2Data protection and governance for Microsoft 365 and Copilot

• 2.1Data protection with Microsoft Purview

  Understand the key Microsoft Purview capabilities (Information Protection and sensitivity labels, Data Loss Prevention (DLP), Insider Risk Management, Communication Compliance, DSPM for AI, Data Lifecycle Management) plus data classification and retention.

• 2.2Data security of Copilot

  Understand how Microsoft 365 Copilot accesses data, how Microsoft Graph influences its responses, how Copilot is protected against risks via permissions and controls in Microsoft 365/Purview/Defender, and responsible AI principles.

• 2.3Data protection risks and SharePoint oversharing

  Understand ways to identify risks—Compliance Manager, Purview Data/Activity Explorer, Insider Risk Management, DLP alerts, Communication Compliance violations, DSPM for AI, eDiscovery Content search—and how to identify SharePoint oversharing (data access governance report, SharePoint Advanced Management restricted site access).