Event details
You mentioned and showed controls (about 7 minutes in) about ensuring people only use Copilot with commercial data protection "whenever they're connected to your organization's network" to update your DNS records.
Do you have any solutions (now, or planned) to address this when users are not connected to the organization's network? With the modern workplace, many people are working remote, and are not always on the corporate network. We need a way to ensure commercial data protection even off our network, as long as they're corporate devices. Without this, a user could think they're using the protected Copilot, and inadvertently send sensitive data to the version without commercial data protection.
- As long as you are authenticated using your Entra ID, CDP should be in place... https://learn.microsoft.com/en-us/copilot/privacy-and-protections
- The challenge is when you're not authenticated. On a corporate device, if you're not logged in, you end up hitting the version without CDP in place, and the only counter measures that Microsoft has offered require you to be on the corporate network. If you're working from home, these DNS entries would not work.
