<p>Insider risk management will be introducing the ability to classify alerts as True positive, Benign (operational), and False positive. This will be available on all alerts where authorized analysts with the appropriate permissions can choose from a list of predefined classification reasons. Alert classification will help tenants to better classify risk within alerts to support reporting and tuning needs. This will replace existing dismissal reasons.</p>
Roadmap › 576710
Microsoft Purview: Introducing IRM Alert classification
- General availability
- 2027-01
- Preview
- 2026-11
- Added
- 22 Oct 2026
- Last modified
- 22 Oct 2026 22:58 UTC
- First archived
- 23 Oct 2026
- Release rings
- General Availability, Preview
- Clouds
- Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD
Description
© Microsoft — from the Microsoft 365 Roadmap · View on microsoft.com · Content notice