Microsoft Viva: Enhanced Microsoft Copilot in Viva Engage

🚨 The Signal: Copilot in Viva Engage now offers deeper conversational analysis and cross-M365 integration, including PowerPoint generation. This expands AI's access to internal communications, increasing data exposure risks.

The Impact

Security teams and data owners are affected by increased data exposure risk due to expanded AI access to sensitive internal communications.

• Security Teams: Risk of data leakage and unauthorized information synthesis via AI.
• Data Owners: Increased exposure of sensitive internal communications to AI processing.
• Compliance Officers: New challenges in demonstrating data governance and privacy compliance.
• End Users: Potential for inadvertent sharing of sensitive data through AI-generated content.

The Action

1. Review and update data classification and retention policies for Viva Engage content.
2. Assess existing Microsoft 365 Copilot data governance policies for applicability to Viva Engage.
3. Implement or refine sensitivity labels for Viva Engage conversations containing sensitive data.
4. Educate users on responsible use of Copilot in Viva Engage, emphasizing data sensitivity.
5. Monitor Copilot usage logs within Viva Engage for unusual data access patterns.

Domain: Agentic-AI · Impact: high · Workload: Other