Nira (acquired by Dropbox)

Microsoft Copilot can unlock massive value for companies, but the Generative AI assistant also ushers in security risks. IT and Security teams must understand Copilot’s available plans, inherent risks, and best security practices to ensure a safe Copilot rollout. This guide covers: 1. Copilot’s different plans and their costs.? 2. The security, compliance, and legal considerations of Copilot usage. 3. Tips for a secure Copilot rollout. 4. FAQs about access, cost, security, and more. Get the guide below.

Sebastian Alamo, Legal and Business Operations Lead at Graphite, understands the importance of speed and ease of use in information security. That’s why he and the Graphite team turned to Nira. With Nira, Sebastian can reduce access risks, in mere minutes. “I recommend Nira for two reasons: the simplicity of the tool—how it makes a complex issue simple—and how it allows people without an information security background to take effective action quickly,” Sebastian said. Read the full story: https://lnkd.in/g7KFjHPy

Reports that Google is considering a paywall for some of its AI-powered search features have caused a stir, bringing up questions of accessibility to information, resources, and tools—regardless of socioeconomic background, reports TechRadar.

Enterprise companies are rapidly testing and adopting AI assistants like Copilot for Microsoft 365 and ChatGPT. In many cases, the choice is simple: use AI assistants to unlock growth and efficiency, or risk losing ground to competition. But with Copilot's benefits come risks. CISOs and security teams are tasked with ensuring #GenAI assistants are rolled out and leveraged securely, weighing the risks and rewards. Privacy issues, sensitive data exposure, and compliance challenges are major concerns teams must consider. Before a company deploys Copilot for Microsoft 365 or other Copilot tools, robust AI governance must be in place. More considerations for CISOs and security teams in the first comment:

Nation-state attackers continue to use native Microsoft services to host their command-and-control (C2) needs. Groups are hijacking Microsoft Graph, which provides an easy way for attackers to run C2 infrastructure using 365 services, especially OneDrive, writes Nate Nelson for Dark Reading.

Graphite President Marcos Ciarrocchi needed to secure hundreds of thousands of files in Google Drive, so his team reached out to Nira. Using the Nira platform, Ciarrocchi can log in and view the exact number of shared files, who owns them, and then restrict their access—in a few clicks of a button. “We can’t get this level of visibility and control of file permissions without Nira,” Marcos said. The team can quickly clean up file access and gain peace of mind, relieving any anxiety they may have felt. “I feel relieved: Nira gave us a quick way to create an inventory of our files and make sure the right people have access to them,” Marcos said. Read the full story in the comments below.

The rise of Generative AI chatbots demands clear security protocols—and CISOs want their teams to be ready. Before a company deploys Copilot for Microsoft 365 or other Copilot tools, robust AI governance must be in place. CISOs and security teams need to consider: 1. The security, compliance, and legal risks of Microsoft Copilot. 2. Prioritizing Data Access Governance (DAG) as part of their Enterprise AI program. 3. Taking concrete steps to ensure a secure Copilot rollout. Read more in the comments below.

The original idea behind Google Drive labels was to help users manage and optimize their workflows. However, that role has expanded to include #InfoSec measures, especially related to data loss prevention. Administrators have several actions they should be aware of when it comes to #DLP and labels in Google Workspace. Link in the first comment.

Laura Grace Ellis, VP of Data and AI at Rapid7, highlights why AI governance increasingly matters and how companies can implement it, starting with a foundational approach and gradually expanding efforts.

Enterprise AI tools are everywhere, but CISOs and security teams have concerns. Companies are eager to deploy AI chatbots like Google Gemini and Microsoft Copilot, but security risks remain. Privacy issues, indirect prompt injections, and bad permissions are a few risks companies must be aware of before rolling out Gemini or Copilot. We wrote a guide on the security risks of Google Gemini vs. Microsoft Copilot. Learn the risks and how to reduce them before deploying #AI tools in your company.?