What is DSPM? Microsoft Purview Data Security Posture Management (DSPM) helps you discover, protect and investigate sensitive data risks. It reads signals from Information Protection, DLP, Insider Risk Management and Data Security Investigations, plus audit and collection policy data for AI. The Posture page shows three key metrics, top objectives and a data snapshot. Objectives rank data security goals by risk, and each has a remediation plan with recommended policies and estimated impact. AI observability lists agents and AI apps with risk levels. W DATA SECURITY POSTURE MANAGEMENT What is DSPM? Ada Admin Eli Employee THE PROBLEM Where is your sensitive data, and is it safe? People create and share data every day. Now agents do too, much faster. Policies have gaps, labels get lowered, and data gets pasted into AI apps. FOUR QUESTIONS What data do we have? Where is it stored? Who can access it? How is it protected? Many tools give many partial answers. DSPM puts them in one place. WHAT IT IS Discover, protect and investigate in one place DSPM shows the risks to your sensitive data in order of priority, andmeasures how well your data security policies work. It reads signals and settings from the solutions you already use: No policies yet? You can still start. Built-in classifiers find sensitive data and give you a first assessment. HOW IT IS BUILT Measure, prioritize, act, follow up Microsoft Purview Data Security Posture Management Discover and secure your sensitive data in Microsoft 365 and non-Microsoft 365 data sources, including data accessed in AI apps and agents. ✦ CopilotWhich devices were involved in exfiltration activities?3 more ⌄ Key posture metrics Review key data security posture metrics for your organization's data sources from the last 30 days. DData discoveryClassified and labeled assets0.88%↗ 0.032% in 27 days PData protectionActivities covered by DLP7%↗ 7% in 30 days IData investigationData protection alerts triaged0%→ 0% in 30 days Three questions How much of our data is classified?How much activity does DLP cover?How many alerts have we handled? Featured insights Secure AI data for apps and agents built in Microsoft Foundry Your AI apps and agents in Microsoft Foundry may be accessing sensitive data outside your current security policies. Top objectives to protect sensitive data View all objectives → Data snapshot Your organization's data exposure for newly accessed or modified data and older data. Stale data 2.9M (>1 year) Accessed or modified more than a year ago. 🏷 LabeledExfiltrated0+0% ⊘ Not labeledExfiltrated0+0% Fresh data 391.5K (<1 year) Accessed or modified in the last year. 🏷 LabeledExfiltrated0+0% ⊘ Not labeledExfiltrated0+0% Data security objectives Each objective highlights key risks to address, actions to take, and progress over time. Data protectionData discovery Data security objectives ! PData protection Prevent data exposure in Microsoft 365 Copilot and Microsoft Copilot interactions 60 interactions with sensitive data in the last 30 days. 60 interactions→ +0% in last 30 days 60User prompts 230Copilot responses 95.3KFiles overshared Take action to reduce risk Taking action could reducesensitive interactions from60 to 0, about a 100%decrease. View remediation planCopilot prompts View objective → ! PData protection Prevent oversharing of sensitive data 95.3K items at risk 860 unscanned · 206.2K unlabeled · 215.8K total Apps and agents (preview) Understand the depth and breadth of Microsoft Purview protection for AI applications and agents in the last 30 days. AppsAgents ↻ Refresh⤓ Export24 items AI appProtection statusUser trendData protectionData complianceAgents Remediation plan: Prevent data exposure in Microsoft 365 Copilot and Microsoft Copilot interactions Increased risks detected in the last 30 days More sensitive items were widely shared and referenced, and sensitiveinformation types were included in user prompts. Default protections in place Remediation plan ✓ Policy created Protect sensitive data referenced in Microsoft 365 Copilot Content with these labels is kept out of Copilot interactionswith a data loss prevention (DLP) policy. ○ Policy not yet created Enforce existing DLP policy for Copilot interactions A DLP policy has been created in simulation mode.Enforce it when you're ready. Estimated impact on risk pattern 6040200 Today Sep 20Sep 27Oct 4Oct 11Oct 18Oct 25 Copilot interactions with sensitive information Trend without remediation Trend with remediation Clear all Apply Cancel Good to know 1/7 DATA SECURITY POSTURE MANAGEMENT What is DSPM? Data Security Posture Management shows where your sensitive data is, how well it is protected, and what to fix first. We look at how it is built, from posture and objectives to AI observability. informasjonsbeskyttelse.no