Find and fix oversharing The objective Prevent oversharing of sensitive data in Microsoft Purview DSPM: oversharing trends, key metrics and risk patterns, a remediation plan with five actions (data risk assessments for Microsoft 365 and Fabric, a default sensitivity label, a DLP policy for Copilot, and item-level scanning), the default data risk assessment for the top 100 SharePoint sites, item-level scanning with an app registration, the Identify, Protect and Monitor actions, and Remediation actions to track the work. W DATA SECURITY POSTURE MANAGEMENT Find and fix oversharing Ada Admin Eli Employee WHY OVERSHARING Copilot shows what people can already open Copilot respects permissions. If a file is shared with everyone,Copilot can use it in an answer to anyone. OVERSHARED, IN DSPM Unlabeled, contains sensitive info, and shared beyond what's needed. Fix access first, then limit what Copilot can use. A label alone doesn't stop Copilot. Encryption or a DLP policy for Copilot does. ITEM LEVEL Fix single items, right in DSPM Remove sharing linkClose a link thatshares too widely. Apply sensitivity labelLabel the item whereit lies. NotifyAsk the owner toreview the access. ResolveMark it as handledwhen it's fine. Needs item-level scanning in a custom assessment. SharePoint only, not OneDrive. Up to 200,000 items per location. DATA RISK ASSESSMENTS Identify, protect, monitor 1 IDENTIFY Weekly results from thedefault assessment, or acustom one for chosensources and users. 2 PROTECT Restrict access by labelDLP keeps Copilot away fromlabeled content. Restrict all itemsKeep Copilot from finding a site. Auto-labelingLabel what's on the site. RetentionDelete what no one opened in 3 years. 3 MONITOR Start a SharePoint siteaccess review, so the siteowner confirms whoshould have access. Microsoft Purview Data security objectives Each objective highlights key risks to address, actions to take, and progress over time. Data security objectives › Prevent oversharing of sensitive data Objective: Prevent oversharing of sensitive data Prevent users in your organization from sharing access to items that are unlabeled and contain sensitive information, beyond what is necessary or appropriate. Data oversharing trends 308.4K231.3K154.2K77.1K0 09/20/2609/27/2610/04/2610/11/2610/18/26 Total unscanned itemsOvershared itemsTotal unlabeled items 💡 Remediation plan to prevent oversharing (5 actions)Reduce oversharing of sensitive data within your organization. View remediation plan Key oversharing metrics Oversharing risk patterns Review oversharing risk pattern activity in the last 30 days. View oversharing reports Data risk assessments Microsoft 365Fabric Assess and prevent oversharing ⊗ Item-level scan not setup Create or update your app credentials to turn on item-level scanning. Setup connection Default assessment Assess oversharing of sensitive data for the top 100 SharePoint sites based onhow many times the sites are accessed, over the last 30 days. Results Total items214.8K Sensitive data detected103.6K Links accessed by Anonymous/External0 Last updatedOct 17, 2026Next updateOct 24, 2026FrequencyWeekly Custom assessment statusNo data available Custom assessments (preview) Custom assessments review specific data sources and users. If the results are expired, duplicate the assessment. + Create custom assessment 0 items Remediation actions Not Started16 Dismissed0 Completed0 ↻ Refresh16 items RecommendationTypeObjectiveAction done by ⌄ Not Started (16) Remediation plan: Prevent oversharing of sensitive data Increased risks detected in the last 30 days Unlabeled and sensitive data are at risk of being overshared beyond intended audiences. Remediation plan Complete the following actions to reduce oversharing and improve data protection. ⚠Select an action for detailsWhen you select an action, the details will show up here. › Hide details Create a default sensitivity label Default sensitivity label A default sensitivity label applies consistent labeling and protection. You set it up in Information Protection's label policies. Steps at a glance 1. Select Go to Information Protection. 2. Select an existing label policy, or select Publish label. 3. Follow the steps to configure a default sensitivity label. What to expect • You select the default sensitivity label to apply for each asset. Go to Information Protection ↗ Cancel Authenticate application Federated CredentialsClient Secret Use the values below to configure Federated Credentialson your app registration, then enter the Application ID. OIDC Issuer URLhttps://northeurope.oic.prod-aks.... Namespacedefault Service Account Nameasset-registry-sa Application ID *00000000-0000-0000-0000-000000000000 Authenticate Save Cancel Good to know 1/7 DATA SECURITY POSTURE MANAGEMENT Find and fix oversharing Copilot shows people what they can already open. We follow the oversharing objective from risk patterns to a remediation plan, data risk assessments and the actions that fix it. informasjonsbeskyttelse.no