Event banner
Copilot for Microsoft 365 Security and Governance AMA
Event details
Join us for an exclusive Ask Me Anything (AMA) session focused on Security and Data Governance for Copilot for Microsoft 365 on Wednesday, June 12th, from 9:00 AM to 10:00 AM PST. This session will focus on pivotal topics such as Data Loss Prevention (DLP), eDiscovery, audit logs, restricted search, information barriers and data residency
This is a unique opportunity to connect directly with our diverse team of product experts, servicing specialists, and engineers who specialize in security and data governance aspects of Copilot for Microsoft 365.
Event Details:
This chat-based session offers a direct line to the experts behind the secure and compliant operations of Copilot for Microsoft 365. Our team will be ready to discuss and answer your questions on:
- Data Loss Prevention (DLP): Learn how to protect sensitive information automatically.
- eDiscovery: Understand tools that help in identifying and delivering electronic information useful for evidence.
- Audit Logs: Get insights on tracking user activities and critical system changes.
- Preparing your data for Copilot: options for getting started even while staying in control
- Data Residency: Discuss the importance of storing data in specific locations.
- Communication Compliance: Discover how advanced machine learning helps detect and mitigate risks in communications, ensuring adherence to regulatory standards and organizational policies.
**Please note, we will not be covering privacy or other unrelated topics during this session.
How does it work?
During this live, chat-based event, our experts will be available to offer personalized advice and discuss the security and governance capabilities of Copilot for Microsoft 365. Whether you're interested in exploring its advanced security features, seeking strategies for maintaining compliance, or have particular questions about the service, our team is ready to assist you.
To participate, simply post your questions in the comments section. We encourage you to submit your questions early and continue to engage throughout the one-hour session. Remember, this is a chat-only event, so all interactions will take place in the Comments section without any video or live meeting components. Each question should be posted as a new comment to facilitate a smooth and organized discussion.
Don't miss this chance to interact directly with the minds behind Microsoft 365 Copilot and gain valuable insights to elevate your experience with this revolutionary tool. Mark your calendars and join us for an informative and engaging session!
Note: This is a chat-based event. There is no video or live meeting component. Questions and answers will appear in the Comments section below. Please post each question as a new comment. |
183 Comments
- ValiantPenchBrass ContributorAre there recommendations or guidelines on the best way to add Copilot restrictions to an organization's Data Classification Policy? Should Copilot be specifically mentioned in the DCP? Is it better to have a seperate Acceptable Use of AI policy that outlines which data classifications are acceptable to use with Copilot?
- MrogalskiCopper Contributoruhh how to I stop the email notifications flooding my inbox after Liking questions here?
- dacoucei
Microsoft
Hit the unsubscribe button on the top right of this page!- ValiantPenchBrass ContributorOr go to your settings and change the notification options. That way you can still get a daily or a weekly recap.
- ValiantPenchBrass ContributorWho owns the content that Copilot produces? For example, if I use Copilot to help me write a document, do I own the copyright on that document?
- HenryTea
Microsoft
Hi Justin, appreciate the inquiry. Please see https://www.microsoft.com/en-us/licensing/news/Microsoft-Copilot-Copyright-Commitment for more details on this topic.- ValiantPenchBrass ContributorThank you! This answers my questions.
- Adparmar
Microsoft
According to the Microsoft Copilot Copyright Commitment, if a third party sues a commercial customer for copyright infringement for using Microsoft's Copilots or the output they generate, Microsoft will defend the customer and pay the amount of any adverse judgments or settlements that result from the lawsuit, as long as the customer used the guardrails and content filters built into the products. However, Microsoft is not in a position to assess the reputational risk of an unknown issue(s) potential to impact the reputational risk of a third party. Customers are in a better position to understand what might impact their position/perception in the market and should be the ones making any related determination. Therefore, the ownership of the content produced by Copilot depends on the specific terms and conditions of the use of the product by the customer.- ValiantPenchBrass Contributor
Edit: I found the answer here: https://www.microsoft.com/en-us/licensing/news/Microsoft-Copilot-Copyright-Commitment
Thank you, I think I have a better understanding now. What about content ownership from the other direction? If I use Copilot to create a work, do I own that work? Does Microsoft assume any ownership of the work?
- Victor_B2360Copper Contributor
How does Microsoft ensure that personal data processed by Copilot remains within the EU, and what measures are in place to prevent unauthorized data transfers outside the EU?
- HenryTea
Microsoft
Hi Victor, thank you for the question. We have those details described here - https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-privacy#microsoft-copilot-for-microsoft-365-and-the-eu-data-boundary.
- rober1baBrass ContributorWhat advice and guidance can you offer to universities that are in the initial exploration phase of Copilot? We run a Microsoft environment and are heavily reliant on Teams and SharePoint. Try as we might, end users don't always set their permissions properly. We are concerned about folks seeing things that they shouldn't based upon improper permissions being unknowingly set on folders and documents. What is the best way to go about reviewing and safeguarding content from being seen by those who shouldn't?
- HenryTea
Microsoft
Thanks for the question Brian. Definitely appreciate the concern from an EDU perspective. Please check out the content shared below which should provide further guidance around your inquiries.
Zero Trust: https://learn.microsoft.com/en-us/security/zero-trust/copilots/zero-trust-microsoft-365-copilot
Empowering employee self-service with guardrails: How we’re using sensitivity labels to make Microsoft more secure - Inside Track Blog
Getting the Most Out of Generative AI at Microsoft with Good Governance
Microsoft creates self-service sensitivity labels in Microsoft 365 - Inside Track Blog
- SPSamerCopper ContributorThese questions are coming too quickly to keep track, will there be a recap shared with us at some point?
- Sarah_GilbertSilver ContributorWe will keep all comments up even after the event is done- we will just lock it from new comments/questions. You can also use the drop down menu in the upper right-hand corner during the live event with " page refresh " and select " off"
- Michael WigleCopper ContributorCoPilot seems to be turned on by default and usable but we appear to have to pay in order to gain access to the CoPilot Administrative Controls. Am I missing something? This seems very backwards.
- Jorge_LeitaoMS
Microsoft
Could you please elaborate a bit more? Are you referring to Copilot Dashboard which is part of Viva Insights?
- neilingramCopper ContributorMy question is about the use of audit logs for Copilot in an educational setting. Microsoft's decision to offer "commercial data protection" will, I am sure, be welcomed by schools. However, it raises an issue related to auditing the use of Copilot, which may not be a feature of the business/commercial sector. It will become important that schools are able to access the questions their students submit to Copilot and the answers it produces. This is part of the normal auditing process of classroom teachers, who are interested in any errors/misconceptions that their students develop as a result of using their teaching resources, which will include Copilot. My question, then, is to inquire whether the audit logs for Copilot will include access the questions submitted to Copilot and the answers it produces.
- alexpozin
Microsoft
Copilot with Commercial Data Protection doesn't log prompts and responses. That's part of the promise of CDP - no eyes on the data, no logging of prompts and responses. Copilot for M365 does log every prompt and response and those are available in audit log to administrators with appropriate access.- neilingramCopper ContributorThank you. Is it that Microsoft Copilot with commercial data protection will be available to all faculty and higher education students ages 18 and above. And, Copilot for Microsoft 365 eligibility will now include education faculty and staff. So, school students will get the Commercial Data Protection and their use of Copilot cannot be tracked by their teachers?
- Axl99frCopper ContributorAbout Copilot for M365 access to encrypted data thanks to sensitive labels . I have heard that access to the document with a label will depend on type of permissions. If role attributed would content "Copy and extract" permission, then Copilot for M365 will be able to access the content. Co-Autor or Co-Owner would allow that but not Viewer for example. I have also heard something about "Connected Experience" feature that if disabled could prevent all Copilot functionalities to work on concerned content. Can you confirm the above and elaborate about Connected Experience ?
- Samson_ChanBrass Contributor1) When user is not provided with "copy and extract" permission, Copilot will not be allowed to access these types of documents. 2) If you want to disable "Connected Experience" feature to cut off the Copilot and other Office services, see https://learn.microsoft.com/purview/sensitivity-labels-office-apps#prevent-some-connected-experiences-that-analyze-content for details.
- MrogalskiCopper ContributorIf we prefer to opt out of Co-Pilot for our subscription, how/where is it done? #imaluddite
- alexpozin
Microsoft
Copilot for M365 is not included in your subscription. It's an optional, paid subscription. So, if you don't subscribe to it, you won't need to opt out of it.