Trace Id is missing
Skip to main content
Microsoft Security

Microsoft Purview Insider Risk Management

Quickly identify and take action on insider risks with an integrated end-to-end approach.

A person using a large touchscreen desktop monitor.

Go Beyond Data Protection with Microsoft Purview

Discover new capabilities that will transform how you secure your organization's data across clouds, devices, and platforms.

Take action on insider risks

Intelligently identify, investigate, and take quick action on insider risks.

Built-in privacy

Manage data risks with pseudonymization and strong controls.

Rich insights

Identify hidden risks with customizable machine learning templates requiring no endpoint agents.

Collaborate on investigations

Work with teams across security, human resources, and legal departments with integrated investigation workflows.

Learn more about Insider Risk Management

Discover how to get started and identify potential risks across a broad range of user activities with this guided video.

Addressing insider risks is a challenge


of organizations are concerned about insider risks1.


of all data breaches are due to insider activity2.

77 days

average time to contain an insider incident3.

Key features of Microsoft Purview Insider Risk Management

Potential data leak activities in Microsoft 365 compliance.


Conduct an evaluation of potential insider risks in your organization without configuring any insider risk policies.

Policy template creation in Microsoft 365 compliance.

Machine learning playbooks

Quickly create a policy with customizable machine learning templates that require no scripting or endpoint agents to deploy.

An Insider risk management overview in Microsoft 365 compliance.

Guided experience

Get step-by-step guidance when you onboard to Insider Risk Management.

Suspicious access alerts being displayed in Microsoft 365 compliance.

Healthcare playbook

Identify patient data misuse risks with built-in indicators and detectors that use data from electronic medical record systems.

A confidentiality obligation alert in Microsoft 365 compliance.

Contextual alert review

Easily understand the context of an alert to help focus your investigation on the riskiest activities.

Updates in a potential IP theft case in Microsoft 365 compliance.

Case management

Deeply investigate and act on issues generated by risk indicators defined in your policies.

Back to tabs

Enable Adaptive Protection with Microsoft Purview

Optimize data protection automatically.

See what our customers are saying

Microsoft 365 E5 Compliance

Originally starting from €11.20 now starting from €11.20

€11.20 €11.20


(Annual subscription—auto renews)1

Additional resources


Accelerate time to action

Read the blog for the latest news and updates about Insider Risk Management.


Get started

Explore detailed information to help you get started with Insider Risk Management.


Interactive guide

Quickly become familiar with Insider Risk Management capabilities.


Video series

Learn how Insider Risk Management can help you quickly identify and take action on potential insider risks.

Protect everything

Make your future more secure. Explore your security options today. 

  • [1] 93% of organizations are concerned about insider risks (Insider Risk Management, Microsoft Market Research, January 2021)
  • [2] 25% of all data breaches are due to insider activity (Communication Compliance, Microsoft Market Research, May 2021)
  • [3] 77 days average time to contain an insider incident (2020 Cost of Insider Threats: Global Report, The Poneman Institute.)

Follow Microsoft