Microsoft Purview compliance portal: Insider Risk Management – New email scoring capabilities

Microsoft Purview has announced updates to the email scoring logic for its Insider Risk Management (IRM) system, aimed at reducing noise and increasing accuracy. Previously, a single email sent to multiple recipients would be counted multiple times, potentially inflating the risk score. The new logic will count the single email sent to multiple recipients only once, and this principle also applies to those emails containing multiple unallowed domains or priority content. With these changes, all email insights in alerts will display the new count and score henceforth.

Insider Risk Management is an essential feature provided by Microsoft Purview. It correlates various signals to identify potential malicious or inadvertent insider risks such as data leakage, IP theft, and security violations. With its features, users can create policies based on their own internal policies, governance, and organizational requirements. Microsoft Purview also prioritizes user privacy, incorporating role-based access controls and audit logs to maintain user-level privacy. These welcome changes are expected to roll-out globally, and they are a step forward in enhancing the system's effectiveness and accuracy.

The post Microsoft Purview compliance portal: Insider Risk Management – New email scoring capabilities was originally seen on M365 Admin.