Feedback by UserVoice

Office 365 Security & Compliance

We have partnered with UserVoice, a third-party service and your use of the portal and your submission is subject to the UserVoice Terms of Service & Privacy Policy. Please do not send any novel or patentable ideas, copyrighted materials, samples or demos for which you do not want to grant a license to Microsoft.

Welcome to the Security (Protection) & Compliance UserVoice forum. We’re happy you’re here! If you have suggestions or ideas on how to improve Security or Compliance related features in O365, we’d love to hear them!

How it works
◾Check out the ideas others have suggested and vote on your favorites
◾If you have a suggestion that’s not listed yet, submit your own — 25 words or less, please
◾Include one suggestion per post

Thanks for joining our community and helping improve these features in Office 365!

Need Tech Support? Please see the O365 Community for the product or feature you are having issues with, or open a support ticket through your Office 365 administrator portal.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Microsoft 365 NIST 800-171 Assessment in Compliance Manager

    Can you add the NIST 800-171 assessment in Compliance Manager for the product Microsoft 365?

    Right now the product list only includes: Azure, Azure Government, Dynamics, Office 365 and Professional Services. No M365 :(

    Thanks!

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  2. Provide Informational Popup indicating that it's not possible to upload a new APN Certificate when one is already installed.

    Please provide Informational Popup indicating that it's not possible to upload a new APN Certificate when one is already installed. As is, nothing happens when clicking the upload button after browsing and selecting the APN Certificate which led me to believe there was an issue with the "Install Apple Push Notification Certificate" wizard.

    Rather than reinstalling the APN, all I had to do was Renew the currently installed APN on the Apple Push Certificates Portal.

    Had there been a pop-up indicating that an APN already exists, I would've save myself and MS Support team sometime.

    Thanks!

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  3. over all experience.

    The Security a and compliance “experience” is BAD. To do an ediscovery I need to find a role group ending in “preview”[as per the message displayed on the search page]… that role group does not exist as it is an assignment to an existing role group “Security readers” – and I might add that Azure Ad has a “security readers” role group [not the same one], Exchange has a “Security Readers” not the same one… Security has a “Security readers… not the same one…. Do you see a pattern forming here? Once you see the pattern should be no surprise…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  4. How about verbal assistance

    I once again request the help that comes from tech guru gums flapping. Questions answered in an personal way. The articles are informative to an extent, but yrs. is not an option for anymore unwanted edu. Lets talk... 8323408771 8325694539
    - Kristen Cole
    17210 Heritage bay 77598

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  5. unusual external file activity

    Add the ability to whitelist certain SharePoint sites from the unusual external file activity alert. We have several sites that are designed to be shared externally, have no sensitive data, and that we do not need to be alerted about. We don't have any way of filtering those out of the alerts though, so we are regularly getting useless notifications and have a hard time filtering through to find the ones we actually do care about.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  6. Add More MS Products to the Compliance Manager

    Hello,

    I can see that it took a lto of work, but if you could assign even one person for all major MS product lines to address adding these products to the Compliance Manager, like you have for Office 365, in particular VTST and TFS, that would be great. I know that these products aren't necessarily associated with personal data; however depending on what you're developing and also in thinking a privacy by design, this is where it happens in the MS world. Maybe SSMS too.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  7. Content Search filter export/report results

    So currently the only option to export results from Content Searches is to either view the very limited preview (which currently doesn't expand the Sender: address to a full email address), and I think might have numerical restrictions, or to export full emails.
    We had a business requirement come in that Content Search would've helped us achieve had it had the ability to filter the output emails down to just certain fields.
    The requirement was to go back in time searching across all emails in the organisation to get a large list of only the sender domains.
    Currently the only…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  8. Customer managed granularity for CSPs in compliance manager for Office 365

    Allow the ability to split the Customer field into CSP and Customer(s). Also associated permissions to see what you are assigned via groups. Shared responsibility is not always just two parties.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  9. Onenote data cannot be searched or downloaded

    Currently, data within OneNote notebooks cannot be searched for, or downloaded on behalf of users.

    OneNote data for users who leave cannot be archived for regulatory purposes, which has been confirmed in support ticket 17519242.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  10. ability to display a user's permissions in office 365 security

    I am trying to find how to search for a user and have all their office 365 security permissions to show up?
    instead of searching each MS365 security permission role group for membership

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  11. 3DES usage

    Spreadsheet of TLS 3DES usage needs a column for Cipher used. Showing us which protocol was used is ok, but knowing that Bob connected with TLS 1.0/1.1 doesn't tell us if the Cipher used was 3DES or not.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  12. You broke the compliance button

    The compliance button now shifts to all lowercase security on any screens from the admin screen. Please fix

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  13. Include Center for Internet Security guidelines

    Create Azure Security and Compliance Blueprint based on CIS recommendations for MS Azure platform.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  14. I want to be able to customize the data exported in the message audit log and send it to the user

    I want to be able to customize the data exported in the message audit log and send it to the user

    メッセージ監査ログのエクスポートしたデータをカスタマイズしてユーザーへ送信できるようにしてほしい

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  15. Enable by default alert Activity from infrequent country

    These anomaly detection policies are only available for E5 users or MS CAS.

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  16. We currently have in-place holds for mailboxes that expire after 1 year.

    We currently have mailbox in-place holds that expire after 1 year. This allows us to meet compliance policy without having to go back and manually delete holds after the required time. Can you do something like that in eDiscovery?

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  17. Add to the FAQ a description of the 'Manage Documents' feature

    If a document is uploaded for a control, is it accessible in the other Assessments for related controls? If a document is uploaded, can it be referenced by several controls? or does one upload the document several times?

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  18. Illegal data collection Office 365 MAC

    If you install Office 365 for MAC you get the question if you want to share full diagnostic data or basic diagnostic data, but you can’t select no data. According to the EU law this is not allowed (ref. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679).

    Of course, you are collecting anonymized data (at least this is what you say), but technically you need an identifier (unique ID) for receiving data. This UID represents the customer and therefore this is personal data. If you really use no UID, there are technical solutions to analyze big data and find a specific information.

    You are allowed to…

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  19. I want to be able to check the operation history of the message tracking log in the audit log

    I want to be able to check the operation history of the message tracking log in the audit log
    監査ログでメッセージ追跡ログの操作履歴を確認できるようにしたい。

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  20. Dynamics 365 SOC I type II report ran every 6 months.

    For our SOX auditing, we are in need of a Dynamics 365 SOC I Type II report ran every 6 months instead of once a year. Because of our fiscal year end timing and the timing of the current yearly report the external auditors are unable to find comfort int he amount of months currently coverer

    1 vote
    Vote
    Sign in
    (thinking…)
    Sign in with: Facebook Google
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    0 comments  ·  Compliance Manager  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Feedback and Knowledge Base