CTRL + ALT + Data Security - 30th May 2024

Hi Team - plenty happening this week in updates, especially after MS Build; I will be recapping some additional capabilities presented in Fabric next week, so look forward to that.

In the meantime, Lou Mercuri and I have restarted our Coast 2 Coast YouTube channel, essentially walking through Data Security updates, showing off use cases and demonstrating on how some of these capabilities work.

First cab off the ranks is our series covering Data Security in the era of AI - if you have not seen it yet, please give it a watch, and if you find it valuable subscribe; it's your interest that will have us continuing the creation of video content!

The link to the episode is here: Coast 2 Coast - Data Security in the era of AI

Now, let dive into this week's updates!

Product Updates and Announcements

Microsoft Purview integration in Copilot Studio (Public Preview) and Azure AI Studio (coming soon)

In case you didn’t catch the updates at MS Build, we’ve unveiled some exciting new features to empower developers in crafting AI Apps with robust security and compliance measures baked in:

Copilot Studio and Azure AI Studio Integration: This enhancement offers a transparent view into app interactions with sensitive data, recognising and respecting the sensitivity labels attached to the data in use. It ensures the protection of sensitive data produced by the app through label inheritance and adheres to label permissions, restricting data access strictly to authorized personnel. Moreover, it supports governance in app development by tracking and logging developer activities for auditing purposes.

Purview SDK (Arriving Soon): A suite of APIs designed for seamless integration by code developers, enabling enterprise-level data security, compliance, and governance controls with minimal coding effort.

These integrations are not just about adhering to compliance standards; they’re about embedding a culture of security and governance within the fabric of our development processes.

Announcement blog and additional details can be found here: https://techcommunity.microsoft.com/t5/security-compliance-and-identity/secure-and-govern-your-custom-built-ai-apps-with-microsoft/ba-p/4146187

Insider Risk Adaptive Protection - HR resignation date as a condition for risk level is rolling out to General Availability

• Dynamically assigns appropriate DLP policies to users based on the risk levels defined and analyzed by the machine learning models in insider risk management.
• Admins can now select the HR resignation date as a condition to assign: Minor, Moderate, or Elevated risk level.

Roadmap item can be found here: https://www.microsoft.com/en-au/microsoft-365/roadmap?filters=&searchterms=171748

AI Hub in Public Preview

I’ve been talking about this quite a bit, but it’s finally here – the AI Hub is now open for public preview and ready for you to dive in!

Within the Microsoft Purview portal and the Microsoft Purview compliance portal, you’ll find the Microsoft Purview AI hub prominently featured. It’s organised into three intuitive tabs: analytics, policies, and activity explorer.

Analytics will display getting started steps, recommendations, and insights into AI usage.

Policies will display recommendations and policies that have been created by Microsoft Purview AI hub.

Activity explorer will display events related to AI.

Improved Trainable Classifiers now in Public Preview!

Our improved version will replace the existing instance of this feature, the benefits are:

• Faster training time, with no need for a background model to be created prior to the custom classifier creation.
• Simpler sample document gathering – only a positive sample set, and negative sample set is required at the beginning of training.
• Automatic testing - No longer is a test set of both positive and negative samples required at the testing stage. Now this is automatic.
• More clarity around the trainable classifier creation flow and results.

Blogs and Media

Vasu Jakkal - our Corporate Vice President Security, Compliance, Identity, Management & Privacy has recently started her own newsletter - Heart of Security, heaps of great insights there, so if you don't already subscribe it's well worth it!

Check it out here - Heart of Security

and finally for this week, I should mention a great podcast that I myself have been a guest of - All Things M365 Compliance - hosted by the great Ryan John Murphy and Nikki Chapple talking about how Microsoft Purview can be designed and deployed into your environment.

I will link my episode here, but there is so much great content to go through - its well worth your time subscribing and listening to experts talk about their craft!

Check it out here: All Things M365 Compliance Podcast