Question

A financial services company has deployed Microsoft 365 Copilot to 5,000 employees. The Chief Compliance Officer requires the ability to (1) discover which sensitive data types Copilot is accessing in generated responses, (2) capture the full text of user prompts and Copilot responses for regulatory retention, and (3) detect risky AI usage such as attempts to generate content that violates conduct policies. The architect must design a governance solution using native Microsoft capabilities. Which combination of Microsoft Purview capabilities BEST satisfies all three requirements?

Accepted Answer

Use Data Security Posture Management (DSPM) for AI to discover sensitive data interactions, enable Audit (Premium) with Copilot interaction logging for prompt/response retention, and use Communication Compliance policies scoped to Copilot to detect conduct violations.

Answer

Deploy Defender for Cloud Apps session policies to inspect Copilot traffic, configure Azure Policy to block sensitive queries, and use Sentinel analytics rules to alert on prompt content.

Answer

Apply endpoint DLP policies to block Copilot on managed devices, enable mailbox auditing for response capture, and use Insider Risk Management sequence detection to flag prompts.

Answer

Use Conditional Access to require compliant devices for Copilot access, enable eDiscovery Premium holds to capture interactions, and configure sensitivity labels to classify Copilot output.