Ready Set Secure your Data |GRC User Group| Oct 2024.pdf
0 likes369 views
The document outlines data governance strategies for Microsoft 365 Copilot, highlighting the importance of workspace governance to prevent data oversharing. It emphasizes securing files with sensitivity labels and managing user roles and responsibilities to ensure effective data stewardship. The recommendations aim to prepare organizations for the integration of AI in their workflows while maintaining data security.
Ready Set Secure your Data |GRC User Group| Oct 2024.pdf
- 1. Ready, Set, Secure: Data Governance for Microsoft 365 Copilot Nikki Chapple Principal Cloud Architect at CloudWay MVP in M365 Apps and Security
- 2. About Me Nikki Chapple Principal Cloud Architect nikkichapple @chapplenikki www.nikkichapple.com All Things M365 Compliance
- 3. Agenda Are you worried about Copilot for Microsoft 365? Is your data ready for Copilot? How to govern your workspaces and secure your data
- 4. Are you worried about Microsoft 365 Copilot?
- 5. The issue Employees want AI at work - and they won’t wait for their organisation to catch up
- 6. What are your main concerns about Copilot for Microsoft 365?
- 7. Microsoft & LinkedIn Work Trend Index Report Three out of four people already use AI at work 2024 Work Trend Index Annual Report from Microsoft and LinkedIn)
- 8. ISMG Generative AI Survey CISO Concerns REPORT-Business-Rewards-vs-Security-Risks.pdf (exabeam.com)
- 9. Is your data ready for Copilot?
- 10. Copilot scope Most of your data is stored outside Microsoft 365 3rd Party data stores SharePoint OneDrive
- 11. You are only working in OneDrive 3rd Party data stores Ungoverned content - Danger of revealing too much Copilot cannot reach - Danger of poor data quality
- 12. Pioneers start creating ungoverned Teams & Sites 3rd Party data stores Ungoverned content - Danger of revealing too much Copilot cannot reach - Danger of poor data quality
- 13. 3rd Party data stores You create public Teams with default configuration Ungoverned content - Danger of revealing too much Copilot cannot reach - Danger of poor data quality
- 14. 3rd Party data stores No workspace governance just uncontrolled file sharing Ungoverned content - Danger of revealing too much Copilot cannot reach - Danger of poor data quality
- 15. You migrate all your historic data into Microsoft 365 3rd party Ungoverned content - Danger of revealing too much Copilot cannot reach - Danger of poor data quality
- 16. Your Admins are owners of all groups, Teams & sites Ungoverned content - Danger of revealing too much
- 17. You have implemented data security and governance Governed content – Just enough access and just enough permissions
- 18. Ready Set and Secure How to govern your workspaces and secure your data
- 19. 1. Govern Workspaces To ensure only the right people have access to the right data
- 20. Ungoverned Workspaces (Microsoft 365 Groups, Teams and Sites) Ungoverned sites and files: Risk of oversharing Each circle represents a SharePoint site
- 21. 1. Restricted SharePoint Search – not recommended
- 22. 2. Convert Public workspaces to Private workspaces Public sites: Copilot can access all Governed Sites with access: You and Copilot can access Governed Sites no access: You and Copilot cannot access
- 23. 3. Use Container sensitivity labels to control access and files sharing links Ungoverned files: Risk of oversharing Governed Sites with access: You and Copilot can access Governed Sites no access: You and Copilot cannot access
- 24. 4. Regularly review workspace membership Ungoverned files: Risk of oversharing Governed Sites with access: You and Copilot can access Governed Sites no access: You and Copilot cannot access
- 25. 5. Use private/shared channels in Teams to restrict access Ungoverned files: Risk of oversharing Governed Sites with access: You and Copilot can access Governed Sites no access: You and Copilot cannot access
- 26. 6. Hide inactive workspaces and use Retention polices to delete unwanted data Ungoverned files: Risk of oversharing Governed Sites with access: You and Copilot can access Governed Sites no access: You and Copilot cannot access
- 27. 1.a Best of class workspace governance Premium licensing
- 28. 7. Block site access to non-members SAM Ungoverned files: Risk of oversharing Governed Sites with access: You and Copilot can access Governed Sites no access: You and Copilot cannot access
- 29. 8. Restricted Content Discoverability (GA Nov 2024) - SAM Ungoverned workspaces or sites Governed workspace You + Copilot have access Governed workspace You + Copilot no access Governed workspace You have access Copilot & Search is blocked
- 30. Archive 9. Archive your inactive Sites M365 Archive Ungoverned files: Risk of oversharing Governed Sites with access: You and Copilot can access Governed Sites no access: You and Copilot cannot access
- 31. 2. Secure your files To prevent oversharing
- 32. 10. Add Sensitivity labels to your files Labelled files: If you have access, Copilot has access and inherits label Each circle represents a file in a SharePoint site
- 33. 11. Add Sensitivity labels with encryption Encrypted files: If you have access, Copilot can access Encrypted files: If you can’t access, Copilot can’t access
- 34. 12. Add Encrypted Sensitivity labels with limited permissions Encrypted files with restricted access: If you have limited access, Copilot can’t access
- 35. 13. Use Sensitivity labels to block content being analysed by Copilot (+ search) Labelled files that prevent connected experiences : If you can access, Copilot cannot access in WPXO
- 36. 14. Expire sharing links Governed shared file: You have time bound access Ungoverned shared file: You have time bound access
- 37. 3. User Roles and Responsibilities It’s not just the technical controls
- 38. 15. Data is everyone’s responsibility Management Governance and AI policies Workspace owner Workspace membership Data Stewardship Employees Effective Work Practices Sensitive Content Labelling IT Technical controls Data security Copilot Oversharing Incident Management
- 39. Summary
- 40. 3 steps to ready, set and secure your data for Copilot Workspace governance Data security User adoption