Microsoft 365 compliance center: Insider risk management – Anomaly-as-a-Policy-Trigger
Customize a policy to trigger on an anomalous activity (e.g., anomalous quantity of sensitive document downloads). Insider Risk Management in Microsoft 365 correlates various signals from the chip to the cloud to identify potential malicious or inadvertent insider risks, such as IP theft, security and policy violations, and more. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to ensure user-level privacy.


HANDS ON tek
M365 Admin





