Describe insider risk capabilities in M365

Question 1

What is Insider Risk Management?

Answer 1

Insider risk management helps detect, investigate, and take action to mitigate internal risks in your organization from insider risk scenarios.

Question 2

What kinds of Insider risks are there?

Answer 2

Data leaks
IP Theft
Insider trading
Fraud Confidentiality violations
Regulatory compliance violations

Question 3

What is the M365 Insider Risk Management workflow?

Answer 3

Policies are created to generate alerts. These alerts are then triaged (automatically and manually). If valid, they are investigated then actions are taken in response.

Question 4

Who should be involved in insider risk management workflows?

Answer 4

Compliance
HR
Legal
Security

Question 5

What is communication compliance?

Answer 5

A Insider Risk Management solution that detects, capture and act on inappropriate messages.

Question 6

What kinds of communications are inappropriate?

Answer 6

Offensive or threatening language
Sensitive information
Regulatory compliance
Conflict of interest

Question 7

Where does Communication compliance work?

Answer 7

Email
MS Teams
Yammer
Third-Party communications.

Question 8

What actions can you take against detected communications?

Answer 8

Resolve
Tag
Notify
Escalate
Remove message (Teams only)