Microsoft Purview Insider Risk Management Deployment

Prevent, Detect and Contain Insider Information Breaches with Purview Insider Risk Management

Insider risk management. It sounds like a problem for other organizations. The ones with disgruntled employees or industrial spies. Purview Insider Risk Management handles those cases. But it also handles a situation where your organization likely faces inadvertent exposure of company-confidential information. With Purview Insider Risk Management, you can proactively prevent, detect and contain unintended exposure of company-sensitive information. And you can do this in a way that respects employees, company culture and user experience.

Insider Risk Management requires an organization to determine the most relevant risks for their organization. Factors like organization size, industry, regulatory environment and IT resources all play a part in the determination.

Once the short list of risks is created, organizations need to choose the most appropriate indicators for each risk. These might be an employee’s two-week notice to leave, a promotion, or a change of assignment to a position handling more confidential information.

The triggers are then defined and monitored for each risk.  For instance, one might look for unusually large document download activity.

Organizations then need to define the actions to be taken.  Example actions include file download blocking, restrict user’s privilege.  Proper balance has to be achieved between risk management and employee trust.

Benefits of Insider Risk Management Deployment

• Protect your organization against malicious actors and accidental data leakage.
• Demonstrate compliance with relevant Information Security standards.
• Develop a proactive vs. reactive approach to security breaches. Address the problem before it occurs!