Kurt Shintaku's Blog

Are you a government organization looking to secure your organizations data in preparation for deploying Artificial Intelligence solutions like Microsoft 365 Copilot? Do you need to proactively monitor Artificial Intelligence’s use in your organization?

I’m pleased to announce that Microsoft Purview Data Security Posture Management (DSPM) for AI (formerly known as Microsoft Purview AI Hub) is now available in Microsoft 365 GCC cloud instances!

DSPM for AI provides a central management location to help you quickly secure data for AI apps and proactively monitor AI use. These apps include Microsoft 365 Copilot, other copilots from Microsoft, and AI apps from third-party large language modules (LLMs).

Data Security Posture Management for AI offers a set of capabilities so you can safely adopt AI without having to choose between productivity and protection:

• Insights and analytics into AI activity in your organization
• Ready-to-use policies to protect data and prevent data loss in AI prompts
• Compliance controls to apply optimal data handling and storing policies
• Data assessments to identify, remediate, and monitor potential oversharing of data will be coming to DSPM for AI in April 2025

For details of DSPM for AI, visit, this blog post:

• Accelerate AI adoption with next-gen security and governance capabilities

Documentation is available at:

• Microsoft Purview data security and compliance protections for generative AI apps
• Considerations for DSPM for AI & data security and compliance protections for Copilot
• Permissions for Data Security Posture Management for AI
• List of AI sites supported by Microsoft Purview Data Security Posture Management for AI

For a demonstration of DSPM for AI from our Microsoft Purview for State & Local Government team, check out:

• https://youtu.be/vSK5Gndenr0?t=2580

Licensing requirements:
Functionality available in DSPM for AI depends on the level of licensing one has with Microsoft 365:

• Microsoft G5 or G5 Compliance Licensing:
  • Full access to Data Security Posture Management for Al, including advanced analytics and comprehensive security solutions.
  • Enhanced Al data loss prevention with adaptive protection, dynamically assigning appropriate Data Loss Prevention policies to users based on their risk levels.
  • Comprehensive analytics to detect Al interactions, providing insights into unethical use, user risk, and more across the organization
  • Pre-configured one-click policies across Microsoft Purview solutions to identify and mitigate data security risks.
  • Guided assistance to Al regulations, helping to stay compliant and up-to-date with Al regulations.
  • Support for additional 1st party copilots, enterprise apps, and 3rd party apps (Copilot Studio and ChatGPT Enterprise)
  • Data assessments and oversharing assessments (when available in GCC)
• Microsoft G3 Licensing:
  • Core functionality, including Data Loss Management (DLM) and Manual Information Protection (MIP)
  • Activity Explorer events for Microsoft 365 Copilot only, without prompts/responses shown in the event
  • Limited analytics and reporting capabilities compared to G5
  • No data assessments
• Microsoft 365 Copilot GCC Licensing:
  • Some features of DSPM for Al are available, but with limited functionality compared to G5 and G3