Your users have already found ways around your AI restrictions. They're using ChatGPT, browser-based PDF tools, unapproved AI services and whatever application someone recommended on LinkedIn last week.

Blocking Copilot doesn't stop them from uploading company data somewhere else.

So what can you actually do about it?

In this session, we'll look at how to discover Shadow AI usage with Microsoft Defender for Cloud Apps, how Microsoft Purview Endpoint DLP can help protect sensitive information and what you need to consider when allowing external AI services.

We'll go through practical configuration examples, supported controls and the limitations you need to understand before promising that everything is protected.

We'll also look at Bring Your Own Model scenarios in Azure and the governance decisions organisations need to make when introducing their own AI solutions.

The goal isn't to block everything. It's to understand what's being used, protect the information that matters and give people a safer way to work.

Because telling people not to use AI has been working brilliantly so far, hasn't it?

What you'll learn

1. How to discover and investigate Shadow AI usage with Defender for Cloud Apps.
2. How to configure Endpoint DLP for supported sensitive-file activities.
3. How to test restrictions involving browsers and external destinations.
4. What governance considerations apply to AI models hosted in Azure.
5. How to introduce controls without blocking legitimate work.

Assumed knowledge
Experience with Microsoft 365 administration, basic Microsoft security concepts and familiarity with cloud applications.

Target audience
Security architects, Microsoft 365 administrators, compliance specialists and IT professionals responsible for AI governance and data protection.