Microsoft Copilot (Microsoft 365): Sales Development Agent is now available

🚨 The Signal: A new autonomous Copilot agent for sales development is now available. This agent can independently research, qualify, and engage leads, introducing new risks related to data handling, access, and autonomous decision-making.

The Impact

Security teams and data governance are affected by the risk of uncontrolled data access and autonomous actions by the new sales agent.

• Security Teams: Risk of data exfiltration and unauthorised access due to autonomous agent actions.
• Data Governance: Risk of non-compliance with data privacy and handling policies.
• Legal/Compliance: Risk of regulatory breaches from agent's independent engagement with external parties.
• Identity Teams: Risk of unmanaged agent identities and their permissions.

The Action

1. Review and define data access policies for Copilot agents within Microsoft Purview.
2. Establish clear governance frameworks for autonomous agent identities in Microsoft Entra ID.
3. Implement monitoring and auditing for Copilot agent activities, focusing on data interactions.
4. Develop incident response procedures specific to autonomous agent misuse or compromise.
5. Communicate acceptable use policies for Copilot agents to business stakeholders.

Domain: Agentic-AI · Impact: high · Workload: Other