A comprehensive approach to identifying, assessing, and mitigating risks posed by people with authorized access to organizational assets.
IRM involves using advanced analytics, monitoring, and behavior-based risk models to detect, analyze and mitigate risks posed by trusted insiders. Gartner's Market Guide defines IRM as solutions that help organizations implement the Rule of Three framework: Deter (prevention and training), Detect (monitoring and analytics), and Disrupt (investigation and response).