Describe insider risk management solutions to protect against internal threats
Microsoft 365 contains a set of policy tools to allow organizations to identify risky behaviors and activities as well as to act on those alerts. This feature is known as insider risk management (IRM). IRM is located inside the Microsoft 365 compliance portal at https://compliance.microsoft.com/insiderriskmgmt. IRM combines components from DLP, sensitivity labels, natural language processing (NLP), sentiment analysis, access-control signals, and triggering events to quickly alert organizations to risks such as potential data theft by a departing employee or sensitive information leaks.
Microsoft 365 IRM is designed to help mitigate various internal risks, such as the following:
- Data theft by a terminated or departing employee
- Intentional or unintentional leaking of sensitive information
- Violations of internal corporate policy, such as offensive language, cyber-bullying, harassment, and...