Frontier: [Skills] 'Explain this presentation' built in skill in PPT Copilot (Desktop)

🚨 The Signal: PowerPoint Copilot gains an 'Explain this presentation' skill, summarising entire decks including notes and charts. This enhances content understanding but increases the risk of sensitive information exposure via AI summarisation.

The Impact

All users with Copilot licenses are affected, increasing the risk of sensitive data exposure through AI summarisation.

• End users: Risk of inadvertently exposing sensitive data through AI summaries.
• Security teams: Increased surface area for data loss prevention (DLP) monitoring and incident response.
• Compliance teams: New considerations for data handling and retention policies with AI-generated content.

The Action

1. Review and update existing Data Loss Prevention (DLP) policies to include Copilot interactions and AI-generated content.
2. Develop and disseminate clear internal guidelines for users on appropriate use of Copilot's summarisation features, especially with sensitive or classified information.
3. Monitor Microsoft Purview audit logs for Copilot activity, focusing on interactions with high-sensitivity documents.
4. Assess and update information classification and handling policies to account for AI-driven content processing and summarisation.
5. Evaluate the necessity of Copilot access for users handling highly sensitive data and consider conditional access policies.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps