Microsoft Purview compliance portal: Insider Risk Management - Recommended thresholds

🚨 The Signal: Purview Insider Risk Management now offers recommended thresholds for built-in indicators. This helps security teams fine-tune policies to reduce alert fatigue and improve detection of insider threats like data leakage or IP theft, enhancing data protection.

The Impact

Security teams are affected by improved insider risk detection, reducing data loss and intellectual property theft risks.

• Security Teams: Reduced alert fatigue from better-tuned policies.
• Security Teams: Improved detection of malicious or inadvertent insider data leakage.
• Data Owners: Enhanced protection against intellectual property theft.
• Compliance Teams: Better alignment with data protection and privacy regulations.

The Action

1. Navigate to Microsoft Purview compliance portal > Insider Risk Management > Policies.
2. Create a new policy or edit an existing one.
3. Proceed through the policy wizard to the 'Indicators' section.
4. Review and apply the 'Recommended thresholds' for built-in indicators.
5. Monitor policy effectiveness and adjust thresholds as needed.

Domain: Purview · Impact: medium · Workload: Microsoft Purview