Microsoft Purview | Insider Risk Management: Exfiltration of business sensitive data to free public domain emails

Microsoft Purview Insider Risk Management is introducing a new feature to prevent exfiltration of business sensitive data to free public domain emails. This feature is expected to be released for public preview in mid-May 2024 and for general availability in late June 2024. The update enhances email insight alerts and adds new domain detection for better security incident prevention. The update will highlight any email that is sent to free public domains, including email sent to self, and provide additional information when business sensitive data is potentially leaked from a work email account via a free public domain email. Admins can choose to select domains in their email indicator variants to detect free public domains. The feature is built with privacy by design, and users are pseudonymized by default, and role-based access controls and audit logs are available. Microsoft Purview Insider Risk Management customers can create policies based on their own internal policies, governance, and organizational requirements.

This feature enhances the existing email insight alerts and enables organizations to detect potential insider risks quickly and efficiently. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations.

The post Microsoft Purview | Insider Risk Management: Exfiltration of business sensitive data to free public domain emails appeared first on M365 Admin.