Microsoft Purview compliance portal: Insider Risk Management- OCR support in Insider Risk Management

🚨 The Signal: Purview Insider Risk Management now uses Optical Character Recognition (OCR) to detect sensitive data in images across SharePoint, Teams, and endpoints. This enhances detection of data leakage and IP theft from visual content.

The Impact

Security teams are affected by improved detection of data exfiltration risks from image content.

• Security teams: Enhanced detection of sensitive data in images reduces data exfiltration risk.
• Compliance officers: Better visibility into image-based data leakage supports regulatory adherence.
• Admins: Potential increase in insider risk alerts requiring investigation.

The Action

1. Review existing Insider Risk Management policies for OCR applicability: Microsoft Purview compliance portal > Insider Risk Management > Policies.
2. Consider creating new policies or refining existing ones to leverage OCR for image-based content: Microsoft Purview compliance portal > Insider Risk Management > Policies > Create policy.
3. Monitor Insider Risk Management alerts for new OCR-driven detections: Microsoft Purview compliance portal > Insider Risk Management > Alerts.

Domain: Purview · Impact: medium · Workload: Microsoft Purview