Microsoft's AI habit comes to data governance tool Purview
(2023/02/07)
- Reference: 1675794610
- News link: https://www.theregister.co.uk/2023/02/07/microsoft_purview_adaptive_protection/
- Source link:
Microsoft is adding a machine learning-based technology to its Purview data governance tool, hoping to appeal to customers who are worried about insider security risks.
The Adaptive Protection feature, which the enterprise software company is introducing at an online [1]event today, uses machine learning to see how employees and other users are dealing with data and whether they are engaging in behavior that puts their identity at risk.
Adaptive Protection, currently in preview, will automatically put in place data loss prevention (DLP) controls based on the risk level applied to each user.
[2]
"With Adaptive Protection, DLP policies become dynamic, ensuring that the most effective policy – such as blocking data sharing – is applied only to high-risk users, while low-risk users can maintain their productivity," Vasu Jakkal, corporate vice president for Microsoft Security, wrote in a [3]blog post . "The result: your security operations team is now more efficient and empowered to do more with less."
[4]
[5]
The new feature is designed to address what Jakkal said is a security problem created by the massive amounts of data being generated, the risking adoption of hybrid cloud and multicloud environments, and data protection tools that are focused on content, which generate a lot of alerts that security teams have to respond to.
The idea with Adaptive Protection is that a user with an elevated risk rating is blocked from such actions as printing a file with sensitive data, while another user deemed a minor security risk may simply see policy tips and be asked to file a business justification before being allowed to print the same document.
[6]Take the morning off because Outlook has already
[7]Warning: Microsoft Teams Free (classic) will be gone in 2 months
[8]Microsoft is changing how it handles device diagnostic data to keep EU sweet
[9]Microsoft boffins contemplate equipping Excel with AI
"Machine learning enables Adaptive Protection controls to automatically respond, so your organization can protect more (with less) while still maintaining workplace productivity," Jakkal wrote.
In addition, Microsoft this week said it is integrating capabilities from Purview Compliance Manager and Defender for Cloud to address the evolving complex regulatory environment and the growing data security challenges fueled by more remote workers.
[10]
The integration "translates complex regulatory requirements into specific controls, allowing organizations to constantly assess, monitor, and improve their compliance posture," [11]wrote Daniel Hidalgo, global product marketing manager for security at Microsoft.
The new capabilities will go into public preview in March and will give security teams a single place to manage technical controls from Defender for Cloud – covering not only Azure services but also those from Amazon Web Services and Google Cloud Platform – and extends continuous assessment capabilities across clouds to ensure broad compliance.
"Continuous assessments help customers automate compliance processes by eliminating a big pain point – blind spots," Hidalgo wrote. "With the help of automated testing, customers can automatically check whether a technical control has passed or failed." ®
Get our [12]Tech Resources
[1] https://mspurviewdigitalevent.eventcore.com/?ocid=cmmiva9roly
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y@LYEiSHc0B2ZrYANkJKQQAAAIM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.microsoft.com/en-us/security/blog/2023/02/06/introducing-adaptive-protection-in-microsoft-purview-people-centric-data-protection-for-a-multiplatform-world/
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y@LYEiSHc0B2ZrYANkJKQQAAAIM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y@LYEiSHc0B2ZrYANkJKQQAAAIM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2023/02/07/outlook_down/
[7] https://www.theregister.com/2023/02/07/microsoft_warns_teams_free_classic/
[8] https://www.theregister.com/2023/02/06/microsoft_eu_data_gdpr/
[9] https://www.theregister.com/2023/02/04/microsoft_excel_ai/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y@LYEiSHc0B2ZrYANkJKQQAAAIM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://techcommunity.microsoft.com/t5/security-compliance-and-identity/stay-ahead-of-the-data-protection-curve-with-new-enhancements-to/ba-p/3713755
[12] https://whitepapers.theregister.com/
The Adaptive Protection feature, which the enterprise software company is introducing at an online [1]event today, uses machine learning to see how employees and other users are dealing with data and whether they are engaging in behavior that puts their identity at risk.
Adaptive Protection, currently in preview, will automatically put in place data loss prevention (DLP) controls based on the risk level applied to each user.
[2]
"With Adaptive Protection, DLP policies become dynamic, ensuring that the most effective policy – such as blocking data sharing – is applied only to high-risk users, while low-risk users can maintain their productivity," Vasu Jakkal, corporate vice president for Microsoft Security, wrote in a [3]blog post . "The result: your security operations team is now more efficient and empowered to do more with less."
[4]
[5]
The new feature is designed to address what Jakkal said is a security problem created by the massive amounts of data being generated, the risking adoption of hybrid cloud and multicloud environments, and data protection tools that are focused on content, which generate a lot of alerts that security teams have to respond to.
The idea with Adaptive Protection is that a user with an elevated risk rating is blocked from such actions as printing a file with sensitive data, while another user deemed a minor security risk may simply see policy tips and be asked to file a business justification before being allowed to print the same document.
[6]Take the morning off because Outlook has already
[7]Warning: Microsoft Teams Free (classic) will be gone in 2 months
[8]Microsoft is changing how it handles device diagnostic data to keep EU sweet
[9]Microsoft boffins contemplate equipping Excel with AI
"Machine learning enables Adaptive Protection controls to automatically respond, so your organization can protect more (with less) while still maintaining workplace productivity," Jakkal wrote.
In addition, Microsoft this week said it is integrating capabilities from Purview Compliance Manager and Defender for Cloud to address the evolving complex regulatory environment and the growing data security challenges fueled by more remote workers.
[10]
The integration "translates complex regulatory requirements into specific controls, allowing organizations to constantly assess, monitor, and improve their compliance posture," [11]wrote Daniel Hidalgo, global product marketing manager for security at Microsoft.
The new capabilities will go into public preview in March and will give security teams a single place to manage technical controls from Defender for Cloud – covering not only Azure services but also those from Amazon Web Services and Google Cloud Platform – and extends continuous assessment capabilities across clouds to ensure broad compliance.
"Continuous assessments help customers automate compliance processes by eliminating a big pain point – blind spots," Hidalgo wrote. "With the help of automated testing, customers can automatically check whether a technical control has passed or failed." ®
Get our [12]Tech Resources
[1] https://mspurviewdigitalevent.eventcore.com/?ocid=cmmiva9roly
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y@LYEiSHc0B2ZrYANkJKQQAAAIM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.microsoft.com/en-us/security/blog/2023/02/06/introducing-adaptive-protection-in-microsoft-purview-people-centric-data-protection-for-a-multiplatform-world/
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y@LYEiSHc0B2ZrYANkJKQQAAAIM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y@LYEiSHc0B2ZrYANkJKQQAAAIM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2023/02/07/outlook_down/
[7] https://www.theregister.com/2023/02/07/microsoft_warns_teams_free_classic/
[8] https://www.theregister.com/2023/02/06/microsoft_eu_data_gdpr/
[9] https://www.theregister.com/2023/02/04/microsoft_excel_ai/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y@LYEiSHc0B2ZrYANkJKQQAAAIM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://techcommunity.microsoft.com/t5/security-compliance-and-identity/stay-ahead-of-the-data-protection-curve-with-new-enhancements-to/ba-p/3713755
[12] https://whitepapers.theregister.com/
So many problems, so little time
Someone Else
There are so many things wrong with this, like, for example:
1) Who decides who is a "high risk" employee? Does the AI determine this? Is so, then it is possible that a "low-risk" employee may become a "high-risk" employee simply by dint of doing their day-to-day work. Similarly, a "high-risk" employee, because they are not allowed to do anything high-risk, could become a "low-risk" employee over time.
2) In general, the most risky stuff is often done by executive staff, either because they are particularly clueless, or because thy don't think their shit stinks, and believe the rules don't apply to them. (This is an inclusive 'or'). I wonder how many of them will be considered "high-risk" in this tool? (Hint: None.)
3) This is Micros~1, ferchrissakes. A true world leader in all aspects of data security, and 24/7 uptime. Not!
I wait for the first time that this pig crashes, or quietly screws up and locks an entire business out of performing a critical line-of-business function. (I don't suspect I will have to wait long.) This will not end well.
What am I supposed to do as a support person?
I get a ticket from an irate VIP who has been classed as risky? "uNlOck tHisS doCuMeNt fOr mE NoW!!!!"
"I'm sorry Dave, I cannot do that"