2 min to read
Communication compliance in Microsoft 365 - Part 2
This blog is continuation of the previous blog, in this blog we will cover the Investigate and remediate communication compliance.
Investigate and remediate compliance item:
Once we created the policy, it will automatically start the audit and record communication content based on policy. Recorded information is shown under each communication compliance policy as shown in the below image.
Once get the audit item under the pending tab, we can take the following remediate actions.
- Resolve
- Tag a message
- Notify the user
- Escalate to another reviewer
- Mark as a false positive
- Create a case
Resolve:
This action helps to move the audit item from Pending state to resolve state, so we can use this action to move the non-compliance audit item from pending state to resolve state.
Tag a message:
Using this action, we can Tag a message. This helps to micro-filter policy alerts for escalation or used for the Internal review process. It provides the Tag with the following category
- Non-Compliant
- Compliant
- Questionable
After applying the Tag, you can filter it out with Category.
Notify the User:
Using this action, we can give the warning notice through a notice template.
How to create a template to notify the user?
We can create a template from, select any Alert item → Click Notify action → Choose a notice template → Create a new notification → Provide the template info
We need to provide all the required information shown in the below image.
Escalate to Another reviewers:
Using this action, we can escalate a specific alert item to another reviewers to analyze the issue further.
Reviewers will receive a mail as shown in like below image.
Mark as false positive:
Using this action, we can move the incorrectly detected alert item to the Resolved queue. Once applying the false positive to the alert item, this policy will not detect similar communication content for compliance.
Create a case:
Using this action, we can deeply investigate to alert item.
Once created a case, it will transfer the alter item data to Advanced eDiscovery for further deep investigation.
Near Duplicate/Exact duplicate:
Additionally, communication compliance policy detects Near and Exact duplicates, we can view it from the remediation action toolbar.