Microsoft Purview | Insider Risk Management: Policy recommendation panel in IRM

Microsoft Purview Insider Risk Management introduces a Policy Recommendation panel to identify gaps in insider risk policies and suggest improvements using analytics. Rolling out mid-June to late July 2026, it enhances policy coverage for risks like data leakage and AI misuse, with no impact on existing workflows. What and Why Microsoft Purview Insider Risk Management is introducing a policy recommendation panel to help administrators identify gaps in insider risk coverage and strengthen protections. While policies provide protection against insider risks, organizations may not always have visibility into missing or high-value configurations. This enhancement provides guidance on which policies are missing or offer the most incremental value, using analytics to generate actionable recommendations that improve coverage across scenarios such as data leakage, data theft, risky AI usage, IP theft, and security violations. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent risks. It enables organizations to define policies based on their governance needs and is built with privacy by design, including pseudonymization by default, role-based access controls, and audit logging to help protect user privacy. This message is associated with Microsoft 365 Roadmap ID 560600. Rollout Schedule Public Preview: Rolling out from mid-June 2026 through late June 2026 General Availability (Worldwide): Rolling out mid-July 2026 and expected to complete by late July 2026 Impact on Your Organization Who is affected Microsoft Purview Insider Risk Management administrators Organizations using Insider Risk Management policies Platforms/Services Microsoft Purview Insider Risk Management (web experience) What will happen A new Policy Recommendation panel will be available on the Policies page. The panel will analyze existing policies and identify potential gaps in coverage. Administrators will receive recommendations to create policies addressing risks such as data leakage, data theft, and risky AI usage. The feature is enabled by default and available automatically as part of the rollout. Existing policies and configurations remain unchanged. There is no impact to user workflows. Action Required/Recommendations No action is required. Recommended actions: Review recommendations in the Policy Recommendation panel. Evaluate suggested policies to improve insider risk coverage. Update internal governance or risk management processes as needed. Communicate […]

The post Microsoft Purview | Insider Risk Management: Policy recommendation panel in IRM appeared first on M365 Admin.