Microsoft Purview: Insider Risk Management – Ability to preview content in Insider Risk Management Alerts
Insider Risk Management now allows users with appropriate permissions to preview content directly within alerts without creating a case, streamlining investigation workflows.
Key dates
- — preview (Feature currently in development)
Microsoft's description
Insider Risk Management is excited to announce the ability to preview content directly within an IRM alert without having to create a case. Users with appropriate permissions will be able to preview relevant files referenced directly within activity explorer in each alert. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.