Frontier: [Skills] 'Explain this presentation' built in skill in PPT Copilot (Mac)
🚨 The Signal: PowerPoint Copilot for Mac gains an 'Explain this presentation' skill, summarising entire decks. This could expose sensitive information if users process unclassified content with Copilot, increasing data spill risk.
The Impact
Users with Copilot licenses are affected, increasing the risk of sensitive data exposure through AI summaries.
- End users: May inadvertently process sensitive data with Copilot, leading to data spills.
- Security Team: Increased monitoring burden for data loss prevention related to Copilot outputs.
- Data Owners: Risk of unauthorised summarisation and potential disclosure of classified information.
The Action
- Review and update Data Loss Prevention (DLP) policies in Microsoft Purview to specifically address Copilot interactions with sensitive data.
- Implement or reinforce data classification labels (e.g., Confidential, Secret) on all presentations to guide Copilot's handling.
- Educate users on the responsible use of Copilot, emphasising not to process classified or sensitive unlabelled information.
- Monitor Microsoft Purview Audit logs for Copilot activities involving sensitive content.
Domain: Agentic-AI · Impact: high · Workload: M365 Apps