Guidance for establishing a Microsoft Purview Insider Risk Management baseline — detecting and managing risky insider activity (data theft, leaks, policy violations) with privacy-by-design. Covers policy templates, indicators, triage, and Adaptive Protection integration. WHEN: Insider Risk Management, IRM, detect data theft by departing employee, insider threat, risky user activity, IRM policy templates, pseudonymization, Adaptive Protection, insider risk indicators.
