September Session | Intl Data Security User Group
Join our September session by Ammar Albakali
Session: The Alert Before the Incident: Adapting Data Protection as User Risk Changes
Insider risk rarely begins with one obvious malicious action. More often, a trusted employee’s behavior changes gradually, unusual access to sensitive information, increased downloads, activity outside normal patterns, or attempts to move data to untrusted locations. Each action may appear harmless on its own, but together they can signal growing risk before a confirmed data security incident occurs.
In this session, we will explore how Microsoft Purview Insider Risk Management brings these signals together to identify changes in user behavior while supporting privacy-focused investigations. We will look at how policies, indicators, risk scoring, alerts, and cases help security teams move from isolated activity to meaningful context.
We will then examine Adaptive Protection and how organizations can dynamically adjust data protection based on a user’s changing risk level. Instead of applying the strongest restrictions to everyone, controls can become more protective as risk increases.
The session will include a hands-on demonstration following a user from the initial risk indicators through investigation and adaptive protection. By the end, attendees will understand how Microsoft Purview can help identify the alert before the incident, investigate user risk in context, and adapt data protection without unnecessarily disrupting the broader workforce.
About Ammar Albakali
Ammar Albakali is the co-founder and Chief Technology and Security Officer at Adepted, specializing in Microsoft security, identity, data protection, and compliance. He has experience across Big Four consulting and industry roles, helping Fortune 500 organizations design and implement cybersecurity solutions that protect identities, data, endpoints, and cloud environments. His background spans security operations, incident response, identity security, Microsoft Purview, and enterprise security architecture.
About International Data Security User Group
The International Data Security User Group brings together professionals who are passionate about protecting data in a world that's constantly evolving. We believe that real progress happens when we share knowledge, exchange experiences, and collaborate across borders. Our core focus? Data security in Microsoft Purview. From information protection to insider risk management, if you're working with or interested in Microsoft’s data security solutions, this is your place.