Event banner
Copilot for Microsoft 365 Security and Governance AMA
Event Ended
Wednesday, Jun 12, 2024, 09:00 AM PDTEvent details
Join us for an exclusive Ask Me Anything (AMA) session focused on Security and Data Governance for Copilot for Microsoft 365 on Wednesday, June 12th, from 9:00 AM to 10:00 AM PST. This session will focus on pivotal topics such as Data Loss Prevention (DLP), eDiscovery, audit logs, restricted search, information barriers and data residency
This is a unique opportunity to connect directly with our diverse team of product experts, servicing specialists, and engineers who specialize in security and data governance aspects of Copilot for Microsoft 365.
Event Details:
This chat-based session offers a direct line to the experts behind the secure and compliant operations of Copilot for Microsoft 365. Our team will be ready to discuss and answer your questions on:
- Data Loss Prevention (DLP): Learn how to protect sensitive information automatically.
- eDiscovery: Understand tools that help in identifying and delivering electronic information useful for evidence.
- Audit Logs: Get insights on tracking user activities and critical system changes.
- Preparing your data for Copilot: options for getting started even while staying in control
- Data Residency: Discuss the importance of storing data in specific locations.
- Communication Compliance: Discover how advanced machine learning helps detect and mitigate risks in communications, ensuring adherence to regulatory standards and organizational policies.
**Please note, we will not be covering privacy or other unrelated topics during this session.
How does it work?
During this live, chat-based event, our experts will be available to offer personalized advice and discuss the security and governance capabilities of Copilot for Microsoft 365. Whether you're interested in exploring its advanced security features, seeking strategies for maintaining compliance, or have particular questions about the service, our team is ready to assist you.
To participate, simply post your questions in the comments section. We encourage you to submit your questions early and continue to engage throughout the one-hour session. Remember, this is a chat-only event, so all interactions will take place in the Comments section without any video or live meeting components. Each question should be posted as a new comment to facilitate a smooth and organized discussion.
Don't miss this chance to interact directly with the minds behind Microsoft 365 Copilot and gain valuable insights to elevate your experience with this revolutionary tool. Mark your calendars and join us for an informative and engaging session!
Note: This is a chat-based event. There is no video or live meeting component. Questions and answers will appear in the Comments section below. Please post each question as a new comment. |
Sarah_Gilbert
Updated Jun 12, 2024
- Victor_B2360Copper ContributorWhat measures does Microsoft take to ensure that Copilot only collects and processes the minimum amount of personal data necessary for its intended purposes? How does Copilot handle unnecessary or redundant personal data?
- PeterForsterIron Contributor
Victor_B2360 Copilot for Microsoft 365 does not work with any personal data until you feed it with data. If you talks about Microsoft Copilot this is listed here: https://learn.microsoft.com/en-us/copilot/faq#privacy-and-security
- Victor_B2360Copper ContributorCan you provide a detailed overview of the categories of personal data that Copilot processes? Specifically, what types of personal and sensitive data are typically handled during its operations?
- JeremyChapmanMSFT
Microsoft
Search and processing of data from within the Microsoft 365 boundary for each organization is consistent with how search works in microsoft365.com and other search endpoints - with or without Copilot for Microsoft 365 enabled. Copilot searches in the context of the user interacting with Copilot for Microsoft 365 and will only retrieve what that user has explicit access to. These are all actions happening as part of inference with integrated large language models and information from these retrieval and response processes is not used to train the large language models.
- Victor_B2360Copper ContributorHow does Microsoft evaluate and address potential impacts on the rights and freedoms of data subjects whose personal data is processed by Copilot? What safeguards are in place to protect these individuals?
- RockinITGurlCopper ContributorAre there any pre-built resources for creating a Copilot Center of Excellence? I found a PowerPoint that seems to reference a Teams template but it does not provide links to the template itself - (https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F%2Fadoption.microsoft.com%2Ffiles%2Fcopilot%2FBuild-your-own-CoE.pptx&wdOrigin=BROWSELINK) Thanks!
- Hi Shari Starkey, there is only the guidance on how to set up based on what you found in the presentation. There isn't an actual template that has been created to plug into your environment like this page: https://adoption.microsoft.com/en-us/sharepoint-look-book/
- alliethompson
Community Manager
Hi Shari! There are a lot of helpful resources on our Copilot Adoption Hub including a downloadable customer success kit: https://aka.ms/AAqqkpq.
If you're looking specifically for CoE guidance, there is a module on this in this learning path as well https://learn.microsoft.com/en-us/training/paths/prepare-your-organization-microsoft-365-copilot/
Hi Ali, there is only the guidance on how to set up based on what Shari found in the presentation. There isn't an actual template that has been created to plug into your environment like this page: https://adoption.microsoft.com/en-us/sharepoint-look-book/
- ValiantPenchBrass ContributorAs an administrator, is there a way to see Copilot usage information for our users? If so, how granular are the reports and datapoints? I assume we won't be able to see things like the specific queries or responses, but is there a way to see what data users have interacted with using Copilot?
- HenryTea
Microsoft
Hi, you have the following options to view those metrics:
Microsoft 365 admin center Microsoft 365 Copilot usage - Microsoft 365 admin | Microsoft Learn
Connect to the Microsoft Copilot Dashboard for Microsoft 365 customers | Microsoft Learn- ValiantPenchBrass ContributorGreat, thank you.
- dacoucei
Microsoft
You can use Communication Compliance to view prompts and responses from Copilot as well as use the new AI hub in preview to see GenAI usage within your tenant! Here is some more information on Communication Compliance's support for M365 Copilot: https://learn.microsoft.com/en-us/purview/communication-compliance-copilot?view=o365-worldwide&tabs=purview-portal AI hub: https://learn.microsoft.com/en-us/purview/ai-microsoft-purview-considerations- ValiantPenchBrass ContributorThat is great, thank you very much!
- Ramsey555Occasional ReaderPlease I did register but I can't see the link to join the session
- This session is chat based, there is no video or presentation.
- Clint JacobsenCopper Contributor
How is the team responding to these questions using Copilot/an LLM to make those responses and how is all of this dialogue being used to train Copilot?
- HenryTea
Microsoft
Hi Clint, thanks for your question. Prompts, responses, and data accessed through Microsoft Graph aren't used to train foundation LLMs, including those used by Microsoft Copilot for Microsoft 365. Please see https://servicetrust.microsoft.com/DocumentPage/a0682452-d305-4abf-be19-505c3e01c145 for more details on this subject.
- Victor_B2360Copper ContributorHas Microsoft conducted Data Protection Impact Assessments (DPIAs) for Copilot, and can you share any key findings or steps taken to mitigate identified risks?
- Adparmar
Microsoft
Yes, Microsoft has conducted Data Protection Impact Assessments (DPIAs) for Copilot. Microsoft Copilot for Microsoft 365 is built on top of Microsoft's current commitments to data security and privacy in the enterprise. There's no change to these commitments. Microsoft Copilot for Microsoft 365 is integrated into Microsoft 365 and adheres to all existing privacy, security, and compliance commitments to Microsoft 365 commercial customers. The DPIA is not shared publicly outside of the audit setting.
- rbeckerBrass ContributorHow can I exclude pieces of data (e.g. Files with employee health data) which should not be read by CoPilot? -> How can I exclude sensitive data, specifically protected e.g. by Art. 8 GDPR? (some other comment asked for labelling?)
- Adparmar
Microsoft
Use the permission models available in Microsoft 365 services, such as SharePoint, to help ensure the right users or groups have the right access to the right content within your organization. This includes permissions you give to users outside your organization through inter-tenant collaboration solutions, such as shared channels in Microsoft Teams. Additionally,Restricted SharePoint Search allows you to restrict both organization-wide search and Copilot experiences to a curated set of SharePoint sites of your choice. https://learn.microsoft.com/en-us/sharepoint/restricted-sharepoint-search
- RuanITCJBrass ContributorI think AI provides great opportunities for everyone, but what I'd like to know is: 1. Can Microsoft provide any insight into the rough percentage of time Copilot has a hallucination? 2. What kind of "success rate" is the minimum standard Microsoft provides with Copilot? (For example, in only 3% of tests it hallucinates, so a 97% success rate) 3. if Copilot has a hallucination while being used and provides wrong, inaccurate feedback (such as for a stupid simple example recommends we disable firewall). How will we engage Microsoft of a dangerous and incorrect recommendation? Thank you