Microsoft 365 Copilot inherits all of Microsoft’s cloud security controls, but these were not designed for new AI capabilities. Security and risk management leaders must implement verifiable controls for AI data protection, privacy, and filtering of large language model content inputs and outputs.

New research conducted  by Traceable AI has found that while API security remains a top cybersecurity concern this year, there is still an alarming lack of implementation for most companies. The first annual study also revealed that companies are struggling with unchecked API sprawl, lack of clarity on who owns API security, and do not baseline behavior as part of their security capabilities.