Microsoft Purview: New Purview Data Security Investigations (DSI) solution [MC1047912]

Microsoft Purview: New Purview Data Security Investigations (DSI) solution [MC1047912]

Message ID: MC1047912

Microsoft Purview Data Security Investigations (DSI) is a new AI-powered solution that enables data security teams to identify incident-related data, conduct deep content analysis, and mitigate risk within one unified solution.

This message is associated with Microsoft 365 Roadmap ID 485707.

[When this will happen:]

Public Preview: We will begin rolling out early April 2025 and expect to complete by mid-May 2025.

General Availability (Worldwide): We will begin rolling out mid-June 2025 and expect to complete by late July 2025.

[How this will affect your organization:]

DSI enables data security admins to efficiently identify incident-relevant content by searching their Microsoft 365 data estate to locate emails, Microsoft Teams messages, Microsoft Copilot prompts and responses, and documents.

After an admin scopes an investigation, DSI’s generative AI capabilities allow admins to gain deeper insights into the impacted data, revealing critical security risks and sensitive information. Investigative capabilities include the ability to categorize evidence, perform vector searches, and examine impacted data for security and sensitive data risks.

DSI visualizes correlations between investigation data, users, and their activities. To mitigate identified risks, DSI facilitates secure collaboration between partner teams. Post-investigation learnings can be used to refine existing policies to strengthen your organization’s security practices.

Get started with DSI on the overview page with information on enrollment and enabling RBAC (role-based access control):

admin controls

Categorize your data to identify highest risk items and plan mitigation actions accordingly:

admin controls

Understand investigation progress and insights with the Investigation summary view:

admin controls

[What you need to do to prepare:]

Learn more: Accelerate data security investigations with AI-powered deep content analysis | Microsoft Community Hub

When the Public Preview begins, we will update this post with new documentation.

Get started on the Purview DSI overview page (coming soon) to complete setup and get oriented in a few simple steps:

  1. Enable access in Microsoft Purview > Permission for DSI admins, DSI investigators and DSI reviewers in your organization.
  2. Complete the DSI first-run experience including:
    1. Enrolling your Purview subscription for non-AI storage and processing meter
    2. Enrolling for AI consumption using security compute units
  3. Get started with your first investigation.

Source: Microsoft

How useful was this post?

Click on a star to rate it!

Average rating 0 / 5. Vote count: 0

No votes so far! Be the first to rate this post.

Show 1 Comment

1 Comment

  1. Mike Rosoft

    The introduction of the Microsoft Purview Data Security Investigations (DSI) solution is set to bring a wave of change for both data security admins and users alike. With its AI-powered capabilities, DSI aims to enhance the way organizations identify and mitigate data security risks, making it a game-changer in the realm of data protection.

    For admins, the DSI solution offers a streamlined approach to locating incident-related data across the Microsoft 365 ecosystem. No more sifting through endless emails or Teams messages! Instead, admins can efficiently scope investigations, categorize evidence, and perform vector searches to uncover sensitive information. The generative AI features promise to provide deeper insights into impacted data, which will undoubtedly aid in identifying critical security risks. Additionally, the ability to visualize correlations between user activities and investigation data adds a powerful layer of analysis that can enhance overall security strategies.

    On the user front, while they may not directly interact with DSI, the ripple effect of enhanced security measures will foster a safer digital environment. Users can feel more secure knowing that their data is being monitored and protected by advanced AI tools. The outcome? A more robust security posture that ultimately benefits everyone in the organization.

    As for the impact of these changes, it’s hard to overstate their significance. The DSI solution is not just an upgrade; it’s a transformative step towards proactive data security. As organizations gear up for the public preview in early April 2025, it will be interesting to see how quickly teams adapt and leverage these new capabilities.

    In the spirit of collaboration and shared experiences, I encourage everyone to share their thoughts on this update! What are you most excited about? How do you think DSI will change your approach to data security? Let’s keep the conversation going, and feel free to check out more insights on this topic at mwpro.co.uk!

Leave a Reply

Your email address will not be published. Required fields are marked *