MC1074097 - Microsoft Purview | Insider Risk Management: Custom Communication Compliance policy as IRM indicator

Service

Microsoft Purview

Published

May 14, 2025

Tag

New feature
User impact
Admin impact

Platforms

Web

Summary

Admins will soon be able to select Communication Compliance policy alerts as indicators in Microsoft Purview | Insider Risk Management policies. This feature will roll out from late May to early July 2025. No action is required before the rollout, but admins should review configurations and notify relevant personnel.

More information

Coming soon to Microsoft Purview | Insider Risk Management (IRM), admins will be able to select any Communication Compliance (CC) policy alerts as indicators in IRM policies. After this rollout, IRM admins can select any CC policies that they would like to bring into IRM and detect if a user has alerts for these selected CC policies. When an IRM alert is generated, admins can review if there are any alerts for the user in CC under the policies that are enabled as indicators. This feature will help admins and analysts view this information in IRM without switching to CC.

This message is associated with Microsoft 365 Roadmap ID 489838.

When this will happen:

Public Preview: We will begin rolling out late May 2025 and expect to complete by early June 2025.

General Availability (Worldwide): We will begin rolling out mid-June 2025 and expect to complete by early July 2025.

How this will affect your organization:

After this rollout, admins will be able to enable this indicator in IRM’s global settings for policy indicators. When enabled, this indicator can be selected in any IRM policy.

Using the indicator

  1. In IRM, go to Settings > Insider Risk Management > Policy indicators > Built-in Indicators. Open the Communication Compliance indicators > Detect messages matched by specific CC policies drop-down menu. Check the box and choose the CC policies to bring into IRM. Save the changes.
  2. To use in a policy: In the policy wizard for any IRM policy, configure the policies as applicable until you get to the Indicators page. Open the Communication Compliance indicators drop-down menu and check the box for Sending messages flagged by selected CC policies. Configure the rest of the policy as applicable.

These changes will be available by default for admins to configure.

What you need to do to prepare:

This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your admins about this change and update any relevant documentation.

Learn more: Configure policy indicators in insider risk management | Microsoft Learn (will be updated before rollout)