From the course: Microsoft Information Security Administrator Associate (SC-401) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Create and manage Insider Risk Management policies

Create and manage Insider Risk Management policies - Microsoft 365 Tutorial

From the course: Microsoft Information Security Administrator Associate (SC-401) Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Create and manage Insider Risk Management policies

“

When creating a new insider risk management policy, the first decision you make in the wizard is which policy template to base it on. Microsoft provides several templates for common insider risk scenarios so that you don't have to start from scratch. Selecting the appropriate template gives you a sensible baseline of indicators, thresholds, and wording tailored to that scenario. So let's have a look at some of these templates. Rather than look at slides, let's go into the portal and take a peek. So here I'm going to create a policy and create a custom policy. Now it's going to ask me to choose a policy template. So you can see there are several categories here. We have date of theft, and this focuses date of theft by departing users. So this is focusing on employees who are in the process of leaving. So it ties in with the HR connector, as you can see here, and it will include a condition like, user has termination date or resignation submitted, and it will look for accelerated file…

Contents