A Microsoft Purview solution that detects, investigates, and helps act on risky activities by internal users, such as data theft by departing employees, data leaks, or security violations, using policy templates.
In SC-900 the key is privacy by design: user names are pseudonymized by default in alerts and cases. Cases can be escalated to eDiscovery for legal review.
Insider risk management is a concept that can show up on the exam. Check the full guide to see it in context.