decoded365
← All changes
NewMicrosoft Purview · Data Loss Prevention · Microsoft Teams · SharePoint · OneDrive

Microsoft Purview: Data Security Triage Agent - Sensitive Data Remediation through Microsoft Teams

A new Data Security Triage Agent function automates detection of sensitive data (SSN, passwords, credit cards) in SharePoint and OneDrive files and sends Teams remediation notifications to end users. Admins gain real-time remediation tracking via the Data Security Posture Management dashboard, reducing manual remediation overhead.

Action required: Review and configure the Data Security Triage Agent in Purview DLP to enable automated sensitive data remediation workflows and Teams notifications for your organization.

Key dates

  • 2024preview (Feature currently in development/preview status)

Microsoft's description

The Data Security Triage Agent in Data Loss Prevention now offers a new sensitive data remediation function, which empowers organizations to proactively identify and remediate sensitive information—such as Social Security Numbers, passwords, and credit card data—across thousands of files stored in SharePoint or OneDrive locations, dramatically increasing the percentage of remediated files with sensitive information, resulting in reduced compliance risk. Seamlessly integrated with Microsoft Purview, this new agent function automatically detects file(s) with a Data Loss Prevention (DLP) policy match “Needs Attention” alerts and pushes a remediation notification to the end user who last modified the file guiding them to remove sensitive data through targeted Microsoft Teams messages. Its’ closed-loop workflow ensures that remediation progress is tracked and confirmed, giving admins real-time visibility and control via the Data Security Posture Management dashboard. By streamlining sensitive data cleanup and automating user engagement, this agent helps organizations achieve their remediation goals at scale. Let the Data Security Triage Agent handle the heavy lifting of pushing remediation requests directly to the end user, so Purview admins don't have to!

View on Microsoft roadmap →