Topics
Posts
What data can this system touch?
The EU AI Act, NIST's AI Risk Management Framework, and ISO/IEC 42001 agree on almost nothing. Not scope, not structure, not even whether they're law …
Copilot is you. An autonomous agent isn't.
Copilot has never had an opinion about what it's allowed to read. It reads what you can read: your groups, your permissions, the rights your labels gr…
A sensitivity label isn't a sticker. It's a gate.
A sensitivity label looks like a tag; a coloured word in the corner of a document telling people how careful to be. In a Copilot tenant, that mental m…
Copilot isn't broken. It's locked out.
Everyone prepping for Copilot hears the same advice: fix your oversharing first. It's good advice but in a regulated tenant it's only half the job. Th…