Allow customers to bring their own user activity
indicators from homegrown, SIEM/UEBA platforms, or other line-of-business
applications, and leverage them in existing Insider Risk Management playbooks.
Microsoft Purview Insider Risk Management correlates various signals to
identify potential malicious or inadvertent insider risks, such as IP theft, data
leakage, and security violations. Insider Risk Management enables customers to
create policies to manage security and compliance. Built with privacy by
design, users are pseudonymized by default, and role-based access controls and
audit logs are in place to help ensure user-level privacy.
More info: https://learn.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management?view=o365-worldwide
GA date: December CY2025
Preview date: June CY2023