Microsoft Copilot (Microsoft 365): Copilot Chat in OneNote can create, edit, and refine content

🚨 The Signal: Copilot in OneNote can now create, edit, and manage content, including pages, sections, and notebooks. It can also pull information from WorkIQ and initiate actions in other M365 apps, increasing data exposure and potential for unauthorised content generation.

The Impact

All users are affected by increased data exposure and potential for unauthorised content generation via Copilot.

  • End-users: Risk of accidental data exposure through Copilot's content generation.
  • Security Teams: Increased surface area for data exfiltration and prompt injection attacks.
  • Admins: Need to review and adjust Copilot access policies to mitigate risks.
  • Compliance Teams: New challenges in maintaining data integrity and audit trails.

The Action

  1. Review and refine Microsoft 365 Copilot access policies in the Microsoft 365 admin center.
  2. Implement data loss prevention (DLP) policies in Microsoft Purview to monitor OneNote content generated by Copilot.
  3. Educate users on responsible Copilot usage and potential data handling risks.
  4. Monitor Copilot activity logs for unusual content creation or data access patterns.
  5. Assess existing information protection labels for OneNote content and adjust as needed.

Domain: Agentic-AI · Impact: high · Workload: M365 Apps