Guidance for establishing a Microsoft Purview Insider Risk Management (IRM) baseline - detecting and managing risky insider activity (data theft, leaks, policy violations) with privacy-by-design. Covers prerequisites, HR connector, policy templates, indicators, pseudonymisation, triage workflow, and Adaptive Protection integration. WHEN: Insider Risk Management, IRM, detect data theft by departing employee, insider threat, risky user activity, IRM policy templates, pseudonymization, Adaptive Protection, insider risk indicators, HR connector, departing user, separation of duties.
$npx -y skills add vinayaklatthe/microsoft-security-skills --skill insider-risk-baselineInstalls into the current project.
Run `npx skills use "https://github.com/vinayaklatthe/microsoft-security-skills" --skill "vinayaklatthe/microsoft-security-skills/insider-risk-baseline"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/vinayaklatthe/microsoft-security-skills" that are relevant to the current task. Run `npx skills add "https://github.com/vinayaklatthe/microsoft-security-skills"` and select the relevant skills, then follow their instructions.