The use of artificial intelligence (AI) in organisations is increasingly widespread, thanks to its ability to increase efficiency, reduce the time that needs to be dedicated to more menial tasks, and rapidly solve complex problems.

But, as with any emerging technology, AI’s growth in popularity establishes a new attack surface for malicious actors to exploit, thereby introducing new risks and vulnerabilities to an increasingly complex computing landscape.

Microsoft 365 Copilot combines the power of large language models (LLMs) with your organization’s data – all in the flow of work — to turn your words into one of the most powerful productivity tools on the planet. Whether or not you’re participating in the Early Access Program (EAP), this blog provides an overview of Copilot, shares technical details, and how you can prepare for it. You’ll also learn some best practices about setting permissions policies, details about admin controls, change management, adoption, security, privacy, compliance, and data residency to help your organization get prepared.

Learn more about Microsoft 365 Copilot: The Copilot System: Explained by Microsoft and How Microsoft 365 Copilot works.

The UK’s top firms and charities “urgently” need to improve their ability to respond to online attacks, the Government has warned.

A Government survey of the FTSE 350 has revealed 68% of board members have not been trained to deal with cybersecurity incidents, potentially leaving their businesses in danger.

More than half of board members recognise that cyber threats are a top risk to their business but 69% of them still do not receive comprehensive information on that risk.

The Government is urging businesses to collaborate with the National Cyber Security Centre to develop methods to protect themselves from the economic effects of a successful cyberattack.

Matt Hancock MP, the minister for digital, said that recent incidents had shown “the devastating effects of not getting our approach to cyber security right” and added that the UK has “a long way to go until all our organisations are adopting best practice”.

Firms involved in energy, transport and health are now also facing multimillion-pound fines under proposals which will require them to have strong cybersecurity measures in place.

The suggested fines are aimed at preventing hackers from crippling networks, as happened earlier in the summer with NHS systems.

Speaking to Sky News, Mr Hancock said: “What matters is keeping people’s data secure and good cybersecurity.”

There are a range of good cybersecurity measures available, and Government legislation will require companies to monitor threats and detect attacks, train their staff and have quick recovery systems in place in the case of an attack.

Like the fines of up to 4% of their global turnover for companies who are found to mishandle public data, those firms involved in critical sectors face regulatory action for their lapse cybersecurity.

“The truth is this: good data security and innovative use of data go hand in hand – it’s not an either-or,” Mr Hancock said.

“Frankly, people who can do the two together will get more out of this than (those) seeing cybersecurity as something left to the IT department.”

In 2015, TalkTalk claimed that it had experienced a “significant and sustained cyberattack”, although an investigation into the incident found that a rudimentary security vulnerability was responsible.

Its share price tumbled following the attack and has still not recovered. Its reputation was damaged even further when the company was handed a record fine by the data watchdog for lapse security practices.

It’s 10:30 on a Tuesday and you’ve just started in on your third cup of coffee when the mail arrives. With a few minutes free before your next meeting, you scan the pile quickly and spot a letter from one of your major software vendors. You weren’t expecting any correspondence and it doesn’t look like the usual marketing piece, so you open it up and start reading…

Thank you for choosing our software … (blah, blah, yeah, thanks for sucking all our money away) … We understand that Software Asset Management can be challenging … (Oh really? You want my job?) … Your company has been selected to undergo a license review which will help us evaluate your license compliance with the terms and conditions of our license agreement, in accordance with the audit rights contained therein. (WHAT THE…?!?!)