Purview for AI Governance (DSPM)
Govern every Copilot variant and third-party AI with Data Security Posture Management for AI
Govern the full AI estate with Microsoft Purview — assess and remediate Copilot oversharing using DSPM for AI, govern every Copilot variant, integrate ChatGPT Enterprise and Azure OpenAI into one framework, and detect Shadow AI while meeting Australian privacy and security obligations.

At a Glance
Who it's for
- Compliance officers operationalising DSPM for AI across Copilot variants and third-party AI tools
- Security architects designing AI guardrails across data, identity, prompts, and Shadow AI
- Microsoft 365 administrators governing Copilot, Copilot Studio, ChatGPT Enterprise, and Azure OpenAI
- Privacy and risk leads accountable for Australian Privacy Principle 8 cross-border disclosure
Course Details
Course Overview
Microsoft Purview is now the primary control surface for the entire enterprise AI estate — not just Microsoft 365 Copilot. Data Security Posture Management (DSPM) for AI consolidates signals across every Copilot variant (Microsoft 365 Copilot, Security Copilot, Copilot Studio, and Microsoft Fabric) and extends to third-party AI tools including ChatGPT Enterprise and Azure OpenAI. This one-day intensive walks compliance officers, security architects, and M365 administrators through comprehensive AI governance: assessing and remediating Copilot oversharing with DSPM for AI, designing SharePoint information architecture optimised for Copilot accuracy and safety, governing all Copilot variants, integrating ChatGPT Enterprise and Azure OpenAI into a unified governance framework, detecting unauthorised AI tool usage (Shadow AI) through Microsoft Defender for Cloud Apps, preventing prompt injection attacks, enforcing AI ethics policy, and documenting the Australian Privacy Principle 8 considerations triggered by Anthropic and other subprocessors in the AI supply chain. Market position: first Australian training covering comprehensive AI governance across all Copilot variants and third-party AI tools; content beyond SC-401 certification scope. Purview for AI Governance (DSPM) is Module 5 of 6 in the EDUC4TE Purview Training Track, focused on AI-specific data protection and complementing Module 4 (Insider Risk for behavioural signals).
What You'll Learn
Course Curriculum
Module 1: Data Security Posture Management for AI
3 hours- Assessing and remediating Microsoft 365 Copilot oversharing using DSPM for AI
- Activating the AI Hub and interpreting risk insights, recommendations, and prebuilt policies
- Investigating prompt and response events in Activity Explorer
- Designing SharePoint information architecture optimised for Copilot accuracy and safety
- Running an oversharing assessment and prioritising remediation
Module 2: Multi-Copilot governance
3 hours- Governing all Microsoft Copilot variants — Microsoft 365 Copilot, Security Copilot, Copilot Studio, and Fabric
- Integrating ChatGPT Enterprise and Azure OpenAI into a unified governance framework
- Sensitivity label inheritance into Copilot outputs, citations, and downstream artefacts
- Copilot Studio agent governance: data sources, prompts, audit, and lifecycle controls
- Aligning agent and Copilot risk reviews to the ACSC Copilot guidance published in October 2025 — still the current ACSC release
Module 3: Shadow AI detection and AI security controls
2 hours- Detecting unauthorised AI tool usage (Shadow AI) via Microsoft Defender for Cloud Apps
- Preventing prompt injection attacks against Copilot and third-party AI
- Implementing AI ethics policy enforcement across the AI estate
- APP 8 cross-border controls and Anthropic subprocessor disclosure
- Producing an APP 8 disclosure pack for the privacy officer and board
Who Should Attend
- Compliance officers and privacy leads
- Security architects and Microsoft 365 security engineers
- M365 administrators governing Copilot and third-party AI
- Risk, audit, and assurance practitioners
- Information governance and records managers
Prerequisites
Before enrolling, please ensure you meet these requirements:
- • Module 2 of the EDUC4TE Purview Training Track (or equivalent Purview foundations)
- • Hands-on experience with the Microsoft 365 admin centre
- • Working knowledge of sensitivity labels and basic Purview DLP
- • Familiarity with Australian privacy obligations under the Privacy Act 1988
Delivery, Format and Logistics
Delivery Mode
One-day intensive (virtual)
Live virtual cohort with hands-on Purview portal labs and Q&A
What You'll Need
- Working Microsoft 365 E5 or Copilot for Microsoft 365 tenant with Purview enabled
- Global Reader plus Compliance Administrator role for labs
- Familiarity with Microsoft 365 admin centres, sensitivity labels, and DLP basics
- Awareness of the Australian Privacy Act 1988 and ACSC Essential Eight context
What You'll Receive
- 8 hours of practitioner-led training
- DSPM for AI and Copilot oversharing remediation templates
- Multi-Copilot and third-party AI governance framework
- Shadow AI detection and prompt injection prevention playbook
- APP 8 cross-border disclosure workbook
- Certificate of completion
- Lifetime access to course materials and updates
Frequently Asked Questions
Not Ready to Enrol?
Join our mailing list to receive updates about courses, resources, and cybersecurity insights tailored for Australian organisations.
Secure payment via Stripe · Promo codes accepted
Next Intake
September 2026 — register your interest at educ4te.com
Format
One-day intensive (virtual)
Group & Enterprise Options
Discounted rates available for teams of 3+ delegates. Contact us for in-house delivery options.
What's Included
- 8 hours of practitioner-led training
- DSPM for AI and Copilot oversharing remediation templates
- Multi-Copilot and third-party AI governance framework
- Shadow AI detection and prompt injection prevention playbook
- APP 8 cross-border disclosure workbook
- Certificate of completion
- Lifetime access to course materials and updates
Have questions about this course?