as indicators. This feature will help admins and analysts view this information in IRM without switching to CC.

This message is associated with Microsoft 365 Roadmap ID 489838.

When this will happen:

Public Preview: We will begin rolling out late July 2025 (previously late May) and expect to complete by early August 2025 (previously early June).

General Availability (Worldwide): We will begin rolling out mid-August 2025 (previously mid-June) and expect to complete by early September 2025 (previously early July).

How this will affect your organization:

After this rollout, admins will be able to enable this indicator in IRM’s global settings for policy indicators. When enabled, this indicator can be selected in any IRM policy.

Using the indicator

1. In IRM, go to Settings > Insider Risk Management > Policy indicators > Built-in Indicators. Open the Communication Compliance indicators > Detect messages matched by specific CC policies drop-down menu. Check the box and choose the CC policies to bring into IRM. Save the changes.
2. To use in a policy: In the policy wizard for any IRM policy, configure the policies as applicable until you get to the Indicators page. Open the Communication Compliance indicators drop-down menu and check the box for Sending messages flagged by selected CC policies. Configure the rest of the policy as applicable.

These changes will be available by default for admins to configure.

What you need to do to prepare:

This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your admins about this change and update any relevant documentation.

Learn more: Configure policy indicators in insider risk management | Microsoft Learn (will be updated before rollout)