Trace Id is missing
Skip to main content
Microsoft Security

Microsoft Purview Insider Risk Management

Quickly identify and take action on insider risks with an integrated end-to-end approach.

A person using a large touchscreen desktop monitor.

Go Beyond Data Protection with Microsoft Purview

Discover new capabilities that help you secure your organization's data across clouds, devices, and platforms.

Take action on insider risks

Quickly identify, investigate, and remediate insider risks.

Built-in privacy

Manage data risks with pseudonymization and strong controls.

Rich insights

Identify hidden risks with customizable machine learning templates requiring no endpoint agents.

Collaborate on investigations

Work with teams across security, human resources, and legal departments with integrated investigation workflows.

Learn more about Insider Risk Management

Discover how to get started and identify potential risks across a broad range of user activities with this guided video.

Addressing insider risks is a challenge


of organizations are concerned about insider risks1.


of all data breaches are due to insider activity2.

77 days

average time to contain an insider incident3.

Key features of Microsoft Purview Insider Risk Management

Potential data leak activities in Microsoft 365 compliance.


Conduct an evaluation of potential insider risks in your organization without configuring any insider risk policies.

Policy template creation in Microsoft 365 compliance.

Machine learning playbooks

Quickly create a policy with customizable templates that require no scripting or endpoint agents to deploy.

An Insider risk management overview in Microsoft 365 compliance.

Guided experience

Get step-by-step guidance when you onboard to Insider Risk Management.

Suspicious access alerts being displayed in Microsoft 365 compliance.

Healthcare playbook

Identify patient data misuse risks with built-in indicators and detectors that use data from electronic medical record systems.

A confidentiality obligation alert in Microsoft 365 compliance.

Contextual alert review

Easily understand the context of an alert to help focus your investigation on the riskiest activities.

Updates in a potential IP theft case in Microsoft 365 compliance.

Case management

Thoroughly investigate and resolve issues generated by risk indicators defined in your policies.

Back to tabs

Enable Adaptive Protection with Microsoft Purview

Optimize data protection automatically.

An infographic about adaptive protection with Microsoft Purview

Explore data security resources and trends

Gain insights into the latest data security advancements, including expert guidance, best practices, trends, and solutions.

A woman sitting on a chair and working on her laptop

See what our customers are saying

Microsoft 365 E5 Compliance

Originally starting from $12.00 now starting from $12.00

$12.00 $12.00


(annual subscription, auto-renews)


Microsoft Purview Insider Risk Management is a part of the Microsoft 365 E5 Compliance Suite

Microsoft offers comprehensive compliance and data governance solutions to help your organization manage risks, protect and govern sensitive data, and respond to regulatory requirements.

* Customers currently licensed with Enterprise Mobility Security + Office E3, Microsoft 365 E3, or a version of these suites that does not include Microsoft Teams, are eligible to purchase or try E5 Compliance. You must be a global, compliance, or billing admin to initiate this trial.

Additional resources


Accelerate time to action

Read the blog for the latest news and updates about Insider Risk Management.


Get started

Explore detailed information to help you get started with Insider Risk Management.


Interactive guide

Quickly become familiar with Insider Risk Management capabilities.


Address the biggest challenges in data security

Learn four strategies to overcome common problems that organizations face as work models change and data security becomes more complex.

Protect everything

Make your future more secure. Explore your security options today. 

  • [1] 93% of organizations are concerned about insider risks (Insider Risk Management, Microsoft Market Research, January 2021)
  • [2] 25% of all data breaches are due to insider activity (Communication Compliance, Microsoft Market Research, May 2021)
  • [3] 77 days average time to contain an insider incident (2020 Cost of Insider Threats: Global Report, The Poneman Institute.)

Follow Microsoft