Microsoft Viva: Viva Engage – Engage content surfacing in Copilot results

🚨 The Signal: Viva Engage community posts will now appear in Microsoft Copilot search results. This expands the data accessible to Copilot, increasing the surface area for sensitive information exposure if not properly governed.

The Impact

All users interacting with Copilot are affected, increasing the risk of unintended disclosure of sensitive information from Viva Engage.

  • End users: May inadvertently expose sensitive data through Copilot queries.
  • Security teams: Need to reassess data loss prevention (DLP) policies for Viva Engage content.
  • Compliance officers: Must review information handling policies for community discussions.
  • Admins: Require updated content governance strategies for Viva Engage.

The Action

  1. Review existing Viva Engage content for sensitivity and access controls.
  2. Implement or refine Microsoft Purview DLP policies for Viva Engage content.
  3. Educate users on appropriate content sharing within Viva Engage and Copilot interactions.
  4. Audit Copilot usage logs for unusual access patterns to Viva Engage data.
  5. Consider sensitivity labels for Viva Engage communities and posts.

Domain: Agentic-AI · Impact: high · Workload: Microsoft Purview