Microsoft Purview compliance portal: Insider Risk Management – Forensic evidence

The latest addition to the Microsoft Purview compliance portal's Insider Risk Management capabilities is the forensic evidence add-in. This opt-in feature allows security teams to gain visual insights into user actions that may pose a risk to data security. However, it is off by default and requires dual authorization to create policies. Customers can determine what triggers the feature and manage investigation processes.

The Insider Risk Management feature itself is designed to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations, by correlating various signals. It enables customers to create policies to manage security and compliance while maintaining user-level privacy through pseudonymization by default, role-based access controls, and audit logs.

The new add-in is set for general availability release in April 2023 and will be available on the web cloud instance worldwide (Standard Multi-Tenant). With privacy by design and improved risk management capabilities, Microsoft Purview is positioning itself as a one-stop solution for organizations serious about data security.

The post Microsoft Purview compliance portal: Insider Risk Management – Forensic evidence appeared first on M365 Admin.