Microsoft Copilot (Microsoft 365): Audio Overview updates in Copilot Notebooks
🚨 The Signal: Copilot Notebooks now support audio overviews with sensitivity labels, topic-based navigation, and new audio formats. This expands the attack surface for sensitive information disclosure if labels are not correctly applied or enforced.
The Impact
All users are affected; the risk is sensitive data exposure if information protection policies are not correctly configured and enforced for Copilot audio outputs.
- End users: Risk of inadvertently sharing sensitive information if labels are not understood or applied.
- Security team: Increased complexity in ensuring consistent data protection across new Copilot output formats.
- Data owners: Need to verify that existing sensitivity labels adequately protect audio summaries of their content.
- Compliance officers: Must confirm that Copilot's new audio features comply with regulatory data handling requirements.
The Action
- Review and update existing Microsoft Purview sensitivity label policies to include Copilot Notebook audio outputs.
- Verify that auto-labeling policies are correctly configured to classify Copilot-generated audio content.
- Educate users on the importance of applying correct sensitivity labels to content used by Copilot, especially for audio overviews.
- Monitor Microsoft Purview audit logs for sensitivity label usage and policy violations related to Copilot audio.
- Test data loss prevention (DLP) policies to ensure they effectively prevent exfiltration of sensitive information within Copilot audio overviews.
Domain: Purview · Impact: high · Workload: Microsoft Purview