Work IQ: Updating documents in Office

🚨 The Signal: Work IQ allows Copilot agents to create and edit Office documents using organizational context. This expands AI's access to and modification of sensitive data, increasing data governance and integrity risks.

The Impact

Security teams and data owners are affected by increased risk of data leakage and integrity issues from AI-driven document modification.

• Security teams face new risks from AI agents accessing and modifying sensitive documents.
• Data owners must consider how AI agents interact with their information, risking unintended disclosure.
• Compliance officers need to assess AI's impact on data integrity and regulatory adherence.
• Incident responders may see new types of data compromise incidents involving AI agents.

The Action

1. Review and update Microsoft Purview Data Loss Prevention (DLP) policies to include Copilot interactions with sensitive data.
2. Implement Microsoft Purview Information Protection (MIP) sensitivity labels and policies to classify and protect documents accessed by AI.
3. Configure Microsoft Entra Conditional Access policies to restrict AI agent access to sensitive data based on context.
4. Establish clear governance policies for Copilot agent use, including data access and modification permissions.
5. Monitor Microsoft 365 audit logs for unusual AI agent activity related to document access and modification.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps