Insider Risk Management (IRM) provides signals, indicators, and analytics designed to identify and mitigate risky user behavior. This session focuses on intermediate capabilities such as cumulative risk scoring, policy tuning, building personas, managing high-volume alerts, and using Adaptive Protection to dynamically elevate DLP enforcement for high‑risk individuals.