Microsoft Purview compliance portal: Insider Risk Management – New Insider Risk Management Reporting Capabilities

Microsoft Purview compliance portal is introducing new insider risk management reporting capabilities. These capabilities will provide one central location for all reports, including analytics and user activity reports. These reports summarize trends in alerts generated and cases created and allow for filtering, providing greater insight into insider risk management. Sample reports include alerts generated over time, alerts actioned over time, alerts and cases generated by region and department, top triggering events of alerts generated, and average time to triage alerts and cases.

Users with admin, analyst or investigator roles will have access to the new Alerts & cases report, while permissions for accessing analytics and user activity reports remain unchanged. Microsoft Purview Insider Risk Management leverages various signals to identify potential malicious or inadvertent insider risks such as IP theft, data leakage, and security violations. It enables organizations to create policies based on their internal policies, governance, and requirements. Additionally, Privacy by Design is built in, with users being pseudonymized by default while role-based access controls and audit logs are in place to ensure user-level privacy.

The Insider Risk Management Reporting Capabilities are set to be made available for General Availability Release in February CY2025 and for Preview in December CY2024. The platform will be available on web cloud instance worldwide (Standard Multi-Tenant), GCC High, DoD, and GCC.

The post Microsoft Purview compliance portal: Insider Risk Management – New Insider Risk Management Reporting Capabilities was originally published on M365 Admin.