{"id":9742,"date":"2025-01-29T10:00:49","date_gmt":"2025-01-29T01:00:49","guid":{"rendered":"https:\/\/m365jp.net\/?p=9742"},"modified":"2025-01-29T10:15:40","modified_gmt":"2025-01-29T01:15:40","slug":"mc990961-microsoft-purview-insider-risk-management-dlp-alerts-as-indicators","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-01-29-mc990961-microsoft-purview-insider-risk-management-dlp-alerts-as-indicators","title":{"rendered":"MC990961 | Microsoft Purview | Insider Risk Management: DLP alerts as indicators"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC990961 | Microsoft Purview | Insider Risk Management: DLP alerts as indicators<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>planForChange<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>01\/29\/2025 00:40:01<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>01\/29\/2025 00:39:43<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>09\/19\/2025 07:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>Coming soon to Microsoft Purview Insider Risk Management (IRM) admins will be able to select Data Loss Prevention (DLP) alerts as indicators in IRM policies. After this rollout, IRM admins can select DLP policies that they would like to bring into IRM and   detect if a user has alerts for the pre-selected DLP policies. When an IRM alert is generated, admin and analysts can see if there are any high-risk alerts for this user within DLP for the policies that are enabled as indicators. This feature will help admins   and analysts view this information in IRM without switching to DLP.  <\/p>\n<p>This message is associated with Microsoft 365 Roadmap ID <a href=\"https:\/\/www.microsoft.com\/microsoft-365\/roadmap?filters=&amp;searchterms=475057\" target=\"_blank\">  475057<\/a>.  <\/p>\n<p>[When this will happen:]  <\/p>\n<p>Public Preview: We will begin rolling out early March 2025 and expect to complete by late March 2025.  <\/p>\n<p>General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out late May 2025 and expect to complete by mid-June 2025.  <\/p>\n<p>[How this will affect your organization:]  <\/p>\n<p>Admins will be able to enable this indicator in IRM\u2019s global settings for policy indicators. When enabled, this indicator can be selected in the Data Theft by departing users, Data leaks, Data leaks by risky users, Data leaks by priority users, and Risky   AI Usage policy templates.<\/p>\n<p><i>Using the indicator<\/i>  <\/p>\n<p>1. In Settings &gt;<i> Insider Risk Management &gt; Policy indicat<\/i>ors<i> &gt;<\/i> <i>  Built-in Indicators:<\/i> Open the <i>Data loss prevention (DLP) alerts indicators (preview)<\/i> drop-down menu. Select  <i>Add DLP policies<\/i> and choose the DLP policies to bring into IRM. Check the box for  <i>Generating alerts from selected DLP policies<\/i>. Save the changes. <b>Note:<\/b> This indicator will not work if no DLP policies are added and if the checkbox is not selected.  <\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/messagecenter\/en-us\/cf27002a-4301-4faa-9b15-5d53c08e2d5f\">  <\/p>\n<p>2. To use in a policy: In the policy wizard for <i>Data theft by departing users, Data leaks, Data leaks by risky users, Data leaks by priority users,  <\/i>and <i>Risky AI usage <\/i>policy templates, configure the policies as applicable until you get to the  <i>Indicators <\/i>page. Open the <i>Data loss prevention (DLP) alerts indicators (preview)<\/i> drop-down menu and check the box for  <i>Generating alerts from selected DLP policies.<\/i> Configure the rest of the policy as applicable.  <\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/messagecenter\/en-us\/09104794-7ea7-47bd-ac04-4e33bf3433cb\">  <\/p>\n<p>3. Example of an alert generated by this indicator:  <\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/messagecenter\/en-us\/47c2c580-c712-4d9b-8a31-cbed462035c6\">  <\/p>\n<p>The indicator will be available by default for admins to configure.  <\/p>\n<p>[What you need to do to prepare:]<\/p>\n<p>This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your admins about this change and update   any relevant documentation.  <\/p>\n<p>Learn more: <a href=\"https:\/\/learn.microsoft.com\/purview\/insider-risk-management-settings-policy-indicators?tabs=purview-portal\" target=\"_blank\">  Configure policy indicators in insider risk management | Microsoft Learn<\/a> (will be updated before rollout)<\/p>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p>\u8fd1\u65e5\u516c\u958b\u4e88\u5b9a\u306e Microsoft Purview Insider Risk Management (IRM) \u7ba1\u7406\u8005\u306f\u3001IRM \u30dd\u30ea\u30b7\u30fc\u306e\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u3068\u3057\u3066\u30c7\u30fc\u30bf\u640d\u5931\u9632\u6b62 (DLP) \u30a2\u30e9\u30fc\u30c8\u3092\u9078\u629e\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u5f8c\u3001IRM \u7ba1\u7406\u8005\u306f\u3001IRM \u306b\u53d6\u308a\u8fbc\u3080 DLP \u30dd\u30ea\u30b7\u30fc\u3092\u9078\u629e\u3057\u3001\u4e8b\u524d\u306b\u9078\u629e\u3057\u305f DLP \u30dd\u30ea\u30b7\u30fc\u306e\u30a2\u30e9\u30fc\u30c8\u304c\u30e6\u30fc\u30b6\u30fc\u306b\u3042\u308b\u304b\u3069\u3046\u304b\u3092\u691c\u51fa\u3067\u304d\u307e\u3059\u3002IRM \u30a2\u30e9\u30fc\u30c8\u304c\u751f\u6210\u3055\u308c\u308b\u3068\u3001\u7ba1\u7406\u8005\u3068\u30a2\u30ca\u30ea\u30b9\u30c8\u306f\u3001\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u3068\u3057\u3066\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u30dd\u30ea\u30b7\u30fc\u306e DLP \u5185\u3067\u3001\u3053\u306e\u30e6\u30fc\u30b6\u30fc\u306b\u5bfe\u3059\u308b\u9ad8\u30ea\u30b9\u30af\u306e\u30a2\u30e9\u30fc\u30c8\u304c\u3042\u308b\u304b\u3069\u3046\u304b\u3092\u78ba\u8a8d\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u6a5f\u80fd\u306b\u3088\u308a\u3001\u7ba1\u7406\u8005\u3068\u30a2\u30ca\u30ea\u30b9\u30c8\u306f\u3001DLP   \u306b\u5207\u308a\u66ff\u3048\u305a\u306b IRM \u3067\u3053\u306e\u60c5\u5831\u3092\u8868\u793a\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u306f\u3001Microsoft 365 \u30ed\u30fc\u30c9\u30de\u30c3\u30d7 <a href=\"https:\/\/www.microsoft.com\/microsoft-365\/roadmap?filters=&amp;searchterms=475057\" target=\"_blank\">  ID 475057\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u3066\u3044\u307e\u3059<\/a>\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n<p>\u30d1\u30d6\u30ea\u30c3\u30af \u30d7\u30ec\u30d3\u30e5\u30fc: 2025 \u5e74 3 \u6708\u4e0a\u65ec\u306b\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u3092\u958b\u59cb\u3057\u30012025 \u5e74 3 \u6708\u4e0b\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n<p>\u4e00\u822c\u63d0\u4f9b (\u5168\u4e16\u754c\u3001GCC\u3001GCC High\u3001DoD): 2025 \u5e74 5 \u6708\u4e0b\u65ec\u306b\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u3092\u958b\u59cb\u3057\u30012025 \u5e74 6 \u6708\u4e2d\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u3069\u306e\u3088\u3046\u306b\u5f71\u97ff\u3057\u307e\u3059\u304b:]<\/p>\n<p>\u7ba1\u7406\u8005\u306f\u3001IRM \u306e\u30dd\u30ea\u30b7\u30fc \u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u306e\u30b0\u30ed\u30fc\u30d0\u30eb\u8a2d\u5b9a\u3067\u3053\u306e\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u3092\u6709\u52b9\u306b\u3067\u304d\u307e\u3059\u3002\u6709\u52b9\u306b\u3059\u308b\u3068\u3001\u3053\u306e\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u306f\u3001\u96e2\u8077\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30c7\u30fc\u30bf\u76d7\u96e3\u3001\u30c7\u30fc\u30bf\u6f0f\u6d29\u3001\u5371\u967a\u306a\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30c7\u30fc\u30bf\u6f0f\u6d29\u3001\u512a\u5148\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30c7\u30fc\u30bf\u6f0f\u6d29\u3001\u304a\u3088\u3073\u5371\u967a\u306aAI\u4f7f\u7528\u30dd\u30ea\u30b7\u30fc\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u3067\u9078\u629e\u3067\u304d\u307e\u3059\u3002<\/p>\n<p><i>\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u306e\u4f7f\u7528<\/i>  <\/p>\n<p>1. [\u8a2d\u5b9a] &gt;<i> [Insider Risk Management] &gt; [Policy] \u3067\u3001[<\/i><i>Built-in Indicators]<\/i><i> &gt;<\/i> [<i>Data loss Prevention (DLP) alerts indicators (preview)]<\/i> \u30c9\u30ed\u30c3\u30d7\u30c0\u30a6\u30f3 \u30e1\u30cb\u30e5\u30fc\u3092\u958b\u304d\u307e\u3059\u3002[<i>DLP \u30dd\u30ea\u30b7\u30fc\u306e\u8ffd\u52a0<\/i>] \u3092\u9078\u629e\u3057\u3001IRM \u306b\u53d6\u308a\u8fbc\u3080 DLP \u30dd\u30ea\u30b7\u30fc\u3092\u9078\u629e\u3057\u307e\u3059\u3002<i>[\u9078\u629e\u3057\u305f DLP \u30dd\u30ea\u30b7\u30fc\u304b\u3089\u30a2\u30e9\u30fc\u30c8\u3092\u751f\u6210\u3059\u308b<\/i>]   \u30c1\u30a7\u30c3\u30af\u30dc\u30c3\u30af\u30b9\u3092\u30aa\u30f3\u306b\u3057\u307e\u3059\u3002\u5909\u66f4\u3092\u4fdd\u5b58\u3057\u307e\u3059\u3002<b>\u624b\u8a18\uff1a<\/b>\u3053\u306e\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u306f\u3001DLP \u30dd\u30ea\u30b7\u30fc\u304c\u8ffd\u52a0\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u3001\u304a\u3088\u3073\u30c1\u30a7\u30c3\u30af\u30dc\u30c3\u30af\u30b9\u304c\u9078\u629e\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u306b\u306f\u6a5f\u80fd\u3057\u307e\u305b\u3093\u3002<\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/messagecenter\/en-us\/cf27002a-4301-4faa-9b15-5d53c08e2d5f\">  <\/p>\n<p>2. \u30dd\u30ea\u30b7\u30fc\u3067\u4f7f\u7528\u3059\u308b\u306b\u306f: <i>\u96e2\u8131\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30c7\u30fc\u30bf\u76d7\u96e3\u3001\u30c7\u30fc\u30bf\u6f0f\u6d29\u3001\u5371\u967a\u306a\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30c7\u30fc\u30bf\u6f0f\u6d29\u3001\u512a\u5148\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30c7\u30fc\u30bf\u6f0f\u6d29\u3001<\/i><i>\u304a\u3088\u3073\u5371\u967a\u306a AI \u4f7f\u7528<\/i>\u30dd\u30ea\u30b7\u30fc\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u306e\u30dd\u30ea\u30b7\u30fc\u30a6\u30a3\u30b6\u30fc\u30c9\u3067\u3001<i>\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf<\/i>\u30da\u30fc\u30b8\u304c\u8868\u793a\u3055\u308c\u308b\u307e\u3067\u3001\u30dd\u30ea\u30b7\u30fc\u3092\u9069\u5b9c\u8a2d\u5b9a\u3057\u307e\u3059\u3002<i>[\u30c7\u30fc\u30bf\u640d\u5931\u9632\u6b62 (DLP) \u30a2\u30e9\u30fc\u30c8 \u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc (\u30d7\u30ec\u30d3\u30e5\u30fc)]<\/i> \u30c9\u30ed\u30c3\u30d7\u30c0\u30a6\u30f3 \u30e1\u30cb\u30e5\u30fc\u3092\u958b\u304d\u3001[<i>\u9078\u629e\u3057\u305f DLP \u30dd\u30ea\u30b7\u30fc\u304b\u3089\u30a2\u30e9\u30fc\u30c8\u3092\u751f\u6210\u3059\u308b<\/i>] \u30c1\u30a7\u30c3\u30af \u30dc\u30c3\u30af\u30b9\u3092\u30aa\u30f3\u306b\u3057\u307e\u3059\u3002\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u3001\u30dd\u30ea\u30b7\u30fc\u306e\u6b8b\u308a\u306e\u90e8\u5206\u3092\u69cb\u6210\u3057\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/messagecenter\/en-us\/09104794-7ea7-47bd-ac04-4e33bf3433cb\">  <\/p>\n<p>3. \u3053\u306e\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u306b\u3088\u3063\u3066\u751f\u6210\u3055\u308c\u308b\u30a2\u30e9\u30fc\u30c8\u306e\u4f8b:<\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/messagecenter\/en-us\/47c2c580-c712-4d9b-8a31-cbed462035c6\">  <\/p>\n<p>\u3053\u306e\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u306f\u3001\u7ba1\u7406\u8005\u304c\u69cb\u6210\u3059\u308b\u305f\u3081\u306b\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u4f7f\u7528\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u3010\u6e96\u5099\u306b\u5fc5\u8981\u306a\u3053\u3068\u3011<\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f\u3001\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u524d\u306b\u7ba1\u7406\u8005\u306e\u64cd\u4f5c\u3092\u5fc5\u8981\u3068\u305b\u305a\u306b\u3001\u6307\u5b9a\u3055\u308c\u305f\u65e5\u4ed8\u307e\u3067\u306b\u81ea\u52d5\u7684\u306b\u884c\u308f\u308c\u307e\u3059\u3002\u73fe\u5728\u306e\u69cb\u6210\u3092\u78ba\u8a8d\u3057\u3066\u3001\u7d44\u7e54\u3078\u306e\u5f71\u97ff\u3092\u5224\u65ad\u3057\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306b\u3064\u3044\u3066\u7ba1\u7406\u8005\u306b\u901a\u77e5\u3057\u3001\u95a2\u9023\u3059\u308b\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u66f4\u65b0\u3059\u308b\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\u3002<\/p>\n<p>\u8a73\u7d30\u60c5\u5831: <a href=\"https:\/\/learn.microsoft.com\/purview\/insider-risk-management-settings-policy-indicators?tabs=purview-portal\" target=\"_blank\">  \u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u7ba1\u7406\u3067\u30dd\u30ea\u30b7\u30fc \u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u3092\u69cb\u6210\u3059\u308b |Microsoft Learn<\/a> (\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u524d\u306b\u66f4\u65b0\u3055\u308c\u307e\u3059)<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC990961 | Microsoft Purview | Insider Risk Management: DLP alerts as indicators Classification planForChange  [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9742","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/9742","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=9742"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/9742\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=9742"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=9742"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=9742"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}