Dynamics 365 Customer Service: Copilot and AI innovation - Improve customer outcomes with Service Agent in Microsoft 365 Copilot

🚨 The Signal: Microsoft 365 Copilot Chat now integrates directly into Dynamics 365 Customer Service, allowing agents to access customer data and M365 context without switching applications. This expands AI agent capabilities and data access.

The Impact

Customer Service agents and supervisors are affected, increasing the risk of data overexposure and potential prompt injection vulnerabilities.

• Customer Service Agents: Increased risk of inadvertent data disclosure via Copilot.
• Supervisors/Leads: Risk of misinterpreting AI-generated insights or trends.
• Security Teams: New attack surface for prompt injection and data exfiltration.
• Compliance Teams: Challenges in auditing data access and usage across integrated platforms.

The Action

1. Review and enforce Microsoft Purview Data Loss Prevention (DLP) policies for Copilot interactions.
2. Implement Conditional Access policies to restrict Copilot access based on device compliance and location.
3. Conduct prompt engineering training for agents to mitigate prompt injection risks.
4. Audit Copilot usage logs in Microsoft 365 Audit Log for anomalous data access patterns.
5. Review Dynamics 365 security roles and permissions to ensure least privilege for Copilot integration.

Domain: Agentic-AI · Impact: high · Workload: Other