Data Security Posture Management

Microsoft Purview DSPM provides a unified dashboard for understanding your organization's sensitive data landscape. It discovers where sensitive data lives, identifies oversharing risks, and recommends remediation—making it essential for Copilot readiness.

What is DSPM?

DSPM answers critical questions about your data:

Question	DSPM Provides
Where is our sensitive data?	Discovery across M365 workloads
Who has access to it?	Sharing and permission analysis
Is it properly protected?	Labeling and encryption status
What's the risk?	Oversharing scores and alerts

Why DSPM is Critical for Copilot

Deploy DSPM Before Copilot

Copilot can only access data that users have permission to see. But many organizations have years of accumulated oversharing—files accessible to "Everyone" or large groups. DSPM finds these risks before Copilot amplifies them.

The Copilot Oversharing Problem

User asks Copilot: "Find salary information"
    ↓
Copilot searches: SharePoint, OneDrive, Teams
    ↓
Copilot finds: HR spreadsheet shared with "Everyone"
    ↓
Result: User sees data they shouldn't have access to

DSPM identifies these scenarios before Copilot deployment.

Key Capabilities

Sensitive Data Discovery

Scan your entire Microsoft 365 environment for:

Personal Identifiable Information (PII)
Financial data
Health records
Student records (FERPA)
Custom sensitive information types

Oversharing Analysis

Identify content shared with:

"Everyone" or "All authenticated users"
Large distribution groups
External guests
Anonymous links

️ Labeling Status

See what percentage of sensitive content is:

Properly labeled
Unlabeled but contains sensitive data
Labeled but not encrypted

DSPM for AI

Specialized view focusing on:

Content accessible to Copilot users
AI-specific risk metrics
Pre-deployment assessment

DSPM Dashboard

Metric	What It Shows
Sensitive items	Total count of detected sensitive data
Sharing summary	Breakdown by sharing scope
Labeling coverage	Labeled vs. unlabeled sensitive content
Top risks	Highest priority remediation items

Quick Links

Resource	Description
Purview DSPM	DSPM Dashboard
DSPM for AI	AI-specific governance
DSPM Overview	Microsoft documentation
Implementation Guide	Enterprise deployment guide

Pre-Copilot Checklist

Before enabling Copilot for any user group:

Information Protection — Apply labels to discovered content
Data Loss Prevention — Prevent future oversharing
Compliance Manager — Track remediation progress