389145 – Microsoft Copilot (Microsoft 365): Data Loss Prevention – Gain comprehensive summary of Data Loss Prevention alerts with Copilot for Security (archived)

Product:

Copilot, Purview Communication Compliance, Purview Data Loss Prevention

Platform:

Web, World tenant

Status:

Launched

Change type:

Links:

Details:

Copilot for Security is embedded in Data Loss Prevention to summarize alerts to help accelerate data security investigations.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
Preview, General Availability

Created:
2024-03-26

updated:
2024-07-23

Public Preview Start Date

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

Direct effects for Operations**

- Impact on IT Operations and Services
- Increased workload for IT security teams
- Role Impacted: Security Analysts, IT Administrators
- The introduction of Microsoft Copilot for Data Loss Prevention (DLP) will likely lead to an increase in the volume of alerts generated. Security teams will need to adapt to manage and investigate these alerts efficiently, potentially requiring additional training or resources.
- Reference: [Microsoft Purview Data Loss Prevention](https://www.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention)

- Dependency on Microsoft 365 infrastructure
- Role Impacted: IT Operations Managers, System Administrators
- The reliance on Microsoft 365 for DLP means that any issues with the Microsoft 365 infrastructure (e.g., outages, performance degradation) could directly impact the effectiveness of the Copilot feature. This could lead to delays in alert processing and response times, affecting overall data security posture.
- Reference: [Microsoft 365 Service Health](https://status.office365.com/)

- Impact on IT Users
- Potential for increased false positives
- Role Impacted: End Users, Compliance Officers
- As the Copilot feature summarizes alerts, there may be an increase in false positives, leading to unnecessary investigations and potential disruptions in user workflows. Users may experience interruptions if they are flagged incorrectly, impacting productivity.
- Reference: [Understanding Data Loss Prevention](https://techcommunity.microsoft.com/t5/security-compliance-identity/understanding-data-loss-prevention-dlp-in-microsoft-365/ba-p/1943034)

- User training and adaptation requirements
- Role Impacted: End Users, Training Coordinators
- Users will need to be trained on how to interpret and respond to alerts generated by the Copilot feature. This may require additional resources for training sessions and materials, impacting the overall user experience during the transition period.
- Reference: [Microsoft 365 Training](https://support.microsoft.com/en-us/training)