From the course: Microsoft Information Security Administrator Associate (SC-401) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Implement controls in Microsoft 365 workloads to protect content in an environment that uses AI services

Implement controls in Microsoft 365 workloads to protect content in an environment that uses AI services - Microsoft 365 Tutorial

From the course: Microsoft Information Security Administrator Associate (SC-401) Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Implement controls in Microsoft 365 workloads to protect content in an environment that uses AI services

“

Now, in order for Purview to be able to do what it needs to do, we need to make sure there are certain workload controls in place in M365. The very first one is audit logging and data retention. Now, the M365 unified audit log is on by default, but if you want to be sure, you should check that that's on because it does audit any kind of AI interactions, which is important because every prompt and response with Copilot is recorded and if this isn't the case for a start it will be hard to audit but also a purview DSPM for AI relies on some of that information. And more generally it's important to remember that when we're thinking about M365 controls The copilot interactions are treated just like any other collaboration content. They can be retained, archived, or deleted according to policy. So this ensures that if your org needs to investigate AI query later, the data is still available. One of the specific concerns for AI in M365 is oversharing. Now, oversharing is different to data…

Contents