Microsoft Purview compliance portal: Insider Risk Management – Cumulative exfiltration detection

Microsoft Purview compliance portal has unveiled a new feature, Cumulative Exfiltration Detection, for managing insider risk management. This feature offers users protection from IP theft, data leakage, and security violations by identifying potential malicious or inadvertent insider risks.

Cumulative exfiltration detection helps to identify data exfiltration risks by measuring a user's exfiltration activities across all egress channels in the past 30 days, comparing their cumulative exfiltration activity with that of others within the same organization or with the same role. A risk score is assigned to the user's activity if it is identified as being unusual.

The Microsoft Purview Insider Risk Management platform is designed with privacy in mind, with users pseudonymized by default, role-based access controls, and audit logs in place to ensure user-level privacy. Customers can create policies to manage security and compliance using the platform.

This feature will be generally available as of June CY2023, and is web-based, with availability across various cloud instances worldwide, DoD, GCC, and GCC High.

For those seeking an edge in insider risk management, Cumulative Exfiltration Detection is undoubtedly worth a look.

The post Microsoft Purview compliance portal: Insider Risk Management – Cumulative exfiltration detection appeared first on M365 Admin.