Before you turn it on: privacy

Pseudonymized isn't anonymized.

Level 100 · Security and privacy leads

Microsoft 365 already logs what people do, and Insider Risk Management goes further: it scores each user automatically. Both layers need a legal basis and the risk assessments your national law requires, in the EU and EEA a DPIA under GDPR. We look at the pseudonymization setting, why it's easy to work out who is behind a pseudonym, and what Eli actually notices.

Step through More in Insider Risk Management

These videos have no narration — the sound is background music and interface clicks. Step through presents the same content as text.