Word: Draft on a selection and retain your existing formatting

🚨 The Signal: Microsoft Word now allows AI-powered drafting on selected text while preserving existing formatting. This streamlines content creation but introduces potential risks related to sensitive information exposure if not properly governed.

The Impact

All users are affected, with a moderate security risk of unintentional data exposure through AI processing.

• End-users: Risk of inadvertently submitting sensitive data to AI.
• Security Teams: Need to monitor AI usage and data handling policies.
• Compliance Teams: Potential for non-compliance with data privacy regulations.
• Data Owners: Risk of sensitive information being processed outside defined boundaries.

The Action

1. Review and update Microsoft Purview Data Loss Prevention (DLP) policies to include AI-generated content and interactions.
2. Educate end-users on responsible AI use, particularly regarding sensitive and classified information in Word.
3. Monitor Microsoft 365 audit logs for AI feature usage within Word.
4. Assess existing Information Protection policies in Purview for sensitivity labels on documents used with AI drafting.
5. Consider implementing Microsoft Defender for Cloud Apps policies to detect unusual AI-related data activity.

Domain: M365-Apps · Impact: medium · Workload: M365 Apps