{
  "id": "CB-M365-DATA-009",
  "standard": "m365",
  "version": "main",
  "url": "https://baselines.cirsec.org/b/m365/CB-M365-DATA-009",
  "json": "https://baselines.cirsec.org/b/m365/CB-M365-DATA-009.json",
  "yaml": "https://baselines.cirsec.org/b/m365/CB-M365-DATA-009.yml",
  "profiles_effective": [
    "hardened"
  ],
  "license": "Text CC BY 4.0, code Apache-2.0",
  "attribution": "CIRSEC Baselines, https://baselines.cirsec.org",
  "control": {
    "id": "CB-M365-DATA-009",
    "title": "Detect risky AI usage with Insider Risk Management",
    "finding": {
      "title": "Risky use of AI assistants by insiders goes undetected",
      "description": "Users who feed sensitive data into Copilot or third-party generative AI sites, or try prompt injection, raise no signal for the security team."
    },
    "status": "active",
    "profiles": [
      "hardened"
    ],
    "risk": {
      "severity": "low"
    },
    "assessment": "manual",
    "tags": [
      "insider-risk",
      "purview",
      "copilot",
      "ai",
      "monitoring"
    ],
    "applicability": {
      "requires": [
        "Microsoft Purview E5 Compliance"
      ]
    },
    "description": "A Microsoft Purview Insider Risk Management policy built from the **Risky AI usage** template is\nactive and scoped to all users (or to the populations defined with the works council). It\ndetects risky prompts and responses in Microsoft 365 Copilot and other AI apps, such as sensitive\ninformation in prompts, access to protected content through AI, and prompt injection attempts.\nPseudonymization of users in alerts stays enabled.\n",
    "rationale": "Generative AI creates new paths for data leakage that DLP rules on mail and files do not see. The\nRisky AI usage template correlates AI interactions with other insider risk indicators so the team\ncan investigate patterns rather than single events.\n",
    "impact": "Insider risk monitoring processes personal data about employees. In France, deploy it only after a\ndata protection impact assessment, information of employees and consultation of the works council\n(CSE). Limit access to alerts to a small, named team.\n",
    "notes": "Collecting AI interactions outside Microsoft 365 (third-party AI sites) needs device onboarding\nand the browser extension or network integration described by Microsoft.\n",
    "audit": {
      "manual": "1. Sign in to the Microsoft Purview portal (https://purview.microsoft.com) as a member of the\n   Insider Risk Management Analysts or Insider Risk Management Auditors role group (read-only\n   roles for this solution).\n2. Browse to **Solutions** > **Insider Risk Management** > **Policies**.\n3. Check that a policy based on the **Risky AI usage** template exists, its status is active\n   (not paused or in test), and its scope covers the intended users.\n4. Browse to **Insider Risk Management** > **Settings** > **Privacy** and check that\n   pseudonymized user names are shown.\n5. Fail if no active Risky AI usage policy exists.\n"
    },
    "remediation": {
      "manual": "1. Complete the data protection impact assessment and works council consultation.\n2. Sign in to the Microsoft Purview portal as an Insider Risk Management Admin.\n3. Configure **Insider Risk Management** > **Settings** (privacy, policy indicators for Microsoft\n   365 Copilot and AI apps).\n4. Browse to **Policies** > **Create policy**, select the **Risky AI usage** template, set the\n   users in scope, the indicators and thresholds, and create the policy.\n5. Assign alert triage to the Insider Risk Management Investigators role group.\n",
      "rollback": "Pause or delete the policy under **Insider Risk Management** > **Policies**.\n"
    },
    "references": [
      {
        "title": "Insider risk management policy templates",
        "url": "https://learn.microsoft.com/purview/insider-risk-management-policy-templates",
        "publisher": "Microsoft",
        "kind": "vendor-doc",
        "accessed": "2026-10-24"
      },
      {
        "title": "Microsoft Purview data security and compliance protections for generative AI apps",
        "url": "https://learn.microsoft.com/purview/ai-microsoft-purview",
        "publisher": "Microsoft",
        "kind": "vendor-doc",
        "accessed": "2026-10-24"
      },
      {
        "title": "Maester MT.1174",
        "url": "https://maester.dev/docs/tests/",
        "publisher": "Maester",
        "kind": "tool",
        "accessed": "2026-10-24"
      }
    ],
    "mappings": [
      {
        "framework": "nist-800-53r5",
        "framework_version": "5.1.1",
        "id": "PM-12",
        "relation": "related"
      },
      {
        "framework": "nist-800-53r5",
        "framework_version": "5.1.1",
        "id": "SI-4",
        "relation": "related"
      }
    ],
    "related_controls": [
      {
        "id": "CB-M365-DATA-004",
        "type": "related"
      }
    ],
    "authors": [
      {
        "name": "Alice",
        "github": "Sn0wAlice"
      }
    ],
    "introduced_in": "0.1.0",
    "created": "2026-10-24",
    "updated": "2026-10-24"
  }
}