Manage Data Risks from Employee Insiders with Microsoft Purview

Published Apr 19 2022 12:58 PM 1,612 Views
Contributor
 
 

QUICK LINKS:

 

Link References:

 

Unfamiliar with Microsoft Mechanics?

 

Keep getting this insider knowledge, join us on social:


Video Transcript:

%3CLINGO-SUB%20id%3D%22lingo-sub-3289610%22%20slang%3D%22en-US%22%3EManage%20Data%20Risks%20from%20Employee%20Insiders%20with%20Microsoft%20Purview%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3289610%22%20slang%3D%22en-US%22%3E%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3EHow%20do%20you%20manage%20insider%20risk%20with%20your%20staff%3F%20What%20are%20some%20of%20the%20employee%20actions%20that%20can%20be%20automatically%20discovered%3F%20Now%2C%20with%20more%20and%20more%20organizations%20now%20supporting%20hybrid%20work%20scenarios%20and%20managing%20employee%20turnover%2C%20insider%20risk%20of%20employee%20data%20theft%20is%20higher%20than%20ever.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screen%20Shot%202022-04-19%20at%203.27.11%20PM.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F365359i39C073497B64BAAD%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Screen%20Shot%202022-04-19%20at%203.27.11%20PM.png%22%20alt%3D%22Screen%20Shot%202022-04-19%20at%203.27.11%20PM.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3EIn%20this%20show%2C%20Talhah%20Mir%2C%20lead%20engineer%20on%20the%20insider%20risk%20solutions%20team%20at%20Microsoft%2C%20joins%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Ftwitter.com%2Fdeployjeremy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20nofollow%20noreferrer%22%3EJeremy%20Chapman%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3Eto%20walk%20through%20the%20latest%20privacy-enabled%20insider%20risk%20management%20solutions%2C%20now%20part%20of%20Microsoft%20Purview.%20They%E2%80%99ll%20show%20you%20how%20these%20use%20machine%20learning%20to%20automatically%20identify%20high%20risk%20incidents%20such%20as%20data%20theft%2C%20and%20how%20it%20provides%20the%20context%20and%20workflow%20you%20need%20for%20the%20right%20stakeholders%20to%20take%20appropriate%20actions.%3C%2FP%3E%0A%3CFIGURE%20class%3D%22ki%20kj%20kk%20kl%20ge%20km%22%3E%0A%3CDIV%20class%3D%22m%20l%20dq%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%20class%3D%22m%20l%20dq%22%3E%3CDIV%20class%3D%22video-embed-center%20video-embed%22%3E%3CIFRAME%20class%3D%22embedly-embed%22%20src%3D%22https%3A%2F%2Fcdn.embedly.com%2Fwidgets%2Fmedia.html%3Fsrc%3Dhttps%253A%252F%252Fwww.youtube.com%252Fembed%252FYnkfu8OF0wQ%253Ffeature%253Doembed%26amp%3Bdisplay_name%3DYouTube%26amp%3Burl%3Dhttps%253A%252F%252Fwww.youtube.com%252Fwatch%253Fv%253DYnkfu8OF0wQ%26amp%3Bimage%3Dhttps%253A%252F%252Fi.ytimg.com%252Fvi%252FYnkfu8OF0wQ%252Fhqdefault.jpg%26amp%3Bkey%3Db0d40caa4f094c68be7c29880b16f56e%26amp%3Btype%3Dtext%252Fhtml%26amp%3Bschema%3Dyoutube%22%20width%3D%22600%22%20height%3D%22337%22%20scrolling%3D%22no%22%20title%3D%22Manage%20Data%20Risks%20from%20Employee%20Insiders%20with%20Microsoft%20Purview%22%20frameborder%3D%220%22%20allow%3D%22autoplay%3B%20fullscreen%22%20allowfullscreen%3D%22true%22%3E%3C%2FIFRAME%3E%3C%2FDIV%3E%3C%2FDIV%3E%0A%3CDIV%20class%3D%22m%20l%20dq%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%20class%3D%22m%20l%20dq%22%3E%0A%3CDIV%20class%3D%22if%20ig%20ih%20ii%20ij%22%3E%0A%3CH2%20id%3D%22c429%22%20class%3D%22kw%20kx%20im%20bn%20ky%20kz%20la%20lb%20lc%20ld%20le%20lf%20lg%20ju%20lh%20li%20lj%20jy%20lk%20ll%20lm%20kc%20ln%20lo%20lp%20lq%20gn%22%20data-selectable-paragraph%3D%22%22%20id%3D%22toc-hId-394832213%22%20id%3D%22toc-hId-416874895%22%3EQUICK%20LINKS%3A%3C%2FH2%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20lr%20jo%20jp%20jq%20ls%20js%20jt%20ju%20lt%20jw%20jx%20jy%20lu%20ka%20kb%20kc%20lv%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DYnkfu8OF0wQ%26amp%3Bt%3D0s%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20nofollow%20noreferrer%22%3E00%3A00%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%E2%80%94%20What%20Insider%20Risk%20Management%20in%20Microsoft%20Purview%3F%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DYnkfu8OF0wQ%26amp%3Bt%3D35s%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20nofollow%20noreferrer%22%3E00%3A35%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%E2%80%94%20Is%20the%20%E2%80%9CGreat%20Resignation%E2%80%9D%20impacting%20insider%20risk%3F%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DYnkfu8OF0wQ%26amp%3Bt%3D168s%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20nofollow%20noreferrer%22%3E02%3A48%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%E2%80%94%20How%20to%20manage%20insider%20risk%20of%20employee%20data%20theft%3F%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DYnkfu8OF0wQ%26amp%3Bt%3D680s%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20nofollow%20noreferrer%22%3E11%3A20%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FA%3E%E2%80%94%20How%20to%20maintain%20internal%20communication%20compliance%3F%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DYnkfu8OF0wQ%26amp%3Bt%3D813s%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20nofollow%20noreferrer%22%3E13%3A33%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%E2%80%94%20How%20to%20get%20started%20with%20Microsoft%20Purview%3C%2FP%3E%0A%3CH2%20class%3D%22kw%20kx%20im%20bn%20ky%20kz%20la%20lb%20lc%20ld%20le%20lf%20lg%20ju%20lh%20li%20lj%20jy%20lk%20ll%20lm%20kc%20ln%20lo%20lp%20lq%20gn%22%20data-selectable-paragraph%3D%22%22%20id%3D%22toc-hId--1412622250%22%20id%3D%22toc-hId--1390579568%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20id%3D%223fd4%22%20class%3D%22kw%20kx%20im%20bn%20ky%20kz%20la%20lb%20lc%20ld%20le%20lf%20lg%20ju%20lh%20li%20lj%20jy%20lk%20ll%20lm%20kc%20ln%20lo%20lp%20lq%20gn%22%20data-selectable-paragraph%3D%22%22%20id%3D%22toc-hId-1074890583%22%20id%3D%22toc-hId-1096933265%22%3ELink%20References%3A%3C%2FH2%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20lr%20jo%20jp%20jq%20ls%20js%20jt%20ju%20lt%20jw%20jx%20jy%20lu%20ka%20kb%20kc%20lv%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3ETo%20learn%20more%20insider%20risk%20management%20tools%20at%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Faka.ms%2Finsiderriskdocs%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2Finsiderriskdocs%3C%2FA%3E%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3ETry%20out%20Microsoft%20Purview%20if%20you%E2%80%99re%20using%20Microsoft%20365%20E3%20at%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Faka.ms%2FPurviewTrial%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2FPurviewTrial%3C%2FA%3E%3C%2FP%3E%0A%3CH2%20class%3D%22kw%20kx%20im%20bn%20ky%20kz%20la%20lb%20lc%20ld%20le%20lf%20lg%20ju%20lh%20li%20lj%20jy%20lk%20ll%20lm%20kc%20ln%20lo%20lp%20lq%20gn%22%20data-selectable-paragraph%3D%22%22%20id%3D%22toc-hId--732563880%22%20id%3D%22toc-hId--710521198%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20id%3D%22cab8%22%20class%3D%22kw%20kx%20im%20bn%20ky%20kz%20la%20lb%20lc%20ld%20le%20lf%20lg%20ju%20lh%20li%20lj%20jy%20lk%20ll%20lm%20kc%20ln%20lo%20lp%20lq%20gn%22%20data-selectable-paragraph%3D%22%22%20id%3D%22toc-hId-1754948953%22%20id%3D%22toc-hId-1776991635%22%3EUnfamiliar%20with%20Microsoft%20Mechanics%3F%3C%2FH2%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20lr%20jo%20jp%20jq%20ls%20js%20jt%20ju%20lt%20jw%20jx%20jy%20lu%20ka%20kb%20kc%20lv%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3EWe%20are%20Microsoft%E2%80%99s%20official%20video%20series%20for%20IT.%20You%20can%20watch%20and%20share%20valuable%20content%20and%20demos%20of%20current%20and%20upcoming%20tech%20from%20the%20people%20who%20build%20it%20at%20Microsoft.%3C%2FP%3E%0A%3CUL%20class%3D%22%22%3E%0A%3CLI%20id%3D%22c97c%22%20class%3D%22lw%20lx%20im%20jl%20b%20jm%20jn%20jq%20jr%20ju%20ly%20jy%20lz%20kc%20ma%20kg%20mb%20mc%20md%20me%20gn%22%20data-selectable-paragraph%3D%22%22%3ESubscribe%20to%20our%20YouTube%3A%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Fwww.youtube.com%2Fc%2FMicrosoftMechanicsSeries%3Fsub_confirmation%3D1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fwww.youtube.com%2Fc%2FMicrosoftMechanicsSeries%3Fsub_confirmation%3D1%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20id%3D%2260f6%22%20class%3D%22lw%20lx%20im%20jl%20b%20jm%20mf%20jq%20mg%20ju%20mh%20jy%20mi%20kc%20mj%20kg%20mb%20mc%20md%20me%20gn%22%20data-selectable-paragraph%3D%22%22%3EJoin%20us%20on%20the%20Microsoft%20Tech%20Community%3A%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-mechanics-blog%2Fbg-p%2FMicrosoftMechanicsBlog%22%20target%3D%22_blank%22%20rel%3D%22ugc%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-mechanics-blog%2Fbg-p%2FMicrosoftMechanicsBlog%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20id%3D%223ae1%22%20class%3D%22lw%20lx%20im%20jl%20b%20jm%20mf%20jq%20mg%20ju%20mh%20jy%20mi%20kc%20mj%20kg%20mb%20mc%20md%20me%20gn%22%20data-selectable-paragraph%3D%22%22%3EWatch%20or%20listen%20via%20podcast%20here%3A%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Fmicrosoftmechanics.libsyn.com%2Fwebsite%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fmicrosoftmechanics.libsyn.com%2Fwebsite%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CH2%20class%3D%22kw%20kx%20im%20bn%20ky%20kz%20la%20lb%20lc%20ld%20le%20lf%20lg%20ju%20lh%20li%20lj%20jy%20lk%20ll%20lm%20kc%20ln%20lo%20lp%20lq%20gn%22%20data-selectable-paragraph%3D%22%22%20id%3D%22toc-hId--52505510%22%20id%3D%22toc-hId--30462828%22%3E%26nbsp%3B%3C%2FH2%3E%0A%3CH2%20id%3D%222fbb%22%20class%3D%22kw%20kx%20im%20bn%20ky%20kz%20la%20lb%20lc%20ld%20le%20lf%20lg%20ju%20lh%20li%20lj%20jy%20lk%20ll%20lm%20kc%20ln%20lo%20lp%20lq%20gn%22%20data-selectable-paragraph%3D%22%22%20id%3D%22toc-hId--1859959973%22%20id%3D%22toc-hId--1837917291%22%3EKeep%20getting%20this%20insider%20knowledge%2C%20join%20us%20on%20social%3A%3C%2FH2%3E%0A%3CUL%20class%3D%22%22%3E%0A%3CLI%20id%3D%22f8d6%22%20class%3D%22lw%20lx%20im%20jl%20b%20jm%20lr%20jq%20ls%20ju%20mk%20jy%20ml%20kc%20mm%20kg%20mb%20mc%20md%20me%20gn%22%20data-selectable-paragraph%3D%22%22%3EFollow%20us%20on%20Twitter%3A%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Ftwitter.com%2FMSFTMechanics%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Ftwitter.com%2FMSFTMechanics%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%20id%3D%225c8c%22%20class%3D%22lw%20lx%20im%20jl%20b%20jm%20mf%20jq%20mg%20ju%20mh%20jy%20mi%20kc%20mj%20kg%20mb%20mc%20md%20me%20gn%22%20data-selectable-paragraph%3D%22%22%3EFollow%20us%20on%20LinkedIn%3A%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CA%20class%3D%22au%20kt%22%20href%3D%22https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fmicrosoft-mechanics%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fmicrosoft-mechanics%2F%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CHR%20%2F%3E%3C%2FDIV%3E%0A%3CDIV%20class%3D%22if%20ig%20ih%20ii%20ij%22%3E%0A%3CH2%20id%3D%22294a%22%20class%3D%22kw%20kx%20im%20bn%20ky%20kz%20la%20lb%20lc%20ld%20le%20lf%20lg%20ju%20lh%20li%20lj%20jy%20lk%20ll%20lm%20kc%20ln%20lo%20lp%20lq%20gn%22%20data-selectable-paragraph%3D%22%22%20id%3D%22toc-hId-627552860%22%20id%3D%22toc-hId-649595542%22%3EVideo%20Transcript%3A%3C%2FH2%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20lr%20jo%20jp%20jq%20ls%20js%20jt%20ju%20lt%20jw%20jx%20jy%20lu%20ka%20kb%20kc%20lv%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20Up%20next%2C%20with%20more%20and%20more%20organizations%20now%20supporting%20hybrid%20work%20scenarios%2C%20managing%20employee%20turnover%2C%20we%E2%80%99re%20going%20to%20kick%20off%20a%20new%20series%20for%20the%20latest%20privacy-enabled%20insider%20risk%20management%20solutions%20that%20are%20now%20part%20of%20Microsoft%20Purview.%20And%20we%E2%80%99re%20going%20to%20show%20you%20how%20these%20use%20machine%20learning%20to%20automatically%20identify%20high-risk%20incidents%20such%20as%20data%20theft%2C%20and%20how%20they%20importantly%20provide%20the%20context%20and%20workflow%20you%20need%20for%20the%20right%20stakeholders%20to%20take%20appropriate%20measures.%20So%20I%E2%80%99m%20joined%20today%20by%20Talhah%20Mir%20from%20the%20Microsoft%20Purview%20engineering%20team.%20Welcome%20to%20Mechanics.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20Thanks%20Jeremy.%20Great%20to%20be%20here.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20And%20it%E2%80%99s%20great%20to%20have%20you%20on%20to%20kick%20off%20our%20series.%20You%20know%2C%20I%20mentioned%20that%20there%20are%20two%20major%20trends%20that%20we%E2%80%99ve%20seen%20over%20the%20past%20two%20years%20with%20the%20move%20towards%20hybrid%20work%20and%20what%E2%80%99s%20been%20called%20the%20great%20resignation.%20You%20know%2C%20for%20example%2C%20Microsoft%E2%80%99s%20latest%20Work%20Trends%20Index%20report%20shows%20that%2043%25%20of%20employees%20overall%20and%2052%25%20of%20Gen%20Z%20are%20looking%20to%20change%20employers%20over%20the%20next%20year.%20So%20what%20impact%20does%20this%20have%20then%20on%20information%20protection%3F%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20So%20these%20trends%20really%20highlight%20the%20need%20for%20more%20internal%20focus%20as%20you%20think%20about%20protecting%20your%20information.%20We%E2%80%99re%20used%20to%20thinking%20about%20data%20exposure%20caused%20by%20external%20threats%20from%20cyber%20attacks%20or%20insider%20threats%20from%20rogue%20admins%2C%20but%20less%20so%20about%20insider%20risks%20introduced%20by%20everyday%20employees.%20And%20this%20is%20an%20expanding%20problem%20that%20most%20organizations%20are%20worried%20about.%20Just%20to%20give%20you%20an%20idea%2C%20in%20a%20survey%20we%20conducted%20with%20Carnegie%20Mellon%E2%80%99s%20Security%20and%20Privacy%20Institute%2C%20we%20found%20that%20almost%202%2F3%20of%20the%20organizations%20have%20experienced%20over%20five%20malicious%20insider%20threat%20incidents%20over%20the%20past%20year.%20At%20the%20same%20time%2C%20around%2060%25%20had%20experienced%20over%2010%20inadvertent%20data%20issue%20incidents%20by%20employees.%20And%20it%20goes%20without%20saying%20that%20your%20data%20exposure%20risk%20will%20increase%20the%20more%20departing%20employees%20you%20have%20and%20the%20more%20people%20joining%20your%20organization%20that%20might%20not%20be%20familiar%20with%20the%20security%20and%20compliance%20requirements%20as%20they%20work%20with%20data%20and%20communicate.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20And%20just%20to%20be%20clear%2C%20when%20we%20say%20malicious%20insider%20threats%2C%20we%E2%80%99re%20mainly%20talking%20about%20people%20deliberately%20walking%20away%20with%20company%20data%2C%20which%20can%20cost%20organizations%20sometimes%20millions%20of%20dollars%20per%20incident.%20Now%2C%20you%20also%20touched%20earlier%20on%20another%20factor%2C%20which%20really%20expands%20on%20how%20we%20traditionally%20think%20about%20insider%20risk%2C%20which%20is%20employee%20communications.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20That%E2%80%99s%20right%2C%20so%20it%E2%80%99s%20true%20when%20you%20look%20at%20things%20like%20burnout%2C%20which%20is%20an%20underlying%20reason%20why%20somebody%20leaves%20an%20organization%2C%20what%20you%20find%20is%20that%20there%E2%80%99s%20a%20direct%20correlation%20to%20somebody%20venting%20in%20a%20communication%20platform%2C%20which%20then%2C%20in%20turn%2C%20leads%20to%20things%20like%20an%20unhealthy%20or%20toxic%20workplace%2C%20or%20worse%2C%20can%20lead%20to%20workplace%20harassment.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20And%20these%20topical%20examples%20of%20potential%20data%20theft%2C%20leakage%2C%20and%20also%20risky%20communications%20are%20some%20of%20the%20most%20prevalent%20insider%20risk%20scenarios%20we%20see%20today.%20You%20know%2C%20insider%20risk%2C%20though%2C%20can%20also%20span%20a%20broader%20spectrum%20of%20things%2C%20including%20inappropriate%20behavior%2C%20insider%20trading%2C%20and%20much%20more.%20So%20how%20do%20you%20even%20begin%20to%20address%20this%20area%20and%20really%20maintain%20that%20level%20of%20individual%20privacy%20required%3F%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20Well%2C%20it%E2%80%99s%20not%20a%20trivial%20effort.%20Think%20about%20the%20number%20of%20people%20and%20teams%20accessing%20resources%20from%20anywhere%20in%20a%20hybrid%20work%20scenario%20and%20the%20volume%20of%20people%20that%20may%20be%20cycling%20in%20and%20out%20of%20an%20organization.%20Insider%20risk%20management%20should%20really%20be%20part%20of%20a%20zero-trust%20approach%20for%20the%20protection%20of%20your%20data%20and%20communications%2C%20where%20the%20main%20goal%20is%20to%20assume%20breach%20and%20always%20verify.%20When%20you%20look%20at%20data%20exposure%2C%20most%20people%20will%20be%20aware%20of%20data%20loss%20prevention%2C%20or%20DLP%2C%20that%20protects%20users%20from%20data%20leakage%20risks%20through%20policy%20tips%20and%20automates%20specific%20policy-based%20transactions%20like%20blocking%20the%20copying%20of%20sensitive%20information.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20And%20we%E2%80%99ve%20had%20data%20loss%20prevention%20for%20some%20time%20now.%20In%20fact%2C%20we%E2%80%99ve%20covered%20it%20a%20lot%20on%20Microsoft%20Mechanics%2C%20and%20it%E2%80%99s%20really%20something%20everyone%20watching%20should%20be%20taking%20advantage%20of.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20It%E2%80%99s%20a%20super%20important%20part%20of%20your%20content-focused%20defense-in-depth%20strategy.%20But%20here%E2%80%99s%20the%20thing%2C%20data%20doesn%E2%80%99t%20move%20itself.%20People%20move%20data.%20And%20this%20is%20an%20important%20distinction%20to%20our%20approach%20as%20it%E2%80%99s%20not%20just%20about%20detecting%20that%20something%20bad%20has%20happened%2C%20but%20also%20establishing%20context.%20For%20that%2C%20we%20have%20two%20main%20solutions%3A%20insider%20risk%20management%2C%20which%20helps%20you%20to%20identify%20and%20act%20on%20malicious%20or%20inadvertent%20user%20activities%2C%20and%20communication%20compliance%20for%20the%20detection%20of%20code%20of%20conduct%20violations%20or%20risky%20communications.%20Both%20are%20part%20of%20the%20Microsoft%20Purview%20family%20of%20solutions%20to%20help%20you%20govern%2C%20protect%2C%20and%20manage%20your%20data%20estate.%20Now%2C%20you%20asked%20earlier%20how%20we%20maintain%20individual%20privacy.%20Let%E2%80%99s%20take%20the%20example%20of%20insider%20risk%20management.%20We%20use%20machine%20learning%20to%20establish%20a%20privacy-first%20approach%20across%20both%20Microsoft%20and%20non-Microsoft%20services%20in%20aggregate%20and%20at%20scale%20that%20parses%20through%20anonymized%20user%20activity.%20This%20reasons%20over%20activity%20signals%20to%20aggregate%20and%20sequence%20anomalous%20behavior%20patterns%20that%20accrue%20to%20risk%2C%20connecting%20the%20dots%20back%20to%20a%20pivotal%20event%20like%20a%20resignation%20recorded%20in%20your%20HR%20systems.%20Importantly%2C%20we%20provide%20a%20secure%20and%20compliant%20workflow%20that%20allows%20organizations%20to%20bring%20together%20the%20right%20teams%20with%20the%20right%20permissions%20from%20SecOps%2C%20human%20resources%2C%20and%20legal%2C%20as%20necessary%20to%20take%20actions.%20All%20actions%20taken%20are%20fully%20auditable%2C%20and%20we%20give%20you%20full%20control%20to%20establish%20what%20risk%20means%20for%20your%20organization%20and%20the%20types%20of%20activities%20that%E2%80%99s%20important%20to%20flag.%20It%E2%80%99s%20this%20level%20of%20visibility%20and%20context%20that%20helps%20you%20to%20establish%20a%20zero-trust%20stance%2C%20and%20you%20don%E2%80%99t%20have%20to%20run%20any%20agents%20locally%20on%20the%20user%E2%80%99s%20machine.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20It%E2%80%99s%20super%20powerful%2C%20but%20you%20know%2C%20I%E2%80%99d%20love%20to%20see%20this%20in%20action%20and%20really%20walk%20through%20an%20example.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20Sure%2C%20so%20most%20organizations%20would%20probably%20want%20to%20start%20by%20understanding%20and%20quantifying%20the%20level%20of%20insider%20risk%20that%20they%20have%20in%20their%20organization.%20For%20that%2C%20I%E2%80%99ll%20start%20with%20insider%20risk%20management%2C%20which%20you%20can%20get%20to%20from%20the%20Microsoft%20Purview%20portal.%20And%20under%20analytics%2C%20you%E2%80%99ll%20see%20we%20give%20you%20an%20aggregate%20view%20of%20anonymized%20user%20activities%20to%20help%20you%20quantify%20the%20level%20of%20risk%20inside%20of%20your%20organization%20and%20see%20data%20exfiltration%20patterns%20which%20can%20in%20turn%20help%20you%20decide%20and%20prioritize%20on%20the%20types%20of%20policies%20you%20want%20to%20put%20in%20place.%20We%20can%20see%20the%20percentage%20of%20data%20exfiltration%20activities%20by%20users.%20And%20if%20I%20scroll%20down%2C%20you%20can%20also%20see%20top%20exfiltration%20activities%20in%20play%20by%20users%2C%20from%20files%20copied%20to%20USB%2C%20emails%20being%20sent%20outside%20of%20the%20organization%2C%20and%20more.%20I%20can%20also%20dig%20into%20the%20next%20level%20of%20detail%2C%20such%20as%20here%20with%20potential%20data%20leak%20activities.%20Notice%20that%20the%20percentage%20of%20risky%20activity%20is%20low%20in%20this%20case%2C%20and%20that%E2%80%99s%20because%20typically%20there%E2%80%99s%20a%20small%20percentage%20of%20people%20that%20are%20doing%20something%20they%20shouldn%E2%80%99t.%20That%20said%2C%20what%20analytics%20does%20is%20to%20help%20you%20assess%20the%20risk%20profile%20of%20your%20entire%20user%20base%20and%20quickly%20see%20where%20you%20may%20have%20issues%20so%20that%20you%20can%20get%20to%20managing%20those%20risks%20as%20soon%20as%20possible.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20Right%2C%20and%20without%20this%2C%20it%20can%20take%20months%20to%20be%20able%20to%20assemble%20all%20that%20information%20and%20really%20contain%20those%20risks.%20And%20compared%20to%20traditional%20user%20entity%20behavioral%20analytics%20solutions%2C%20this%20isn%E2%80%99t%20resource%20intensive%2C%20and%20you%20aren%E2%80%99t%20having%20to%20capture%2C%20then%20anonymize%2C%20then%20stitch%20together%20all%20the%20user%20activities%20and%20have%20to%20make%20sense%20of%20them%20yourself.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20That%E2%80%99s%20right.%20It%E2%80%99s%20all%20done%20for%20you.%20You%20can%20get%20started%20with%20literally%20one%20click%20and%20you%E2%80%99ll%20see%20reports%20like%20this%20for%20your%20organization%20within%2048%20hours%2C%20and%20those%20reports%20are%20refreshed%20daily.%20Now%20I%E2%80%99m%20going%20to%20take%20you%20to%20a%20summary%20view%20of%20your%20insider%20risk%20management%20dashboard.%20Here%20you%20can%20see%20the%20alerts%20needing%20review%20and%20the%20active%20cases.%20At%20the%20top%2C%20there%20are%20tabs%20for%20Alerts%2C%20Cases%2C%20Policies%2C%20Users%2C%20and%20Notice%20templates.%20I%E2%80%99ll%20click%20into%20Alerts%20and%20here%E2%80%99s%20where%20I%20get%20an%20aggregate%20view%20of%20alerts%20and%20the%20severity%20of%20the%20alert.%20Again%2C%20notice%20the%20display%20names%20of%20users%20are%20anonymized%20by%20default%2C%20not%20just%20to%20protect%20privacy%2C%20but%20also%20to%20prevent%20conflicts%20of%20interest%20or%20bias%2C%20which%20can%20arise%20if%20you%20see%20an%20alert%20for%20a%20friend%20or%20a%20colleague.%20If%20I%20click%20into%20one%20of%20these%20alerts%2C%20I%20can%20see%20the%20activities.%20On%20this%20view%2C%20I%20can%20clearly%20see%20the%20event%20that%20caused%20this%20user%20to%20come%20in%20scope%20for%20a%20policy.%20In%20this%20case%2C%20the%20user%20submitted%20their%20resignation.%20I%20can%20also%20clearly%20see%20the%20activity%20that%20generated%20this%20alert.%20In%20this%20case%2C%20it%20was%20the%20downloading%20of%20content%20from%20a%20website%20marked%20as%20unallowed.%20If%20I%20look%20down%20further%2C%20this%20is%20where%20I%20can%20see%20the%20aggregate%20detector%2C%20which%20is%20an%20assessment%20in%20aggregate%20of%20the%20level%20of%20risk%20under%20the%20cumulative%20exfiltration%20activities%20card.%20This%20exposes%20activities%20over%20time%20that%20accumulate%20risk%2C%20and%20here%20our%20risk%20score%20is%2082%2F100.%20And%20this%20is%20important%20because%20most%20insider%20risk%20solutions%20only%20catch%20what%20I%20call%20the%20convenience%20store%20grab-and-go%20thief.%20That%E2%80%99s%20the%20person%20that%20comes%20in%2C%20grabs%20everything%20off%20the%20shelf%2C%20and%20tries%20to%20run%20out%20the%20door.%20They%20make%20enough%20noise%20in%20the%20process%20that%E2%80%99s%20relatively%20easy%20to%20detect.%20What%E2%80%99s%20harder%20to%20detect%20is%20what%20we%20call%20the%20low-and-slow%20thief.%20It%E2%80%99s%20their%20gradual%20set%20of%20actions%20where%20one%20file%20may%20be%20copied%20to%20USB%2C%20another%20printed%2C%20and%20another%20uploaded%20to%20cloud%20storage%2C%20and%20all%20that%20across%20many%20days.%20On%20their%20own%2C%20these%20activities%20may%20not%20raise%20an%20alert.%20But%20our%20aggregate%20detectors%20can%20assess%20the%20risks%20across%20time%20and%20exfiltration%20dimensions%20and%20present%20this%20aggregate%20risk%20so%20you%20can%20decide%20whether%20to%20investigate%20further.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20And%20importantly%2C%20it%E2%80%99s%20kind%20of%20filtering%20out%20all%20the%20unnecessary%20noise%20and%20not%20doing%20false%20flags%2C%20and%20that%20way%20you%20can%20kind%20of%20see%20what%20truly%20needs%20your%20attention.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20That%E2%80%99s%20the%20most%20important%20part.%20Insider%20risk%20management%20is%20all%20about%20accelerating%20time%20to%20action%2C%20presenting%20the%20right%20information%20in%20the%20right%20context%20so%20you%20can%20make%20an%20effective%20decision.%20Now%2C%20if%20I%20want%20to%2C%20I%20can%20convert%20this%20alert%20to%20a%20case%2C%20which%20essentially%20moves%20it%20into%20an%20active%20investigation.%20But%20to%20save%20time%2C%20I%E2%80%99ll%20show%20you%20what%20happens%20next%20with%20another%20case%20already%20in%20progress%20from%20the%20Cases%20tab.%20I%E2%80%99ll%20open%20this%20case%20and%20jump%20into%20the%20user%20activity%20view%20and%20on%20the%20left%20is%20the%20detailed%20list%20of%20activities%20over%20the%20last%20three%20months%20with%20their%20associated%20risk%20scores.%20I%20can%20also%20click%20into%20the%20visual%20to%20see%20the%20details%20for%20each%20activity%20and%20I%E2%80%99ll%20show%20you%20the%20sequence%20on%20the%20right%20that%20was%20identified%20with%20this%20user%20right%20before%20they%20submitted%20their%20resignation.%20Here%2C%20we%20see%20they%20downloaded%2045%20files%2C%20renamed%20several%20of%20them%2C%20printed%20them%2C%20and%20then%20deleted%20those%20files%20as%20if%20to%20cover%20their%20tracks.%20Each%20of%20these%20activities%2C%20again%2C%20might%20not%20be%20concerning%20if%20we%20saw%20them%20happening%20independently.%20But%20with%20the%20sequence%20detection%2C%20we%20have%20the%20full%20context%20on%20what%20was%20happening.%20Seeing%20that%20this%20user%20renamed%20files%2C%20exfiltrated%20them%2C%20and%20then%20deleted%20them%20right%20before%20submitting%20their%20resignation%20shows%20intent.%20Importantly%2C%20we%20have%20the%20processes%20and%20workflows%20built%20in.%20If%20I%20go%20over%20to%20Case%20notes%2C%20looks%20like%20the%20HR%20team%20has%20already%20evaluated%20this.%20I%E2%80%99m%20not%20even%20going%20to%20bother%20adding%20any%20notes%2C%20but%20instead%20jump%20right%20into%20action.%20This%20is%20a%20case%20I%20want%20escalated%20to%20my%20legal%20team%20to%20investigate%20immediately.%20I%20do%20that%20by%20going%20to%20Case%20actions%20and%20clicking%20on%20Escalate%20for%20investigation%2C%20which%20will%20collate%20all%20the%20evidence%20collected%20and%20open%20a%20case%20in%20the%20eDiscovery%20solution%20so%20the%20legal%20team%20can%20start%20to%20preserve%20the%20evidence%20to%20prepare%20for%20law%20enforcement%20escalation%20or%20litigation.%20This%20is%20important%20because%20the%20hardest%20part%20about%20eDiscovery%20is%20the%20discovery%20bit.%20So%20the%20end-to-end%20nature%20of%20this%20solution%20takes%20that%20into%20account%20and%20helps%20you%20start%20with%20all%20the%20necessary%20evidence.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20And%20I%20really%20like%20how%20this%20is%20bringing%20together%20the%20entire%20stakeholder%20team%2C%20you%20know%2C%20but%20how%20do%20permissions%20work%20with%20something%20like%20this%3F%20This%20is%20probably%20not%20right%20for%2C%20for%20example%2C%20the%20admin%20team%20to%20be%20able%20to%20see%20all%20the%20details%2C%20maybe%20the%20files%20as%20well.%20So%20how%20does%20that%20work%3F%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20You%E2%80%99re%20right%2C%20so%20the%20use%20is%20governed%20by%20role-based%20access%20control.%20You%20can%20segment%20out%20users%20and%20their%20level%20of%20access%20so%20that%2C%20for%20example%2C%20if%20you%E2%80%99re%20an%20investigator%2C%20you%20can%20see%20all%20of%20the%20activities%20as%20well%20as%20explore%20the%20actual%20content%20of%20the%20files.%20This%20role%20is%20typically%20reserved%20for%20somebody%20in%20the%20legal%20team%20of%20a%20given%20organization%2C%20but%20the%20analyst%20cannot%20explore%20the%20underlying%20content.%20They%20can%20just%20see%20the%20user%20activity%20as%20well%20as%20all%20the%20aggregate%20and%20sequence%20detection%20insights%20that%20the%20system%20generated.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20So%20that%E2%80%99s%20insider%20risk%20management%2C%20but%20you%20also%20mentioned%20the%20importance%20of%20communication.%20So%20can%20we%20switch%20gears%20to%20communication%20compliance%3F%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20Sure%2C%20so%20the%20chances%20are%20you%20might%20be%20quite%20disgruntled%20as%20you%20resign.%20Here%20in%20communication%20compliance%2C%20you%20get%20a%20similar%20view%20of%20communication%20risks%20inside%20your%20organization%20that%20you%20can%20investigate%20further.%20Similar%20to%20analytics%20and%20insider%20risk%2C%20we%E2%80%99ve%20built%20an%20aggregate%20assessment%20of%20potential%20violations.%20Here%2C%20we%20can%20see%20instances%20of%20targeted%20harassment%20and%20threat%2C%20as%20well%20as%20instances%20of%20sensitive%20information%20being%20shared.%20Using%20built-in%20policy%20templates%2C%20you%20can%20quickly%20create%20policies%20in%20just%20a%20few%20clicks%20to%20start%20detecting%20these%20risks.%20Let%E2%80%99s%20look%20at%20a%20case%20that%20shows%20early%20indications%20of%20employee%20disgruntlement%20here%20with%20this%20Inappropriate%20Text%20policy.%20In%20this%20case%2C%20I%E2%80%99m%20logged%20in%20as%20an%20investigator%20so%20I%20can%20see%20usernames%2C%20but%20if%20I%20were%20an%20analyst%2C%20that%20role%20would%20have%20pseudonymization%20on%20by%20default%20to%20protect%20identities%20and%20privacy.%20I%E2%80%99ll%20look%20at%20the%20pending%20items%20and%20you%20can%20see%20the%20two%20matches%20for%20Diego.%20This%20one%20is%20in%20a%20language%20I%20don%E2%80%99t%20understand%2C%20but%20luckily%20we%E2%80%99ve%20got%20built-in%20translation%20to%20automatically%20translate%20the%20message.%20In%20this%20case%2C%20French%20text%20has%20been%20translated%20into%20English.%20That%E2%80%99s%20a%20troubling%20message.%20And%20below%20that%20match%2C%20it%20looks%20like%20an%20image%20was%20also%20shared.%20Using%20built-in%20optical%20character%20recognition%20or%20OCR%2C%20we%20can%20pick%20up%20violations%20that%20occur%20in%20text%20or%20handwritten%20notes%20contained%20in%20images%2C%20PDFs%2C%20and%20more.%20And%20if%20I%20go%20back%20to%20the%20first%20match%20and%20look%20at%20the%20Conversation%20tab%2C%20I%20can%20get%20even%20more%20context%20around%20what%E2%80%99s%20happening.%20Clearly%20this%20employee%20is%20showing%20signs%20of%20disgruntlement%20and%20might%20be%20a%20flight%20risk%2C%20which%2C%20as%20you%20saw%20earlier%2C%20may%20have%20other%20ramifications%20for%20your%20data%20risk.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20Right%2C%20and%20the%20impact%20of%20this%20can%20go%20beyond%20that%20disgruntled%20employee.%20You%20know%2C%20it%20can%20also%20hurt%20the%20morale%20of%20everyone%20they%E2%80%99re%20working%20with%2C%20everyone%20around%20them.%20In%20our%20recent%20Workplace%20Health%20Index%20report%2C%20we%20saw%20that%2046%25%20of%20people%20link%20positive%20workplace%20culture%20as%20a%20key%20to%20staying%20in%20their%20current%20job.%20You%20know%2C%20it%20ranks%20even%20higher%20than%20benefits%20or%20time%20off%20or%20flexible%20work%20hours.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20Right%2C%20this%20could%20play%20a%20key%20part%20in%20your%20overall%20strategy%20to%20maintain%20a%20healthy%20work%20environment.%20And%20really%2C%20this%20is%20just%20the%20tip%20of%20the%20iceberg%20for%20what%20communication%20compliance%20can%20detect%2C%20which%20is%20something%20we%E2%80%99ll%20explore%20in%20another%20episode.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20So%20between%20the%20two%20solutions%20that%20you%20showed%20today%2C%20you%20can%20really%20take%20a%20broad%20and%20holistic%20approach%20to%20insider%20risk%20management.%20And%20if%20you%E2%80%99re%20wondering%20how%20to%20configure%20these%20solutions%20and%20the%20underlying%20workflows%20and%20policies%20for%20your%20organization%2C%20we%E2%80%99re%20going%20to%20go%20hands-on%20with%20the%20implementation%20in%20upcoming%20episodes%20on%20our%20playlist%20that%20you%20can%20find%20at%20aka.ms%2FInsiderRiskMechanics.%20So%20for%20anyone%20who%E2%80%99s%20watching%20right%20now%2C%20what%20do%20you%20recommend%20they%20do%20to%20get%20started%3F%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20Well%2C%20both%20of%20these%20solutions%20are%20available%20today%20and%20you%20can%20learn%20more%20by%20going%20to%20aka.ms%2Finsiderriskdocs.%20Also%2C%20if%20you%E2%80%99re%20using%20Microsoft%20365%20E3%2C%20you%20can%20sign%20up%20for%20a%20trial%20at%20aka.ms%2FPurviewTrial%20to%20get%20started.%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22pw-post-body-paragraph%20jj%20jk%20im%20jl%20b%20jm%20jn%20jo%20jp%20jq%20jr%20js%20jt%20ju%20jv%20jw%20jx%20jy%20jz%20ka%20kb%20kc%20kd%20ke%20kf%20kg%20if%20gn%22%20data-selectable-paragraph%3D%22%22%3E-%20Thanks%20so%20much%2C%20Talhlah%2C%20for%20the%20overview%20on%20how%20we%20can%20help%20solve%20for%20insider%20risk%20management.%20Of%20course%2C%20keep%20watching%20Microsoft%20Mechanics%20for%20more%20in%20the%20series%20and%20subscribe%20if%20you%20haven%E2%80%99t%20already.%20And%20as%20always%2C%20thank%20you%20so%20much%20for%20watching.%3C%2FP%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FFIGURE%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-3289610%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EWalk%20through%20the%20latest%20privacy-enabled%20insider%20risk%20management%20solutions%2C%20now%20part%20of%20Microsoft%20Purview.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3289610%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Purview%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Version history
Last update:
‎Apr 19 2022 12:58 PM
Updated by: