Event banner
Copilot for Microsoft 365 Security and Governance AMA
Event details
Join us for an exclusive Ask Me Anything (AMA) session focused on Security and Data Governance for Copilot for Microsoft 365 on Wednesday, June 12th, from 9:00 AM to 10:00 AM PST. This session will focus on pivotal topics such as Data Loss Prevention (DLP), eDiscovery, audit logs, restricted search, information barriers and data residency
This is a unique opportunity to connect directly with our diverse team of product experts, servicing specialists, and engineers who specialize in security and data governance aspects of Copilot for Microsoft 365.
Event Details:
This chat-based session offers a direct line to the experts behind the secure and compliant operations of Copilot for Microsoft 365. Our team will be ready to discuss and answer your questions on:
- Data Loss Prevention (DLP): Learn how to protect sensitive information automatically.
- eDiscovery: Understand tools that help in identifying and delivering electronic information useful for evidence.
- Audit Logs: Get insights on tracking user activities and critical system changes.
- Preparing your data for Copilot: options for getting started even while staying in control
- Data Residency: Discuss the importance of storing data in specific locations.
- Communication Compliance: Discover how advanced machine learning helps detect and mitigate risks in communications, ensuring adherence to regulatory standards and organizational policies.
**Please note, we will not be covering privacy or other unrelated topics during this session.
How does it work?
During this live, chat-based event, our experts will be available to offer personalized advice and discuss the security and governance capabilities of Copilot for Microsoft 365. Whether you're interested in exploring its advanced security features, seeking strategies for maintaining compliance, or have particular questions about the service, our team is ready to assist you.
To participate, simply post your questions in the comments section. We encourage you to submit your questions early and continue to engage throughout the one-hour session. Remember, this is a chat-only event, so all interactions will take place in the Comments section without any video or live meeting components. Each question should be posted as a new comment to facilitate a smooth and organized discussion.
Don't miss this chance to interact directly with the minds behind Microsoft 365 Copilot and gain valuable insights to elevate your experience with this revolutionary tool. Mark your calendars and join us for an informative and engaging session!
Note: This is a chat-based event. There is no video or live meeting component. Questions and answers will appear in the Comments section below. Please post each question as a new comment. |
183 Comments
- Floyds_on_GreenwoodBrass Contributor
Greetings, re: eDiscovery: , Preparing your data for Copilot, Data Residency:, Communication Compliance:
Use Copilot / machine learning to implement and manage data points via tag(s) conforming to RCW data retention requirements. Using CORE document/pdf v 4.2 + as the source reference to review tenant data, including email.. Resultant data tagging based on source definitions taken from CORE v 4.2. Tagged would apply data creation date/age based retention policy/ies.
Is or will this be possible? It would be another game changer (IMHO). Thank you,
- m36fiveIron Contributor
The support documentation, "Commercial data protection" says of data, "Microsoft has no 'eyes-on' access to it." Can you please explain exactly what this means? I'm hearing doubt that copilot.microsoft.com with CDP is entirely safe for sensitive or private information because "there must be some way for someone at Microsoft to access it if they really had to."
- Adparmar
Microsoft
"eyes-off data" refers to data that is not accessed or viewed by human reviewers unless it has been flagged by the abuse monitoring system. Human reviewers who assess potential abuse can access prompts and completions data only when that data has been flagged by the abuse monitoring system. The human reviewers are authorized Microsoft employees who access the data via point wise queries using request IDs, Secure Access Workstations (SAWs), and Just-In-Time (JIT) request additional approvals.
- Jennifer TracyBrass ContributorIs there a way to have AI automatically move a file to a Google Drive?
- PeterForsterIron Contributor
That sound like an integration for PowerAutomate and is not directly related to Copilot for Microsoft 365. There are a lot of samples in the web available. One would be: https://www.youtube.com/watch?v=eIy23PsPQIc
- Jennifer TracyBrass ContributorWhat steps would you recommend in introducing this technology to an older generation (60+) of retired volunteers?
- alliethompsonIron ContributorHi Jennifer! Check out our Copilot Adoption Hub - should be a good place to start: https://aka.ms/AAqqkpq
- PeterForsterIron ContributorCould you provide more details about the search process when the web plugin is activated in Word or Copilot for Work (Chat)? I comprehend the underlying model with the Bing Search API, but customers are expressing dissatisfaction with the exclusion of the DPA for Bing and are eager to understand more about how this operates. How does the orchestration engine determine which information will be transmitted to the Bing Search API, and is it feasible to query the exact information that was sent to Bing using eDiscovery afterwards?
- Daniel_BIron ContributorWhat capability exists to sanitize CoPilot metadata across the various MS services? Is there a single-pane-of-glass available that will allow us to granularly manage the information that is collected by CoPilot? Can CoPilot be configured to exclude data that is labeled CUI, PII, etc.? How does it integrate with Purview and the native governance functionality within M365? Thank you!!
- MichaelEPhoenixBrass ContributorIf Copilot in Word creates information that contains personal data surfaced from documents within an organisation, is it possible to get links to where those documents are? When asking Copilot in Word for links, it just has [URL] and no actual link to the document, even if you ask it to create references. It is useful for organisations to know where this sensitive data is held so that they can remove/label the offending document. Copilot Chat often gives links, but not Copilot in Word. Thank you 🙂
- SamBarroCopper Contributor"it just has [URL] and no actual link to the document," Are you sure? Are you talking about the numbered "references" at the bottom of the Copilot reply? Even though they don't show the complete URL, when I click on them, my MS Edge opens to the precise link.
- MichaelEPhoenixBrass Contributor
Yes I am 100% sure. I am talking about getting references to where Copilot in Word (desktop) has sourced information.
For example, I write a simple prompt into the prompt window for Copilot in Word desktop: "Create a draft of a training plan using documents within my organisation. Keep it to no longer than 10 pages. Provide a list of references." It creates a section called 'references', names the documents it used, but has [URL] that is unclickable, unnavigable, where the reference link should be. It a reference would look like "Training Plan template 2024 [URL]".
So it seems to be finding the file, using it as a source, but then just puts 'URL' in text, rather than a link to the document.
A customer has this happen and it was referencing a source that contained private information, and they needed to know where that document was. Additional attempts in Copilot in Word yielded no clickable links. Copilot Chat was unable to replicate where the sources came from.
Edited for paragraphing.
- Sarah_GilbertSilver Contributor
REMINDER: Please post each question as a separate comment. This approach helps us provide more focused and detailed answers and makes it easier for other community members to find relevant discussions.
- rbeckerBrass ContributorWhat provisions should a company make in an "AI Guideline" for its employees regarding the use of Copilot? - Is there probably even a draft Guideline for the use of Copilot in the company? (Maybe Copilot can write one? 😉
- JoCo-AdminCopper ContributorOur company is interested in this same question. A draft guideline would be helpful.
- rbeckerBrass ContributorHej, I'd like to ask on data privacy compliance, especially for the EU. (or is there a specific EU-AMA?) 1. I understood there is a data processor agreement for O365-Copilot licences and that those data will not be used for training of the general model. 2. But all data within a tenant is used for training the tenants model, right? 3. However, there might be data (e.g. employee health data) which should not be read by CoPilot. How can I exclude sensitive data, specifically protected e.g. by Art. 8 GDPR? (some other comment asked for labelling?) 4. How can I exercise data subjects rights of deletion? a) How can I delete personal data once it has been read by Copilot? Or how can I describe and demonstrate, that Copilot does not hold a copy of that data? b) How can I answer data access requests? What should I answer on what Copilot knows about an individual? c) How can I correct personal data in Copilot? Are there rights to do that or can anybody modify it? Best regards from Germany
- Sarah_GilbertSilver ContributorThank you for your detailed questions. To ensure each of your queries receives the appropriate attention during our AMA, please post each question as a separate comment. This approach helps us provide more focused and detailed answers and makes it easier for other community members to find relevant discussions. We appreciate your cooperation and look forward to addressing your questions.