Browser data loss prevention is enabled for AI apps via Edge for Business

Overview

Microsoft Purview Data Loss Prevention (DLP) monitoring and protection are built right into the Microsoft Edge for Business browser. You don’t need to onboard the device into Microsoft Purview. This integration helps you stop users from sharing sensitive information to and from cloud apps using Edge for Business. With the rise of AI applications, this capability is crucial to help prevent users from sharing sensitive information with unmanaged AI apps through Edge for Business, which could lead to data leaks and compliance risks. By enabling browser DLP for AI apps via Edge for Business, you can extend your data protection policies to cover web-based interactions, ensuring that sensitive data is safeguarded even when accessed through the browser.

Remediation

• Help prevent sharing via Microsoft Edge for Business to unmanaged AI apps from managed devices

Run it

The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:

Install-Module ZeroTrustAssessment -Scope CurrentUser
Connect-Maester
Invoke-Maester -Pack ZTA -SkipBuiltIn

Leave out -SkipBuiltIn to run Maester’s own checks in the same run.

About this check

Severity	Medium
Effort to fix	High
Impact on users	Medium
Pillar	Data, AI
Category	Data Security Posture Management
Product	Purview
Feature	Data loss prevention
Area	Data protection
ATT&CK	T1567 Exfiltration Over Web Service
Licence	RMS_S_PREMIUM2, Microsoft 365 E5, Microsoft Purview PAYG
Tenant	Workforce

Product, feature, area and ATT&CK are Maester’s: the assessment does not record them, so Maester keeps them in the pack’s taxonomy.json.

A Microsoft check, part of the Zero Trust Assessment pack. Text from ZeroTrustAssessment 3.1.0, © Microsoft, MIT licence.