MC707653Microsoft Purview Insider Risk Management: Public preview of progressive alert scoring

Updated April 16, 2025: We have updated the rollout timeline below. Thank you for your patience.

Coming soon, Microsoft Purview Insider Risk Management will be rolling out public preview of progressive alert scoring.

This message is associated with Microsoft 365 Roadmap ID 179883

When this will happen:

Preview will begin in mid-October 2024 (previously early August) and is expected to be complete by mid-December 2024 (previously mid-November) 

General Availability (Worldwide) Available now.

General Availability (GCC, GCC-High, DoD): We will begin rolling out early September and expect to be complete by late September 2025.  

How this will affect your organization:

With this new feature, user activities that could potentially result in data security incidents will be assessed more frequently within a 24-hour period compared with the current practice of once every 24 hours. Alert insights will now be updated every few hours with this increased frequency, providing analysts with timely alerts and continuously evolving insights.

What you need to do to prepare:

No action is needed for this update.

Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

You can access the Insider Risk Management solution in the Microsoft Purview compliance portal.

https://purview.microsoft.com/compliance

Learn more: Investigate insider risk management activities