Dynamics 365 Contact Center – Enable AI-assisted time-off and swap requests

🚨 The Signal: Dynamics 365 Contact Center will introduce AI-assisted time-off and shift swap requests. This automates workforce scheduling and approvals, potentially impacting data governance and access controls for sensitive HR information.

The Impact

Dynamics 365 Contact Center users and HR administrators are affected, with a security risk related to AI-driven access to sensitive HR data and potential for policy bypass.

• Contact Center Agents: Risk of incorrect or biased AI decisions affecting time-off and shift swaps.
• HR Administrators: Risk of AI misconfigurations leading to policy non-compliance or unauthorized approvals.
• Security Team: Risk of new attack vectors through AI prompt manipulation or data leakage from HR systems.
• Organisational Leadership: Risk of reputational damage and compliance breaches due to AI errors in workforce management.

The Action

1. Review and define clear, auditable approval rules and constraints for AI-assisted requests.
2. Establish a robust monitoring and auditing framework for AI decisions and actions within Dynamics 365.
3. Implement strict access controls and least privilege principles for configuring AI parameters and accessing HR data.
4. Develop a comprehensive incident response plan for AI-related errors or malicious use cases.
5. Conduct regular security assessments and penetration testing on the AI-assisted features.

Domain: Agentic-AI · Impact: medium · Workload: M365 Apps