Microsoft Purview compliance portal: Insider Risk Management – Cumulative exfiltration detection

Originally posted by Microsoft Apr 4, 2023 Uncategorized 0 Comments

Cumulative exfiltration detection helps identify data exfiltration risks when a user’s exfiltration activities across all egress channels over the past 30 days exceed organization or peer group norms. A risk score is assigned if the user’s cumulative exfiltration activity is unusual compared with others within the same organization or with the same role. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Product
Release phase	General Availability
Release date	June CY2023
Platform	Web
Cloud Instance	GCC High, DoD, Worldwide (Standard Multi-Tenant), GCC
Created	2023-04-04
Roadmap ID	117603
Roadmap Link	https://www.microsoft.com/microsoft-365/roadmap?featureid=117603