PreviewMicrosoft Purview · Data Loss Prevention
Microsoft Purview: Data Loss Prevention - Rule-based tagging and auto-resolution of alerts based on business needs of the customer.
Microsoft Purview DLP will support rule-based auto-resolution and tagging of alerts, enabling admins to automatically handle predictable alerts and categorize them based on business rules. This helps reduce alert noise and improve alert triage efficiency.
Action required: Review DLP alert patterns in your environment and plan alert auto-resolution and tagging rules to reduce noise and improve alert routing once this preview feature becomes available.
Microsoft's description
Alert auto-resolution & tagging rules let you tell DLP, in advance, how to handle predictable alerts. You define a rule once, and from then on DLP applies it automatically to every new alert: ● Resolve alerts you don't need to see - e.g., Low-severity alerts for mail sent only to your trusted partner domains, so they never reach your triage queue. ● Tag alerts so you can find and route them - e.g., label every alert from your Legal department as a “Business Process”.