Microsoft Excel: Excel canvas

🚨 The Signal: Excel Copilot gains "Excel canvas," generating interactive reports from workbook data. These reports auto-update and are refined via natural language, potentially exposing sensitive data through new AI-driven summarization and visualization.

The Impact

Users with Copilot access face increased risk of inadvertent sensitive data disclosure through AI-generated reports.

• End-users: Risk of oversharing sensitive data in AI-generated reports.
• Security Teams: Need to monitor and audit AI-generated content for data leakage.
• Data Owners: Increased complexity in ensuring data classification is respected by AI.
• Compliance Officers: New challenge in demonstrating adherence to data handling policies.

The Action

1. Review and update existing data loss prevention (DLP) policies to include Copilot-generated content in Excel.
2. Implement or refine sensitivity labels for Excel workbooks containing sensitive data to guide Copilot's behavior.
3. Educate users on responsible use of Copilot in Excel, emphasizing data sensitivity and sharing implications.
4. Monitor Microsoft Purview audit logs for Copilot activities related to report generation and sharing.
5. Assess the impact of AI-generated content on your organization's data retention and discovery policies.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps