Recorded 26 Oct 2026 at 17:48 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
Microsoft 365 roadmapMicrosoft 365 roadmap
Microsoft Purview: Insider Risk Management - Unified alert queue
We’re introducing a new unified alert triage experience in Insider Risk Management that brings agent‑driven insights directly into the standard Alerts queue. With this update, analysts can view agent categorizations alongside traditional alert filters and columns in a single, consolidated workflow. The updated alert details panel, enables faster investigation and action from the alerts list page by embedding agent insights directly into the alert experience. To support customer transition, the existing alert and agent triage experience will remain available for 60 days and can be accessed via the Alerts tabs under Users in the left navigation. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.
What it said
Roadmap ID
564621
Status
In development
General availability target
October CY2026
Preview target
July CY2026
Products
Microsoft Purview
Clouds
Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD
Release phases
General Availability, Preview
Platforms
Web
Added to the roadmap
27 May 2026 23:15 UTC
Last changed
27 May 2026 23:15 UTC
Source evidence when recorded
Microsoft 365 roadmap
IncompleteRead 26 Oct 2026 at 16:45 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.