Kurt Shintaku's Blog

Discover AI innovations for the security lifecycle designed to give you smarter, faster, stronger security.  At Microsoft Secure, you’ll get a first look into AI-first tools coming soon to help you in your day-to-day work. Plus, we’ll share how you can maximize what you’ve got in your hands right now.   

In 60 minutes, you’ll learn how you can: 

• Harden your defenses: Learn how to secure your data used by AI, AI apps, and AI cloud workloads. Discover the latest tools and techniques to fortify your defenses against evolving threats. 
• Secure your AI investments: Use data security, protection against AI-specific cyberthreats, and compliance tools to secure your AI investments. Our experts will share best practices and strategies to safeguard your AI initiatives, ensuring they remain resilient against emerging threats. 
• Discover AI-first tools and best practices: Hear about new AI-first tools, demos, and best practices across your favorite Microsoft Security solutions. These sessions will provide you with practical insights and hands-on experiences to strengthen your security posture and leverage AI-driven solutions effectively.  
• Keep up with what’s happening in security: Get the latest reports on security trends and platform innovations directly from Microsoft Security leaders. This is your chance to gain insights that can help you stay ahead of emerging threats. 

AGENDA:
Check out the full agenda here.

DATE:
April 9, 2025

REGISTRATION:
Register now and pick the broadcast that works for your time zone. 

ANNOUNCEMENT BLOG:
https://techcommunity.microsoft.com/blog/microsoft-security-blog/ai-innovation-requires-ai-security-hear-what%E2%80%99s-new-at-microsoft-secure/4394130

Microsoft Events at RSAC™ 2025 Conference
Event Date: April 27th-May 1st 2025
Venue Name: Palace Hotel
Venue Address: 2 New Montgomery St, San Francisco, CA 94105

Protecting your business is more challenging than ever before, as you face a rapidly growing threat landscape and manage an increasingly complex technology estate. Microsoft Security can help. Throughout the RSAC™ 2025 Conference, Microsoft Security will offer tailored experiences to equip you with innovative AI-first, end-to-end protection and threat intelligence, so you can be more secure, stay compliant, and lower your total cost of ownership. From Sunday to Thursday during RSAC™ 2025, join Microsoft Security for the chance to:

• Kick off RSAC™ a day early at our Pre-Day–hear from Microsoft leaders, and learn from your peers at our networking reception or CISO Dinner
• Learn from Microsoft Security business leaders and technical experts during the RSAC™ keynote and our other conference sessions
• See live, hands-on demos and theatre sessions all week at the Microsoft booth at Moscone Center
• Network with your peers and hear from Microsoft experts at the Microsoft Security Hub
• Ask your most pressing questions in 1:1 customer meetings at the Microsoft Security Hub
• Recap our product innovation and tour the Microsoft Experience Center at Silicon Valley at our Post-Day Forum

Secure your spot today.

Date/Time:
April 27th-May 1st 2025

Location:
Palace Hotel – 2 New Montgomery St, San Francisco, CA 94105

Registration:
Microsoft RSAC 2025 events Registration

Questions:
Have questions about the events? Contact the Security Events Team

Our Speakers:

• Vasu Jakkal – CVP, Microsoft Security Business
• Charlie Bell – Executive Vice President, Microsoft Security

Are you a government organization looking to secure your organizations data in preparation for deploying Artificial Intelligence solutions like Microsoft 365 Copilot? Do you need to proactively monitor Artificial Intelligence’s use in your organization?

I’m pleased to announce that Microsoft Purview Data Security Posture Management (DSPM) for AI (formerly known as Microsoft Purview AI Hub) is now available in Microsoft 365 GCC cloud instances!

DSPM for AI provides a central management location to help you quickly secure data for AI apps and proactively monitor AI use. These apps include Microsoft 365 Copilot, other copilots from Microsoft, and AI apps from third-party large language modules (LLMs).

Data Security Posture Management for AI offers a set of capabilities so you can safely adopt AI without having to choose between productivity and protection:

• Insights and analytics into AI activity in your organization
• Ready-to-use policies to protect data and prevent data loss in AI prompts
• Compliance controls to apply optimal data handling and storing policies
• Data assessments to identify, remediate, and monitor potential oversharing of data will be coming to DSPM for AI in April 2025

For details of DSPM for AI, visit, this blog post:

• Accelerate AI adoption with next-gen security and governance capabilities

Documentation is available at:

• Microsoft Purview data security and compliance protections for generative AI apps
• Considerations for DSPM for AI & data security and compliance protections for Copilot
• Permissions for Data Security Posture Management for AI
• List of AI sites supported by Microsoft Purview Data Security Posture Management for AI

For a demonstration of DSPM for AI from our Microsoft Purview for State & Local Government team, check out:

• https://youtu.be/vSK5Gndenr0?t=2580

Licensing requirements:
Functionality available in DSPM for AI depends on the level of licensing one has with Microsoft 365:

• Microsoft G5 or G5 Compliance Licensing:
  • Full access to Data Security Posture Management for Al, including advanced analytics and comprehensive security solutions.
  • Enhanced Al data loss prevention with adaptive protection, dynamically assigning appropriate Data Loss Prevention policies to users based on their risk levels.
  • Comprehensive analytics to detect Al interactions, providing insights into unethical use, user risk, and more across the organization
  • Pre-configured one-click policies across Microsoft Purview solutions to identify and mitigate data security risks.
  • Guided assistance to Al regulations, helping to stay compliant and up-to-date with Al regulations.
  • Support for additional 1st party copilots, enterprise apps, and 3rd party apps (Copilot Studio and ChatGPT Enterprise)
  • Data assessments and oversharing assessments (when available in GCC)
• Microsoft G3 Licensing:
  • Core functionality, including Data Loss Management (DLM) and Manual Information Protection (MIP)
  • Activity Explorer events for Microsoft 365 Copilot only, without prompts/responses shown in the event
  • Limited analytics and reporting capabilities compared to G5
  • No data assessments
• Microsoft 365 Copilot GCC Licensing:
  • Some features of DSPM for Al are available, but with limited functionality compared to G5 and G3

Power BI Admin Monitoring Deep Dive in GCC – Power BI in Government

March 27, 2025 – 11:00AM-12noon PT

Description: This Community Call on “Power BI Admin Monitoring & Logging” will cover an introduction to the topic, an overview of key concepts, and a detailed look at the features and tools available for monitoring and logging in Power BI. It will also include best practices, real-world use cases, and a Q&A session to address attendees’ questions. The webinar will conclude with a recap of key points and additional resources.

No need to register!
At the date and time of the meeting click on this link to join the Community Call:
https://aka.ms/JoinCommunityCall 
(The Teams Meeting link will activate 10 mins before meeting date/time)

——————-

Join us for future community calls!

Power BI in Government for State & Local Government Community Calls 
Presented by Microsoft

Join us for our dynamic State and Local Government Power BI Community calls!
Held regularly, these sessions are your gateway to innovation and knowledge.
Check out the schedule for our upcoming and past calls.

Last month’s presentation:  Using Power BI with OneDrive/SharePoint Document Library
Jan 30th2025 Presentation – Power BI in Government

Everyone is concerned about security, but are you concerned about data governance?

• CLASSIFICATION: How can our organization automatically discover & classify files, messages, chats & database data?
• POLICIES: How can we establish policies to reset permissions, encrypt, quarantine, or even delete these files, messages, chats or database data?
• BLOCK AI: Is there a way to block Artificial Intelligence from examining/reasoning over certain classifications of data in our organization?
• RETENTION/DELETION: How about retention policies mandating copies for 3 years? Or deletion policies for data older than 7 years? How can we establish all of that?

Microsoft Defender & Purview Security Governance & Compliance – for Microsoft 365
The following technologies are what’s covered in Microsoft 365 G5 license in terms of Security, Governance & Compliance. 

• Entra ID Protection
• Defender for Endpoint Plan 2
• Defender for Cloud Apps
• Defender for Identity
• Defender for Office 365 Plan 2
• Risk-based Conditional Access
• Purview AI Governance
• Purview App Governance
• Purview Data Loss Prevention & Teams Data Loss Prevention
• Purview Endpoint Data Loss Prevention
• Purview Data Lifecycle Management
• Purview Information Protection, Rules-based Classification & Trainable Classifiers
• Purview Insider Risk Management
• Purview Compliance Management & Premium Compliance Templates
• Purview Communications Compliance
• Purview Records Management
• Purview eDiscovery Premium
• Purview Audit Premium
• Purview Encryption (Message Encryption Advanced, Customer Key, Double Key Encryption, Customer Lockbox)

Reminder: Over 20+ Unified Enterprise services offerings for Planning, Implementing, Supporting both “Defender” & “Purview” security, compliance & governance services are available through your Unified Enterprise contract. This provides subject matter expertise to your team through your contract, utilizing the proactive credit on contract, requiring no additional contracting involved.

Microsoft Purview Data Governance – For Data, Databases, Azure Data Services
Data Governance – specifically for Azure-based data sources & other databases is a different topic.  Originally called “Azure Purview”, Purview Data Governance has the ability to inherit & leverage certain “centralized features” from Microsoft 365 Purview such as “data classification definitions”, however it is a separate service specifically targeting the governance of data with “databases”. 

To be clear, while it is related to Purview for Microsoft 365, Purview Data Governance is charged separately to Azure based on usage/consumption & is not part of Microsoft 365. It covers:

• Purview Data Map
• Purview Data Catalog

If you’re lucky enough to have a Copilot key on your keyboard, you know how convenient it is to be able to quickly call up the Microsoft 365 Copilot wherever you are in the Window interface. And most power users are aware of the Win+C keyboard shortcut which OPENS the Microsoft 365 Copilot app on Windows desktop to quickly ask questions or start a Copilot action.

But is there a keyboard shortcut to HIDE the Microsoft 365 Copilot app?

CTRL+SHIFT+WIN+ALT?
Yeah, it’s Ctrl+Shift+Win+Alt. This Opens/Hides the Microsoft 365 Copilot app on Windows desktop. It’s kind of a messy keyboard combo but I’ve found that I’ve gotten used to it vs. hitting Win+C because it’s sort of a button smash & quickly opens Microsoft 365 Copilot… and quickly hides it when I press it again.

One other way is to remap keys using PowerToys at the link below.
Microsoft PowerToys | Microsoft Learn

1. Download and install the Microsoft PowerToys tool from the official Microsoft website.
2. Open the PowerToys utility and select the Keyboard Manager tab.
3. Click the Remap a key button.
4. Select the Copilot key from the Physical Key drop-down menu.
5. Select the key to which you want to remap the Copilot key from the Map to drop-down menu, and you can choose to try the same Copilot key or turn on Copilot’s features (if available).
6. Click OK to save the changes.

The OneDrive Customer Office Hour is for admins, partners, and power users to ask the OneDrive team questions, share feedback, and learn more about the features we’re building. For a full description visit https://learn.microsoft.com/en-us/sharepoint/onedrive-office-hours.

Typically, the webinar is delivered by Trent Green, Senior Product Manager for OneDrive & is run every 3rd Wednesday of the month from 8:00AM-9:00AM PST.

Agenda     

• Upcoming events & updates (Rob N)  
• What’s new on the OneDrive Roadmap (Irfan S)
• Unlicensed OneDrive User Accounts + Q&A. (Trent G) 

*This webinar will be recorded and viewable after session has ended.

Next OneDrive Office Hours:
Wed, March 19th, 2025 8:00 AM – 9:00 AM (UTC-08:00) Pacific Time (US & Canada)

• http://aka.ms/OneDriveofficehours

Add to Calendar:

• http://aka.ms/officehourscalendar

Past Office Hours Recordings:

• OneDrive Office Hours | February 2025
• OneDrive Office Hours – Past Recordings YouTube Channel