We have heard from customers that in today’s modern workplace and threat landscape, alerts and insights are a key tool to maintain visibility and control in your environment. Office 365 alert policie...
Updated May 11, 2021
Version 5.0
Blog Post
3 MIN READ
Maintain visibility more effectively with updates to alert policies and insights
Binyan Chen Thanks for the updates. For MCAS integration, the documentation (https://docs.microsoft.com/en-us/Office365/SecurityCompliance/alert-policies#viewing-cloud-app-security-alerts) says "Changing the status of a Cloud App Security alert in the Security & Compliance Center won't update the resolution status for the same alert in the Cloud App Security portal. For example, if you mark the status of the alert as Resolved in the Security & Compliance Center, the status of the alert in the Cloud App Security portal is unchanged. To resolve or dismiss a Cloud App Security alert, manage the alert in the Cloud App Security portal."
A couple of questions:
1. Does this apply to alerts from Office 365 Cloud App Security as well, or just to MCAS ones?
2. If the alert is resolved in MCAS, does that status flow through to O365 Alerts? I assume the answer is no currently, but that would be nice otherwise the O365 Alerts screen is going to show out-of-date status data points that will eventually lead to them being ignored.
3. Are there any plans to change the lack of alert status integration between the two? Having to resolve in both places is duplication of effort, something we'd like to minimise.