Skip to content

Commit 3f4fcec

Browse files
committed
update dspm for ai module
1 parent c4ced2e commit 3f4fcec

File tree

8 files changed

+58
-19
lines changed

8 files changed

+58
-19
lines changed

learn-pr/wwl-sci/purview-identify-mitigate-ai-risks/includes/configure-dspm-ai.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -4,19 +4,19 @@ Microsoft Purview Data Security Posture Management (DSPM) for AI helps organizat
44

55
Before configuring DSPM for AI, check that your environment meets these requirements:
66

7-
- **[Check permissions](/purview/ai-microsoft-purview-permissions)**: Your account needs appropriate permissions in Microsoft Entra or Microsoft Purview, such as Compliance Administrator or a related role with compliance management permissions.
8-
- **[Verify Microsoft Purview Audit is enabled](/purview/audit-log-enable-disable?tabs=microsoft-purview-portal#verify-the-auditing-status-for-your-organization)**: Auditing is on by default for new tenants, but it's a good idea to verify.
9-
- **[Assign Copilot Licenses](/copilot/microsoft-365/microsoft-365-copilot-enable-users#assign-licenses)**: Users should be assigned Microsoft 365 Copilot licenses for activity tracking.
10-
- **[Onboard Devices to Microsoft Purview](/purview/device-onboarding-overview)**: Devices need to be onboarded to Microsoft Purview to track AI interactions.
11-
- **[Install the Microsoft Purview Browser Extension](/purview/insider-risk-management-browser-support#configure-browser-signal-detection-for-microsoft-edge)**: The Microsoft Purview browser extension is required to monitor non-Microsoft AI site visits.
7+
- **[Check permissions](/purview/ai-microsoft-purview-permissions?azure-portal=true)**: Your account needs appropriate permissions in Microsoft Entra or Microsoft Purview, such as Compliance Administrator or a related role with compliance management permissions.
8+
- **[Verify Microsoft Purview Audit is enabled](/purview/audit-log-enable-disable?azure-portal=true#verify-the-auditing-status-for-your-organization)**: Auditing is on by default for new tenants, but it's a good idea to verify.
9+
- **[Assign Copilot Licenses](/copilot/microsoft-365/microsoft-365-copilot-enable-users?azure-portal=true#assign-licenses)**: Users should be assigned Microsoft 365 Copilot licenses for activity tracking.
10+
- **[Onboard Devices to Microsoft Purview](/purview/device-onboarding-overview?azure-portal=true)**: Devices need to be onboarded to Microsoft Purview to track AI interactions.
11+
- **[Install the Microsoft Purview Browser Extension](/purview/insider-risk-management-browser-support#configure-browser-signal-detection-for-microsoft-edge?azure-portal=true)**: The Microsoft Purview browser extension is required to monitor non-Microsoft AI site visits.
1212

1313
## Steps to configure DSPM for AI
1414

1515
After completing the prerequisites, configure DSPM for AI in Microsoft Purview. This process includes enabling built-in policies, running data assessments, and verifying that AI-related security controls are in place.
1616

1717
### Step 1: Set up DSPM for AI
1818

19-
1. Sign in to the [Microsoft Purview portal](https://purview.microsoft.com/).
19+
1. Sign in to the [Microsoft Purview portal](https://purview.microsoft.com/?azure-portal=true).
2020
1. Navigate to **Solutions** > **DSPM for AI**.
2121
1. From the **Overview** page, go to **Get started** to complete the required setup tasks.
2222
1. Verify that **Microsoft Purview Audit** is enabled to track AI interactions.

learn-pr/wwl-sci/purview-identify-mitigate-ai-risks/includes/data-assessments.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ Microsoft Purview Data Security Posture Management (DSPM) for AI automatically r
88

99
To review the latest weekly assessment:
1010

11-
1. Navigate to **DSPM for AI** in the [Microsoft Purview portal](https://purview.microsoft.com/).
11+
1. Navigate to **DSPM for AI** in the [Microsoft Purview portal](https://purview.microsoft.com/?azure-portal=true).
1212
1. Select **Assessments** from the navigation pane.
1313
1. Open the **Oversharing Assessment for the week of <month, year>**.
1414
1. Review key findings, including:
@@ -48,15 +48,15 @@ After a data assessment runs, security teams can analyze the results and take ac
4848

4949
The **Protect** tab helps security teams limit access to high-risk data and enforce compliance measures. Recommended actions include:
5050

51-
- **Restrict access by label**: Use Microsoft Purview Data Loss Prevention (DLP) to prevent Microsoft 365 Copilot from summarizing data that has specific sensitivity labels. For more information about how this works and supported scenarios, see [Learn about the Microsoft 365 Copilot policy location](/purview/dlp-microsoft365-copilot-location-learn-about).
51+
- **Restrict access by label**: Use Microsoft Purview Data Loss Prevention (DLP) to prevent Microsoft 365 Copilot from summarizing data that has specific sensitivity labels. For more information about how this works and supported scenarios, see [Learn about the Microsoft 365 Copilot policy location](/purview/dlp-microsoft365-copilot-location-learn-about?azure-portal=true).
5252

53-
- **Restrict all items**: Use [SharePoint Restricted Content Discoverability](/sharepoint/restricted-content-discovery) to prevent Microsoft 365 Copilot from indexing specified SharePoint sites.
53+
- **Restrict all items**: Use [SharePoint Restricted Content Discoverability](/sharepoint/restricted-content-discovery?azure-portal=true) to prevent Microsoft 365 Copilot from indexing specified SharePoint sites.
5454

5555
:::image type="content" source="../media/data-assessment-dlp-restrict-items.png" alt-text="Screenshot showing the options in the Protect tab in Data assessments to restrict access to sensitive data." lightbox="../media/data-assessment-dlp-restrict-items.png":::
5656

57-
- **Apply auto-labeling policies**: [Automatically apply sensitivity labels](/purview/apply-sensitivity-label-automatically#how-to-configure-auto-labeling-policies-for-sharepoint-onedrive-and-exchange) to unlabeled files containing sensitive information.
57+
- **Apply auto-labeling policies**: [Automatically apply sensitivity labels](/purview/apply-sensitivity-label-automatically?azure-portal=true#how-to-configure-auto-labeling-policies-for-sharepoint-onedrive-and-exchange) to unlabeled files containing sensitive information.
5858

59-
- **Enforce retention policies**: Use [Microsoft Purview Data Lifecycle Management retention policies](/purview/create-retention-policies?tabs=teams-retention) to delete content that hasn't been accessed for at least three years.
59+
- **Enforce retention policies**: Use [Microsoft Purview Data Lifecycle Management retention policies](/purview/create-retention-policies?azure-portal=true) to delete content that hasn't been accessed for at least three years.
6060

6161
:::image type="content" source="../media/data-assessment-apply-label.png" alt-text="Screenshot showing the options in the Protect tab in Data assessments to manage sensitivity labels and policies for a specific SharePoint site." lightbox="../media/data-assessment-apply-label.png":::
6262

learn-pr/wwl-sci/purview-identify-mitigate-ai-risks/includes/dspm-ai-overview.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -34,11 +34,11 @@ Organizations can also create custom assessments to scan specific users or sites
3434

3535
To support regulatory and security requirements, DSPM for AI integrates with other Microsoft Purview solutions, including:
3636

37-
- **[Sensitivity labels](/purview/sensitivity-labels)** to classify and protect AI-referenced data
38-
- **[Data classification](/purview/data-classification-overview)** to apply security controls based on content type
39-
- **[Customer Key](/purview/customer-key-overview)** for encryption with customer-managed keys
40-
- **[Communication compliance](/purview/communication-compliance-solution-overview)** to detect risky AI interactions
41-
- **[Auditing](/purview/audit-solutions-overview)** and **[eDiscovery](/purview/ediscovery)** for tracking AI activity and managing investigations
37+
- **[Sensitivity labels](/purview/sensitivity-labels?azure-portal=true)** to classify and protect AI-referenced data
38+
- **[Data classification](/purview/data-classification-overview?azure-portal=true)** to apply security controls based on content type
39+
- **[Customer Key](/purview/customer-key-overview?azure-portal=true)** for encryption with customer-managed keys
40+
- **[Communication compliance](/purview/communication-compliance-solution-overview?azure-portal=true)** to detect risky AI interactions
41+
- **[Auditing](/purview/audit-solutions-overview?azure-portal=true)** and **[eDiscovery](/purview/ediscovery?azure-portal=true)** for tracking AI activity and managing investigations
4242

4343
## Get started with DSPM for AI
4444

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
AI tools like Microsoft 365 Copilot are changing how organizations work with data, but they also introduce new security and compliance risks. Traditional security controls weren't designed to track AI interactions or protect sensitive data in AI-generated content. Without a way to monitor AI activity and enforce security policies, organizations risk data exposure, compliance violations, and security gaps.
2+
3+
**Microsoft Purview Data Security Posture Management (DSPM) for AI** helps security teams manage these risks by providing insights into AI activity, security policies to protect sensitive data, and compliance controls to enforce governance. With DSPM for AI, organizations can track AI usage, assess security risks, and apply protections to prevent unauthorized data exposure.
4+
5+
## Scenario
6+
7+
Your organization has started using Microsoft 365 Copilot to improve productivity. Security teams don't have a clear way to track how it's used or what data it accesses. Without visibility, they can't tell if AI-generated content includes sensitive information or if users are sharing regulated data with external AI tools.
8+
9+
To solve this, your team needs to use DSPM for AI to monitor AI interactions, detect potential security risks, and apply policies that protect sensitive information.
10+
11+
## Learning objectives
12+
13+
By the end of this module, you'll be able to:
14+
15+
- Identify security risks in AI interactions
16+
- Monitor AI usage and enforce security policies
17+
- Protect sensitive data in AI-generated content
18+
- Run data assessments to detect oversharing risks
19+
- Use reports to track AI activity and strengthen compliance

learn-pr/wwl-sci/purview-identify-mitigate-ai-risks/includes/review-ai-security-reports.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ The **Reports** section in DSPM for AI provides insights into AI interactions, s
66

77
To view AI activity insights:
88

9-
1. Sign in to the [Microsoft Purview portal](https://purview.microsoft.com/).
9+
1. Sign in to the [Microsoft Purview portal](https://purview.microsoft.com/?azure-portal=true).
1010
1. Navigate to **Solutions** > **DSPM for AI**.
1111
1. Go to **Reports** to review AI-related activity, trends, and risk assessments.
1212

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
AI-powered tools create security and compliance risks that traditional controls don’t fully address. Without visibility into AI interactions, security teams struggle to track data exposure, prevent unauthorized access, and enforce policies to protect sensitive information.
2+
3+
Microsoft Purview Data Security Posture Management (DSPM) for AI helps organizations secure AI interactions by providing insights, security policies, and compliance controls. With DSPM for AI, security teams can monitor AI activity, detect security risks, and apply protections to AI-generated content.
4+
5+
In this module, you learned how to:
6+
7+
- Identify security risks in AI interactions
8+
- Monitor AI usage and enforce security policies
9+
- Protect sensitive data in AI-generated content
10+
- Run data assessments to detect oversharing risks
11+
- Use reports to track AI activity and strengthen compliance
12+
13+
Without DSPM for AI, organizations would have to rely on manual processes to monitor AI interactions, making it harder to detect security risks before they become problems. Using DSPM for AI makes it easier to track AI usage, enforce security policies, and keep sensitive data protected.
14+
15+
## Resources
16+
17+
- [Microsoft Purview data security and compliance protections for generative AI apps](/purview/ai-microsoft-purview?azure-portal=true)
18+
- [Considerations for DSPM for AI & data security and compliance protections for Copilot](/purview/ai-microsoft-purview-considerations?azure-portal=true)
19+
- [Permissions for Data Security Posture Management for AI](/purview/ai-microsoft-purview-permissions?azure-portal=true)
20+
- [List of AI sites supported by Microsoft Purview Data Security Posture Management for AI](/purview/ai-microsoft-purview-supported-sites?azure-portal=true)

learn-pr/wwl-sci/purview-identify-mitigate-ai-risks/introduction.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,6 @@ metadata:
1010
ms.topic: unit
1111
azureSandbox: false
1212
labModal: false
13-
durationInMinutes: 1
13+
durationInMinutes: 3
1414
content: |
1515
[!include[](includes/introduction.md)]

learn-pr/wwl-sci/purview-identify-mitigate-ai-risks/summary.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,6 @@ metadata:
1010
ms.topic: unit
1111
azureSandbox: false
1212
labModal: false
13-
durationInMinutes: 1
13+
durationInMinutes: 3
1414
content: |
1515
[!include[](includes/summary.md)]

0 commit comments

Comments
 (0)