Microsoft Purview compliance portal: Insider Risk Management - Support for multicloud environments

🚨 The Signal: Microsoft Purview Insider Risk Management now detects data theft and leaks across Azure, AWS, Box, Dropbox, Google Drive, and GitHub. This expands visibility into risky user activities in multicloud environments, enhancing protection against insider threats.

The Impact

Security teams gain expanded visibility into insider risks across multicloud platforms, reducing the risk of data exfiltration and intellectual property theft.

  • Security teams: Gain new capabilities to detect data theft across cloud services.
  • Compliance officers: Better enforce data protection policies in hybrid environments.
  • Risk managers: Improved insights into potential insider threats from cloud data.
  • Data owners: Enhanced protection for sensitive data stored in third-party clouds.

The Action

  1. Navigate to Microsoft Purview compliance portal > Insider Risk Management > Policies.
  2. Create new policies or modify existing ones to include multicloud risk indicators.
  3. Define scope for Azure, AWS, Box, Dropbox, Google Drive, and GitHub data sources.
  4. Configure appropriate actions for detected insider risk activities.
  5. Review and adjust alert thresholds and reporting for new multicloud signals.

Domain: Purview · Impact: high · Workload: Microsoft Purview