2.3 Recognizing & Mitigating Risks to Sensitive Data

2.3 Recognizing & Mitigating Risks to Sensitive Data

When deploying generative AI across an enterprise, data security, regulatory compliance, and access control are paramount concerns. Business leaders frequently worry: Will Copilot expose confidential executive compensation data to all staff? Will our proprietary intellectual property be used to train public models? How do existing data classification policies apply to AI-generated text?

Microsoft 365 Copilot addresses these concerns through a comprehensive security architecture that integrates deeply with Microsoft Entra ID, Microsoft Graph, and Microsoft Purview. Understanding how access controls, sensitivity labels, and security trimming function is essential for the AB-730 certification.

---

Microsoft Purview Integration & Sensitivity Labels

Microsoft Purview Information Protection allows organizations to discover, classify, and protect sensitive data across cloud services, apps, and endpoints. Microsoft 365 Copilot natively respects and enforces Purview classifications.

+───────────────────────────────────────────────────────────────────────────+
|                      Purview Sensitivity Taxonomy                         |
|                                                                           |
|  [1. Public]          ── Non-sensitive data; free external distribution   |
|  [2. General]         ── Standard business data; internal distribution     |
|  [3. Confidential]    ── Sensitive business data; restricted access + RMS  |
|  [4. Highly           ── Critical intellectual property / financial data;  |
|      Confidential]       strict encryption, watermarking, no forwarding   |
+───────────────────────────────────────────────────────────────────────────+

Sensitivity Label Inheritance

When Copilot generates new business artifacts (such as drafting a Word proposal, summarizing a PowerPoint deck, or answering a Teams chat), it enforces sensitivity label inheritance:

• Single Source Inheritance: If Copilot creates a summary from a document labeled Confidential - Finance, the newly generated document automatically inherits the Confidential - Finance label and its associated encryption policies.
• Multi-Source Inheritance (Most Restrictive Wins): If Copilot references multiple documents to synthesize an executive report (e.g., one General document and one Highly Confidential document), Copilot automatically applies the most restrictive sensitivity label (Highly Confidential) to the resulting output.
• Encryption Preservation: Rights Management Services (RMS) cryptographic encryption keys are preserved. Users who lack the cryptographic rights to decrypt a source file cannot have Copilot summarize it.

Data Loss Prevention (DLP) Policies

Microsoft Purview Data Loss Prevention (DLP) policies inspect content in real time to prevent the accidental or malicious exfiltration of sensitive information types (SITs)—such as Social Security Numbers, credit card numbers, medical records, or proprietary project codenames.

• Prompt Inspection: DLP policies evaluate user prompts before they reach the LLM. If a prompt contains prohibited sensitive data, DLP can block the prompt or alert compliance administrators.
• Output Filtering: DLP evaluates Copilot's generated responses. If an output contains sensitive data that violates organizational policy, the response is blocked or redacted.

Sensitivity Label Governance Matrix

---

The Threat of Enterprise Oversharing & Remediation

While Copilot's security trimming ensures users only see files they have permission to access, it exposes a critical organizational vulnerability: Enterprise Oversharing.

+───────────────────────────────────────────────────────────────────────────+
|                       The Oversharing Dilemma                             |
|                                                                           |
|  [Historical Reality: Security by Obscurity]                              |
|  - File: "2026_Executive_Bonuses.xlsx" stored on intranet SharePoint.     |
|  - Permission: "Everyone except external users" (Open Read).              |
|  - Reality: Nobody knew the URL, so the file was effectively "hidden."    |
|                                                                           |
|  [Modern Reality: Copilot Semantic Discovery]                            |
|  - Employee Prompts: "What are the executive compensation targets?"        |
|  - Copilot: Indexes all accessible files, finds the open file instantly,  |
|    and outputs a complete summary in seconds!                             |
+───────────────────────────────────────────────────────────────────────────+

Why Oversharing Occurs

In many organizations, SharePoint sites and OneDrive folders have historically been configured with overly broad permissions, such as:

• Sharing links set to "Anyone with the link" or "Everyone in the organization".
• Departmental document libraries configured with access granted to the "Everyone except external users" default group.
• Public Microsoft Teams channels used to store confidential human resource or financial spreadsheets.

Before generative AI, organizations relied on security by obscurity—assuming that because an employee did not know a file existed or where it was stored, the data was safe. Copilot eliminates obscurity by semantically indexing all accessible enterprise data, making overshared files instantly discoverable via simple natural language queries.

Strategic Remediation Framework

To prevent oversharing incidents prior to and during Copilot deployment, organizations must implement a multi-layered remediation framework:

                    ┌─────────────────────────────────┐
                    │ Oversharing Remediation Pillars │
                    └────────────────┬────────────────┘
                                     │
         ┌───────────────────────────┼───────────────────────────┐
         ▼                           ▼                           ▼
┌─────────────────┐         ┌─────────────────┐         ┌─────────────────┐
│ 1. Restricted   │         │ 2. Entra Access │         │ 3. Purview Info │
│ SharePoint Search│        │ Reviews & JIT   │         │ Barriers & DLP  │
└─────────────────┘         └─────────────────┘         └─────────────────┘
                                     │
                                     ▼
                            ┌─────────────────┐
                            │ 4. Site Access  │
                            │ Governance Audit│
                            └─────────────────┘

1. Restricted SharePoint Search: Administrators can configure Restricted SharePoint Search to limit organization-wide search and Copilot grounding to a curated list of up to 100 approved SharePoint sites, preventing Copilot from indexing uncurated long-tail sites while permissions are audited.
2. Microsoft Entra Access Reviews & Just-in-Time (JIT) Access: Regularly prompt site owners to audit and attest to group memberships, automatically revoking access for users who no longer require it under Least Privilege principles.
3. Purview Information Barriers: Establish communication and discovery firewalls between conflicting departments (e.g., preventing investment banking teams from accessing research analyst data, ensuring regulatory compliance).
4. SharePoint Site Access Governance: Audit and eliminate broad sharing groups ("Everyone except external users"), converting open sites to private group-backed sites with designated business owners.

---

Realistic Business Scenario: The Executive Compensation Incident

Scenario: Fabrikam Manufacturing deploys Microsoft 365 Copilot to 2,000 employees. On day two of the rollout, an entry-level factory supervisor enters the prompt: "What are the salary bands and bonus multipliers for senior management this year?"

The Exposure: Copilot returns a detailed table outlining executive compensation, bonus percentages, and equity grants.

The Root Cause Analysis:

1. Did Copilot experience a security breach or hallucination? No.
2. Did Copilot bypass Entra ID security permissions? No.
3. Investigation revealed that an executive assistant had uploaded Executive_Compensation_2026.xlsx to a SharePoint site originally created for general corporate benefits. The site permissions were set to "Everyone except external users (Read)."

The Governance Remediation:

• Immediate Action: The compliance team applied a Purview Highly Confidential sensitivity label with restricted RMS encryption to the file, immediately cutting off access to unauthorized users.
• Systemic Action: The IT administrator enabled Restricted SharePoint Search to contain Copilot's indexing boundary, while launching tenant-wide Entra Access Reviews to purge all legacy "Everyone" permissions from departmental sites.

---

Key Data Governance Concepts for AB-730 Candidates

[!IMPORTANT] Critical Exam Takeaways on Data Protection

• Security Trimming is Absolute: Copilot results are always filtered by the calling user's permissions.
• Sensitivity Labels Stick: When generating derived content from labeled files, Copilot applies label inheritance (highest classification wins).
• Encryption is Preserved: RMS-protected documents maintain encryption throughout AI interactions.
• Fix the Permissions, Not the AI: Oversharing is an underlying SharePoint/access governance issue that must be remediated through proper access controls, not by blaming the AI tool.