--- title: "Microsoft Copilot: 5 steps to secure data access" description: Microsoft Copilot reinforces the need to properly govern and control Microsoft 365 data. Discover 5 steps to secure data access and sharings easily with data owners image: https://blog.idecsi.com/hubfs/Microsoft%20Copilot%20%205%20conseils%20pour%20s%C3%A9curiser%20les%20donn%C3%A9es.png --- [![Logo-Idecsi-Black-tagline](https://blog.idecsi.com/hs-fs/hubfs/LOGOS%20IDECSI/LOGOS%20OFFICIELS/Logo-Idecsi-Black-tagline.png?width=1010&height=319&name=Logo-Idecsi-Black-tagline.png)](https://www.idecsi.com/) - Solutions DETOX® pour M365 Audit, Remediation & ROI [Discover DETOX](https://info.idecsi.com/detox-m365?hsLang=en) ![Audit, Remediation & ROI](https://blog.idecsi.com/hubfs/ILLU-4.png) Solutions IDECSI gives security and IT teams full control over their data — across DSPM, Data Access Governance, Human Risk Management, and Data Volume Management. - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) M365 Data Security Platform](https://www.idecsi.com/solution/mydatasecurity/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Data storage optimization](https://www.idecsi.com/solution/mydatamanagement/) - Challenges M365 Checklist 15 Warning Signs Your M365 Data Is at Risk [Get the checklist](https://info.idecsi.com/checklist-15-warningsigns?hsLang=en) ![Checklist risques M365](https://blog.idecsi.com/hubfs/Frame-2147255341.png) Your 2026 Challenges Address your most critical data security and governance challenges - across your M365 environment - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Gain visibility accross M365](https://www.idecsi.com/challenges/visibility-microsoft-365) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Get Ready For Copilot M365](https://www.idecsi.com/challenges/m365-copilot/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Control external user access](https://www.idecsi.com/challenges/external-access-microsoft-365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Prevent Sensitive Data Exposure](https://www.idecsi.com/challenges/sensitive-data-m365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Gain visibility across Microsoft 365](https://www.idecsi.com/challenges/visibility-microsoft-365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Ensure regulatory compliance](https://www.idecsi.com/challenges/compliance-m365/) - Resources Is Your Tenant Ready for Copilot? A Security & Governance Playbook [Download](https://info.idecsi.com/whitepapper_copilot?hsLang=en) ![Copilot guide](https://blog.idecsi.com/hubfs/Frame-2147255339.png) Our resources Check out our useful resources for improving data protection - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Blog](https://blog.idecsi.com) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Help Center](https://help.idecsi.com/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Ressources & News](https://blog.idecsi.com/resources?hsLang=en) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) About us](https://www.idecsi.com/about-us/) - [Customers](https://blog.idecsi.com/resources-customer?hsLang=en) - - [English](https://blog.idecsi.com/copilot-advice-data-access-secure) - [Français](https://blog.idecsi.com/fr/copilot-5-conseils-sécuriser-accès-aux-données) Search [Request a demo](https://info.idecsi.com/demo-idecsi?hsLang=en) Microsoft 365 23 February 2024 # Microsoft Copilot: 5 steps to secure data access ![Microsoft Copilot data access secure](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Microsoft%20Copilot%20%205%20conseils%20pour%20s%C3%A9curiser%20les%20donn%C3%A9es.png) - [Home](https://www.idecsi.com/) - [Blog](https://blog.idecsi.com) - Microsoft Copilot: 5 steps to secure data access The arrival of the [**generative AI Microsoft Copilot**](https://blog.idecsi.com/microsoft-copilot-generative-ai?hsLang=en) increases productivity, research and information access capabilities in the Microsoft 365 environment and therefore reinforces the need to properly govern and control data access within all Microsoft apps Teams, SharePoint, OneDrive, Outlook, and more.  Accurate management of access, rights and sharing seems essential before deploying Copilot AI to ensure that users only have access to appropriate data and avoid content oversharing. Here are 5 tips for making data access secure when deploying Copilot: 1. [Understand how data is shared](https://blog.idecsi.com/copilot-advice-data-access-secure#donnees) 2. [Explore risks on the Microsoft 365 tenant](https://blog.idecsi.com/copilot-advice-data-access-secure#risques) 3. [Minimise the risk of overexposure](https://blog.idecsi.com/copilot-advice-data-access-secure#surexposition) 4. [Manage data access over time](https://blog.idecsi.com/copilot-advice-data-access-secure#gestion) 5. [Support change management](https://blog.idecsi.com/copilot-advice-data-access-secure#changement) ## 1\. Understand how data is shared Before deploying Copilot, companies must carry out an analysis and a snapshot of their data and information assets. The challenge is to understand how information stored in OneDrive or SharePoint is shared inside and outside the organization, where the data is located, who handles the most sensitive and strategic data, how the data is shared, and who has access to what. - **Maintain a global view of the information in the Microsoft 365 environment** and the resources of each user: the number of shared mailboxes, OneDrive, Teams groups, Sharepoint sites, etc. - Maintain a view by user or data type: depending on whether or not the data is sensitive, it is essential to also get a more detailed view of the data.   ## 2. Explore risks on Microsoft 365 Analysing risks when deploying a tool like Microsoft Copilot is essential in order to identify the potential risks and threats to which the information system may be exposed and to minimise the attack surface. The Microsoft Copilot tool relies on the permissions or access policies put in place. This means that it will not offer any document or information to a person who does not have the right to access it. However, **the risk of unauthorised, malicious access may occur if rights and authorisations are not configured in a compliant manner**. It is therefore necessary to pay particular attention to accesses and authorisations by, for example, mapping data accesses, rights and permissions in order to identify sensitive and critical points and correct them. - **Evaluate data exposure**: number of anonymous shares, public SharePoint and Teams sites (with or without owner). - **Visualise points of focus,** highlighting a potential risk linked to configurations for sharing (anonymous links, to the entire company, guest access), access, authorisations for each resource collected. Examples of points of focus:   - Guests accessing sensitive sites - Extended rights to sensitive data (labelled with [**Purview**](https://blog.idecsi.com/classify-protect-sensitive-data?hsLang=en) for example) - Public SharePoint and Teams sites without an owner Visualising critical points on information assets allows the company to clearly see the risk of data overexposure data or non-compliant access in order to establish an appropriate action and remediation plan.  [![Case studies, webinar, guides.... discover our resources center](https://blog.idecsi.com/hs-fs/hubfs/Case%20studies%2c%20webinar%2c%20guides....%20discover%20our%20resources%20center.png?width=458&height=175&name=Case%20studies%2c%20webinar%2c%20guides....%20discover%20our%20resources%20center.png)](https://blog.idecsi.com/resources?hsLang=en) ## 3\. Reduce the risk of overexposure In a "secure by design" approach, once the risks have been analysed, it is important to be able to minimise the attack surface and remedy critical points. When deploying the Copilot tool, ensure you have processes to identify potentially overshared content and notify data owners to individually remediate or automate it. - **Rights management by administrators**: based on the results of the audit carried out beforehand, administrators can correct how groups, roles and sensitive sites are configured based on the principles of least privilege and need to know. - **Rights management by data owners:** in practice, users grant rights, create groups, share and much more on a daily basis. This large volume of data requires the addition of users, who are the data owners, in order to manage access authorisations and clean up critical permissions as much as possible, thus strengthening access security. Example of actions by data owners:     ## 4. Manage data access over time One of the main difficulties of this type of management is its evolving nature, in perpetual motion. Every day new files are created and shared, new permissions are granted. Is there any sharing controls (e.g. default sharing link, link expiration, site owner sharing approvals)? How to investigate changes, audit regulary?  - **Set up data access reviews and regularly audit :** once every three or six months for example, beyond the security and compliance benefits, this helps get users used to this process of revalidating access and data sharing and encourages good practices. - **Make security simple and effective for those involved:** for data owners/managers, their task must be made as simple as possible: simplified view of all accesses, simple options for correcting obsolete rights or illegitimate accesses, etc. [![MyDataSecurity : discover it in 1 minute](https://blog.idecsi.com/hs-fs/hubfs/Signature-Video-MDS-5-EN.png?width=474&height=155&name=Signature-Video-MDS-5-EN.png)](https://www.idecsi.com/solution/mydatasecurity/) ## 5. Support change management Generative AI is a powerful and innovative tool that enables considerable productivity gains. To get maximum benefits, these new uses must be supported with practical cases and training. It is also essential to regulate these uses by adding limits and making users responsible for the risks, particularly around data security and the consequences of poor configuration/sharing, for example. Implementing the Copilot tool is a guarantee of trust in end users but it requires a secure approach. **To protect against the risks of data leaks and malicious intent, it is useful to implement an effective Data Access Governance strategy in which the user is a stakeholder. **This process includes data inventory, cleaning, stakeholder engagement and user training. *Read more: [Microsoft Copilot: the challenges for Data Security](https://blog.idecsi.com/copilot-challenges-data-security-m365?hsLang=en)* ## DETOX FOR MICROSOFT 365: ONLY 2 STEPS TO REDUCE DATA EXPOSURE The new [DETOX dynamic audit solution for Microsoft 365](https://info.idecsi.com/detox-m365?hsLang=en) gives our customers the resources to effectively prepare for the mass adoption of the Microsoft Copilot generative AI tool. **It is an “all-in-one” solution that aims to avoid overshared content by eliminating  dangerous, risky or obsolete access, thanks to a dynamic audit and automate remediation. ** [**![DETOX for Microsoft 365](https://blog.idecsi.com/hs-fs/hubfs/BLOGPOST-DETOX-EN.jpg?width=496&height=260&name=BLOGPOST-DETOX-EN.jpg)**](https://info.idecsi.com/detox-m365?hsLang=en) The solution includes an audit phase (collecting and analysing meta data) with the results output via simple and clear dashboards (tenant status, risks, problem areas to be corrected). The great strength of the DETOX solution is that it provides for **mass remediation by data owners**. Users who have critical points to correct are targeted with a revalidation and verification campaign. They receive a personal dashboard, [**MyDataSecurity**](https://www.idecsi.com/fr/solution/mydatasecurity/), and check and correct points that require action (validation or correction). **First audit, remediate and then track the changes to keep the environement compliant and secure.** [START YOUR DATA RISK ASSESSMENT 👉](https://info.idecsi.com/detox-m365?hsLang=en) Recent articles [Microsoft 365 SharePoint Storage Costs in 2026: What's Changing](https://blog.idecsi.com/microsoft-365-sharepoint-storage-costs-2026?hsLang=en) [Zero Trust Data Governance for Microsoft 365: CISO Guide](https://blog.idecsi.com/zero-trust-data-governance-microsoft-365?hsLang=en) [Cybersecurity Awareness Month: A CISO's M365 Action Plan](https://blog.idecsi.com/cybersecurity-awareness-month-ciso-action-plan-m365?hsLang=en) [Microsoft Foundry: Complete Guide and Data Security Implications (2026)](https://blog.idecsi.com/microsoft-foundry-guide-security?hsLang=en) Best practices to improve Microsoft Teams security [![Download the infographic ](https://no-cache.hubspot.com/cta/default/4272098/825ad7d1-e961-4a7a-a6b3-6e380b22285f.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/825ad7d1-e961-4a7a-a6b3-6e380b22285f) Share this article Subscribe to our newsletter and receive new contents every month Our articles These articles may interest you ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Co%C3%BBt%20du%20stockage%20Microsoft%20365%20en%202026.png) Microsoft 365 Microsoft 365 SharePoint Storage Costs in 2026: What's Changing [Lire l'article](https://blog.idecsi.com/microsoft-365-sharepoint-storage-costs-2026?hsLang=en) ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Microsoft%20Foundry%20_%20guide%20complet%20et%20enjeux%20pour%20la%20s%C3%A9curit%C3%A9%20%282026%29.png) Microsoft 365 Security Microsoft Foundry: Complete Guide and Data Security Implications (2026) [Lire l'article](https://blog.idecsi.com/microsoft-foundry-guide-security?hsLang=en) ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Illus-Blog-Supervision.png) Microsoft 365 Security Microsoft 365 Phishing: Why Oversharing Makes a Compromised Account Far More Dangerous [Lire l'article](https://blog.idecsi.com/fr/phishing-microsoft-365-risques-donnees-partagees-1?hsLang=en) ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/image%20%2858%29.png) Microsoft 365 Security Securing AI Agents in Microsoft 365: Best Practices for 2026 [Lire l'article](https://blog.idecsi.com/securing-ai-agents-microsoft-365?hsLang=en) ### Data protection, let's discuss your project?   [![Contact us](https://no-cache.hubspot.com/cta/default/4272098/bea4f372-c84f-4ec4-980c-ca663747fbfe.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/bea4f372-c84f-4ec4-980c-ca663747fbfe) ![video background](https://idecsi2a-dev-idecsi.pf27.wpserveur.net/wp-content/uploads/2022/02/video-background-idecsi-responsive-1.png) [![Logo-Idecsi-White-Ss-ES](https://blog.idecsi.com/hubfs/LOGOS%20IDECSI/LOGOS%20OFFICIELS/Logo-Idecsi-White-Ss-ES.svg)](https://www.idecsi.com/) +33 1 84 79 38 30 - - - - [Why choose IDECSI?](https://www.idecsi.com/user-security/) - [About us](https://www.idecsi.com/about-us/) - [Join the team](https://www.welcometothejungle.com/fr/companies/idecsi) - Solutions - [Visibility](https://www.idecsi.com/challenge-data-visibility/) - [Detection](https://www.idecsi.com/challenge-threat-detection/) - [User engagement](https://www.idecsi.com/challenge-involve-user/) - [Access review](https://www.idecsi.com/challenge-rights-review/) - [Remediation](https://www.idecsi.com/challenge-remediation/) - [Sensitive data](https://www.idecsi.com/challenge-sensitive-data/) - [Products](https://www.idecsi.com/solution/) - [MyDataSecurity](https://www.idecsi.com/solution/mydatasecurity/) - [Advanced Monitoring](https://www.idecsi.com/solution/advanced-monitoring/) - [MyDataManagement](https://www.idecsi.com/solution/mydatamanagement/) - Resources - [Resources & News](https://blog.idecsi.com/resources?hsLang=en) - [Blog](https://blog.idecsi.com) - [Customer success](https://blog.idecsi.com/resources-customer?hsLang=en) - [Extranet](https://extranet.idecsi.com?hsLang=en) © IDECSI ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mona Piquet", "url" : "https://blog.idecsi.com/author/mona-piquet" }, "dateModified" : "2024-07-19T14:35:31.970Z", "datePublished" : "2024-02-23T14:28:44.000Z", "headline" : "Microsoft Copilot: 5 steps to secure data access", "image" : [ "https://blog.idecsi.com/hubfs/Microsoft%20Copilot%20%205%20conseils%20pour%20s%C3%A9curiser%20les%20donn%C3%A9es.png" ], "mainEntityOfPage" : { "@id" : "https://blog.idecsi.com/copilot-advice-data-access-secure", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.idecsi.com/hubfs/Logo-Idecsi-Black-tagline.png" }, "name" : "IDECSI" } } ```