You can specify domains in global settings which helps you to increase or decrease the risk scoring for activity that takes place with these domains. Additionally, you can use wildcards to help match variations of root domains or subdomains. Thisis currently available in public preview. Insider Risk Management in Microsoft 365 correlates various signals from the chip to the cloud to identify potential malicious or inadvertent insider risks, such as IP theft, security and policy violations, and more. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to ensure user-level privacy.