Data - 35032 - Adaptive Protection in DLP Policies

[Manoj-Kesana]

Adaptive Protection in DLP Policies

[Copilot]

Pull request overview

This PR adds a new security assessment test (ID 35032) to validate whether Adaptive Protection is configured in Data Loss Prevention (DLP) policies. Adaptive Protection integrates Microsoft Purview Insider Risk Management with DLP policies to dynamically enforce stronger protections for users identified as high-risk based on behavioral indicators, rather than applying uniform DLP controls to all users.

Changes:

• Added PowerShell test script that queries DLP compliance rules and checks for rules using the SharedByIRMUserRisk condition
• Added markdown documentation explaining Adaptive Protection, remediation steps, and PowerShell configuration examples with risk level GUIDs

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File	Description
src/powershell/tests/Test-Assessment.35032.ps1	Implements the assessment logic to query DLP compliance rules and identify those configured with Adaptive Protection (insider risk-based conditions), generating detailed reports on risk level coverage
src/powershell/tests/Test-Assessment.35032.md	Provides comprehensive documentation including prerequisites, portal and PowerShell configuration steps, risk level GUID reference, and relevant Microsoft documentation links

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.