Microsoft Purview compliance portal: Insider Risk Management – Deduplication of signals

Microsoft Purview Insider Risk Management has introduced an update that addresses noisy alerts due to duplicate signals generated by a single user activity. This update will ensure the de-duplication of signals, which will significantly reduce noise in alerts while retaining risk context, enabling users to identify potential insider risks such as data leakage, security violations, and IP theft.

With privacy by design as a priority for Insider Risk Management, users are pseudonymized by default, and role-based access controls and audit logs are in place to ensure user-level privacy. Customers can create policies to manage security and compliance using Insider Risk Management, which correlates various signals to identify potential insider threats.

This is a tool that customers can use to manage security and compliance to create policies for managing potential insider risks such as IP theft, security violations, and data leakage. The preview release is expected in February CY2023, and the worldwide (Standard Multi-Tenant) cloud instance is the platform used.

Overall, this is a great update for Microsoft Purview customers who are looking to manage insider risks by reducing noise in alerts while still retaining important risk context.

The post Microsoft Purview compliance portal: Insider Risk Management – Deduplication of signals appeared first on M365 Admin.