Logging and monitoring for the DPO Microsoft Purview for data protection officers. Logging and monitoring as input to your risk assessment: what Audit logs, how long and who can search, how Insider Risk Management connects events into patterns with pseudonymization and opt-in indicators, what to assess before turning it on, and how Data Security Investigations finds the personal data exposed in a breach. W PRIVACY WITH MICROSOFT PURVIEW Logging and monitoring for the DPO Ada Admin Dana DPO Eli Employee INPUT TO YOUR RISK ASSESSMENT Three questions about activity AUDIT · 1 OF 2 What is logged? AUDIT · 2 OF 2 How long, and who can search? INSIDER RISK MANAGEMENT · 1 OF 3 When do events become a pattern? INSIDER RISK MANAGEMENT · 2 OF 3 Monitoring without watching everyone INSIDER RISK MANAGEMENT · 3 OF 3 What to assess before you turn it on DATA SECURITY INVESTIGATIONS What personal data was exposed? SUMMARY Each tool reduces a risk, and creates one Good to know 1/7 PRIVACY WITH MICROSOFT PURVIEW Logging and monitoring for the DPO Logs protect personal data, and they are personal data. We show what Audit logs, how Insider Risk Management turns events into patterns, and what the DPO should weigh in the risk assessment. royexplains.com