Microsoft Purview: Insider Risk Management- Data Security Triage Agent in IRM Enhancements

The Data Security Triage Agent in Insider Risk Management is deploying enhancements such as improved user risk and activity explorer pattern summaries to support improved investigation accuracy, context, and decision quality. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Affected: Microsoft Purview

Related changes

• Microsoft Purview: Data Security Triage Agent in Data Loss Prevention - Reasoning Trace and Confidence Score for agent-triaged alerts · Data
• Microsoft Purview: Data Loss Prevention - Data Security Triage Agent summaries and categorizations for DLP alerts will be made available in DLP Alerts in Microsoft Defender XDR · Data
• Microsoft Purview: Data Security Posture Management-Data Security Posture Agent in DSPM · Management
• Microsoft Purview: Insider Risk Management – Policy Recommendation Panel in IRM · Insider
• Microsoft Purview: Data Lifecycle Management – Retention for Copilot Memory · Management
• Microsoft Purview: Data Lifecycle Management – Hard delete capability for OneDrive and SharePoint through secure priority cleanup workflows · Management

View at Microsoft → Copy summary