Microsoft Purview compliance portal: Insider Risk Management – New email scoring capabilities

Insider risk management (IRM) email scoring logic is being updated. With current logic, a single email to multiple recipients (say “n”) is counted multiple times (n times), and this is creating noise by increasing the risk score. In the new logic, a single email to multiple recipients is counted once, and this new principle is applicable to the email containing multiple unallowed domains or priority content. Once this is rolled out, all the email insights in alerts will display the new count and score.

Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Product
Release phase General Availability
Release date February CY2025
Platform Web
Cloud Instance DoD, GCC High, GCC
Created 2024-12-07
Roadmap ID 471010
Roadmap Link https://www.microsoft.com/microsoft-365/roadmap?featureid=471010


Comments are closed.


I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.

%d bloggers like this: