Microsoft Purview compliance portal: Insider Risk Management – Peer group anomaly detection

This post outlines the update to the Microsoft Purview compliance portal's Insider Risk Management feature, where it can now detect exfiltration anomalies by comparing with users in similar groups or roles. Insider Risk Management uses various signals to identify potential insider risks, from data leakage to IP theft and security violations. Users are pseudonymized by default, and built-in controls and audit logs ensure user-level privacy. This update is now generally available and is accessible via the cloud platform.

The post Microsoft Purview compliance portal: Insider Risk Management – Peer group anomaly detection originally appeared on M365 Admin.