Microsoft Purview compliance portal: Insider Risk Management – Peer group anomaly detection

Originally posted by Microsoft Apr 26, 2023 Uncategorized 0 Comments

With this update, Insider Risk Management can detect exfiltration anomalies when compared with users in similar groups or roles. Insider Risk Management defines similar user groups by grouping together users who access the same SharePoint Online destinations, who are in the same team, or who have similar job titles as configured in Azure AD. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Product
Release phase	General Availability
Release date	June CY2023
Platform	Web
Cloud Instance	GCC, GCC High, DoD, Worldwide (Standard Multi-Tenant)
Created	2023-04-26
Roadmap ID	124864
Roadmap Link	https://www.microsoft.com/microsoft-365/roadmap?featureid=124864