Recommendation for "Create Data Loss Prevention (DLP) policies"

Question

Recommendation for "Create Data Loss Prevention (DLP) policies"

ADM-Griffin2, Jay 151

My Microsoft Secure Score regressed 5 points on April 6 due to the recommendation "Create Data Loss Prevention (DLP) policies". I have 17 DLP policies. Is this a new evaluation Microsoft added to the Secure Score? Is it evaluating properly? (Doesn't seem to be in my case). Trying to figure out why I would get 0/5 points when I have 17 DLP polices? Implementation Prerequisites  You have Exchange Online Plan 2. Next steps Ensure that at least one Microsoft 365 DLP policy exists in the Microsoft 365 Compliance portal
Learn more nullnull

Learn more None

David Wanderer 5 Reputation points

2023-04-11T21:04:07.32+00:00

I have the same thing going on.
ADM-Griffin2, Jay 151 Reputation points

2023-04-12T12:27:28.5366667+00:00

Thanks @David Wanderer -- I am glad we are not the only one.
Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2023-04-13T08:36:43.07+00:00

@ADM-Griffin2, Jay Thank you for reaching out to us, let me research on this issue, in the meantime send us an email on azcommunity [at] microsoft [dot] com referencing this issue with a subject line "ATTN:Givary", it might need deeper investigation to address this issue.
Tord Keltner Støme 10 Reputation points

2023-04-19T06:59:12.08+00:00

We have the same problem, around the same date.
Hans Christian Andersen 10 Reputation points

2023-04-19T07:01:52.4233333+00:00

I now have some updates after I reported it to Microsoft.
They acknowlegde that they rollout something that is causing they. They are talking with the engineers in the backend team.
Marcus Glimberg 5 Reputation points

2023-04-21T08:47:14.75+00:00

We have noticed the same issue on our customers Secure Score, last checked today.
Hans Christian Andersen 10 Reputation points

2023-04-21T09:06:36.95+00:00

I got a call from Microsoft yesterday. They will start rolling out an update on may 5th to maj 12th.
ADM-Griffin2, Jay 151 Reputation points

2023-04-21T11:46:09.19+00:00

Hans -- do you know they are fixing the related issue: Publish M365 sensitivity label data classification policies
Varanasi Chaitanya 20 Reputation points

2023-04-21T12:22:32.1233333+00:00

Hi @ADM-Griffin2,Jay

Do you have any link / Q/A posted related to Publish M365 sensitivity label data classification policies. Because I'm facing an issue related to the recommendation - "Publish M365 sensitivity label data classification policies." where I have published to 30k Users and on secure score portal, and unfortunately I see it was published to 0 out of 30k and has been displayed in the implementation tab.
Please help me if you have any context related to the issue "Publish M365 sensitivity label data classification policies."
ADM-Griffin2, Jay 151 Reputation points

2023-04-21T12:34:54.7766667+00:00

@Varanasi Chaitanya -- The security score is wrong. Microsoft has said they are fixing the "Create DLP policies" score in May. I hope they also fix "Publish M365 sensitivity label" because it is also wrong.
Varanasi Chaitanya 20 Reputation points

2023-04-21T17:44:02.57+00:00

Hi @ADM-Griffin2,Jay,

Thank you very much for your prompt response. one more concern is, should I open up a ticket with Microsoft to have them fix it? or will this be fixed at org level by default? who has the secure score set up. Please advise.

Accepted answer

2 additional answers

Your answer

David Wanderer 5 Reputation points

2023-04-11T21:04:07.32+00:00

I have the same thing going on.
ADM-Griffin2, Jay 151 Reputation points

2023-04-12T12:27:28.5366667+00:00

Thanks @David Wanderer -- I am glad we are not the only one.
Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2023-04-13T08:36:43.07+00:00

@ADM-Griffin2, Jay Thank you for reaching out to us, let me research on this issue, in the meantime send us an email on azcommunity [at] microsoft [dot] com referencing this issue with a subject line "ATTN:Givary", it might need deeper investigation to address this issue.
Tord Keltner Støme 10 Reputation points

2023-04-19T06:59:12.08+00:00

We have the same problem, around the same date.
Hans Christian Andersen 10 Reputation points

2023-04-19T07:01:52.4233333+00:00

I now have some updates after I reported it to Microsoft.
They acknowlegde that they rollout something that is causing they. They are talking with the engineers in the backend team.
Marcus Glimberg 5 Reputation points

2023-04-21T08:47:14.75+00:00

We have noticed the same issue on our customers Secure Score, last checked today.
Hans Christian Andersen 10 Reputation points

2023-04-21T09:06:36.95+00:00

I got a call from Microsoft yesterday. They will start rolling out an update on may 5th to maj 12th.
ADM-Griffin2, Jay 151 Reputation points

2023-04-21T11:46:09.19+00:00

Hans -- do you know they are fixing the related issue: Publish M365 sensitivity label data classification policies
Varanasi Chaitanya 20 Reputation points

2023-04-21T12:22:32.1233333+00:00

Hi @ADM-Griffin2,Jay

Do you have any link / Q/A posted related to Publish M365 sensitivity label data classification policies. Because I'm facing an issue related to the recommendation - "Publish M365 sensitivity label data classification policies." where I have published to 30k Users and on secure score portal, and unfortunately I see it was published to 0 out of 30k and has been displayed in the implementation tab.
Please help me if you have any context related to the issue "Publish M365 sensitivity label data classification policies."
ADM-Griffin2, Jay 151 Reputation points

2023-04-21T12:34:54.7766667+00:00

@Varanasi Chaitanya -- The security score is wrong. Microsoft has said they are fixing the "Create DLP policies" score in May. I hope they also fix "Publish M365 sensitivity label" because it is also wrong.
Varanasi Chaitanya 20 Reputation points

2023-04-21T17:44:02.57+00:00

Hi @ADM-Griffin2,Jay,

Thank you very much for your prompt response. one more concern is, should I open up a ticket with Microsoft to have them fix it? or will this be fixed at org level by default? who has the secure score set up. Please advise.

Answer 1

Givary-MSFT 35,626 Microsoft Employee Moderator

Hi @ADM-Griffin2, Jay Regarding this issue "Secure Score regressed by 5 points due to DLP policies" As I have already communicated over the email there is a fix for the same will be deployed by the 2nd week of May by our engineering team.

Wanted to update this here as well, as it would help other community members looking for similar issue.

Let me know if you have any further questions, feel free to reach out to me.

ADM-Griffin2, Jay 151 Reputation points

2023-04-26T11:55:33.1466667+00:00

Yes -- thank you @Givary-MSFT for getting this issue before the right people and on track to be resolved!!

Answer 2

Lu Dai-MSFT 28,501

@ADM-Griffin2, Jay Thanks for posting in our Q&A.

For this issue, it is related to microsoft 365. I'm not a support engineer of this product and know little about it. So, it is suggested to post in Microsoft 365 Community forum to get more help.

Thanks for your understanding.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

ADM-Griffin2, Jay 151 Reputation points

2023-04-12T12:26:36.6066667+00:00

The Microsoft 365 Community forum is for the user apps -- I do not see anything about compliance or DLP in that forum. That does not appear to be the appropriate forum for this posting.

Answer 3

Hans Christian Andersen 10

I think that Microsoft changed what gives points towards Secure Score. I have two customers who were affected on the same date 6 April 2023. I can see in the compliance portal that this DLP policy gives point so I've set it up to sent incident reports as action to see if this is what counts now. User's image

ADM-Griffin2, Jay 151 Reputation points

2023-04-12T12:29:02.0833333+00:00

Thank you - please share your results!
Hans Christian Andersen 10 Reputation points

2023-04-13T06:05:42.7466667+00:00

Hi Jay

I checked this morning and can't see that it counted the DLP rule in the secure score. I can see in the compliance center where it shows as passed.

I thinking there must be a error in the Secure Score that happened around the april 6th since I seen this on two customers and you also see this. I make a support request to Microsoft about it and see what they reply.

Share via

Recommendation for "Create Data Loss Prevention (DLP) policies"

2 additional answers

Your answer