Microsoft Copilot (Microsoft 365): New Rich Answer Cards

🚨 The Signal: Copilot now displays rich answer cards for common topics like weather and news. This change expands the types of information Copilot can directly surface, potentially increasing data exposure risks if not properly governed.

The Impact

All Copilot users are affected, with a low security risk related to the display of general, non-sensitive information.

• End Users: May see more external content, requiring awareness of information sources.
• Security Teams: Need to ensure Copilot's content filtering aligns with organizational policies.
• Compliance Teams: Review if external content display impacts data governance or regulatory obligations.

The Action

1. Review existing Microsoft Purview Data Loss Prevention (DLP) policies to ensure they adequately cover Copilot interactions and content display.
2. Communicate to end-users that Copilot may display information from various external sources.
3. Monitor Copilot usage and feedback for any unexpected content or data handling concerns.

Domain: Agentic-AI · Impact: low · Workload: M365 Apps