{"id":14051,"date":"2024-10-17T09:00:00","date_gmt":"2024-10-17T16:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/insidetrack\/blog\/?p=14051"},"modified":"2024-10-24T09:10:30","modified_gmt":"2024-10-24T16:10:30","slug":"deploying-copilot-for-microsoft-365-in-four-chapters","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/insidetrack\/blog\/deploying-copilot-for-microsoft-365-in-four-chapters\/","title":{"rendered":"Deploying Microsoft 365 Copilot in four chapters"},"content":{"rendered":"\n
Intro:<\/strong> Deploying Microsoft 365 Copilot<\/a><\/p>\n<\/div>\n\n\n\n Chapter 1:<\/strong> Getting governance right<\/a><\/p>\n<\/div>\n\n\n\n Chapter 2:<\/strong> Implementation with intention<\/a><\/p>\n<\/div>\n\n\n\n Chapter 3<\/strong>: Driving adoption to capture value<\/a><\/p>\n<\/div>\n\n\n\n Chapter 4: <\/strong>Building a foundation for support<\/a><\/p>\n<\/div>\n\n\n\n Appendix:<\/strong> Downloadable assets to support your deployment<\/a><\/p>\n<\/div>\n\n\n\n Download a copy of this deployment and adoption guide here.<\/a><\/p>\n<\/div>\n<\/div>\n\n\n\n Generative AI has captured the world\u2019s attention, and businesses are taking notice. According to our Work Trends Annual Report, 70% of people would delegate as much work as possible to AI to lessen their workloads.<\/p>\n\n\n\n Capitalizing on this trend will mean the difference between surging ahead or getting left behind, including here at Microsoft, where we\u2019re the first enterprise to fully deploy Microsoft 365 Copilot.<\/p>\n\n\n\n \u201cI\u2019m inspired by the transformative power of AI,\u201d says Nathalie D\u2019Hers, corporate vice president of Microsoft Digital, the company\u2019s IT organization. \u201cI\u2019ve been impressed with how quickly our employees have put it to work for them.\u201d<\/p>\n\n\n\n She would know\u2014her team just finished deploying Microsoft 365 Copilot to more than 300,000 employees and vendors across the world.<\/p>\n\n\n\n \u201cCustomers are looking to us to share what we\u2019ve learned as the first enterprise to deploy Copilot,\u201d D\u2019Hers says. \u201cOur team has a unique opportunity to help them deploy and get to value as quickly as possible.\u201d<\/p>\n<\/div>\n\n\n\n Microsoft 365 Copilot combines the power of large language models (LLMs) with your organization\u2019s data to turn your employees\u2019 words into some of the most powerful productivity tools on the planet\u2014all within the flow of work. It works alongside the Microsoft 365 apps people use every day, including Word, Excel, PowerPoint, Outlook, Teams, and more, to provide real-time intelligent assistance.<\/p>\n\n\n\n According to our Work Trends annual report<\/a>, our employees and external customers who got early access found Copilot very useful:<\/p>\n\n\n\n 70%<\/strong><\/p>\n\n\n\n of users said they were more productive at work.<\/p>\n<\/div>\n\n\n\n 64%<\/strong><\/p>\n\n\n\n reported they spent less time processing email.<\/p>\n<\/div>\n\n\n\n 85%<\/strong><\/p>\n\n\n\n shared that Copilot helps them get to a good first draft faster.<\/p>\n<\/div>\n\n\n\n 75%<\/strong><\/p>\n\n\n\n highlighted time savings through improved document discovery.<\/p>\n<\/div>\n<\/div>\n\n\n\n Organizations like ours that are unlocking AI assistance within employees\u2019 everyday workflow are poised to gain a distinct advantage in terms of productivity, engagement, and innovation.<\/p>\n\n\n\n \u201cWe\u2019re using it to reduce our IT expenses and to enhance our productivity,\u201d D\u2019Hers says. \u201cWe\u2019re also excited by its potential to create a lasting competitive advantage for us here at Microsoft and for our customers.\u201d<\/p>\n\n\n\n Our mission in Microsoft Digital is to empower, enable, and transform the company\u2019s digital employee experience across devices, applications, and infrastructure. We also provide a blueprint for our customers to follow, and as such, have created this guide for deploying and adopting Microsoft 365 Copilot.<\/p>\n\n\n\n \u201cThe contents of this guide are based on the lessons we\u2019ve learned deploying Microsoft 365 Copilot,\u201d D\u2019Hers says. \u201cThe tips and ideas you\u2019ll read here will help you accelerate your own time to value with Copilot so you can realize the same benefits as our employees.\u201d<\/p>\n\n\n\n Are you an executive?<\/strong><\/p>\n\n\n\n View our condensed, CIO version of the guide here.<\/a><\/p>\n\n\n\n Download your own copy of our CIO version here.<\/a><\/p>\n<\/div>\n\n\n\n Follow along<\/strong><\/p>\n\n\n\n Learn from our experience and capture the benefits that Copilot has to offer your employees and your organization.<\/p>\n\n\n\n Before you begin your Microsoft 365 Copilot implementation, you\u2019ll want to consider how this tool impacts your data. Copilot uses LLMs that interact with data and content across your organization and uses information your employees can access to transform user prompts into personalized, relevant, and actionable responses throughout Microsoft 365 apps.<\/p>\n\n\n\n Giving your employees this level of access means proper data hygiene is a priority. At Microsoft Digital, we use sensitivity labeling to empower our employees with access while also protecting our data. Our colleagues on the product side designed Microsoft 365 Copilot to respect labels, permissions, and rights management service (RMS) protections that block content extraction on relevant file labels. By implementing effective sensitivity labeling practices, you can rest assured that anything you intend to remain private or confidential will stay that way.<\/p>\n\n\n\n Pick the governance path that\u2019s right for you<\/strong> Throughout our internal governance efforts within Microsoft Digital, we\u2019ve developed four labeling practices that make up our foundation for appropriate policies and settings.<\/p>\n\n\n\n Support and enable your employees to create new workspaces like SharePoint sites, ensuring your company data is on your Microsoft 365 tenant and employees don\u2019t simply reuse and overload existing spaces with mismatching permissions. That enables your employees to take full advantage of Copilot in ways that align with your organizational data hygiene while you keep your company\u2019s information safe. Label containers for data segmentation by default to ensure your information isn\u2019t overexposed. At Microsoft, we default our container labels to \u201cConfidential\\Internal Only.\u201d That ensures alignment with our policies and settings that limit external sharing. We use Microsoft Purview to manage this process.<\/a><\/p>\n<\/div>\n\n\n\n Derive file labels from their parent containers. Being consistent here boosts security across every layer and reduces the administrative burden on your employees to label every file they create. Copilot will reflect file labels in chat responses, so employees know the level of confidentiality of each portion of AI-created responses.<\/p>\n<\/div>\n\n\n\n We train our employees to understand how to handle and label sensitive data. By making your workers active participants in your data hygiene strategy, you increase accuracy and your overall security posture.<\/p>\n<\/div>\n<\/div>\n\n\n\n The data hygiene practices we outlined above form a foundation for compliance and security, but backstopping those efforts through Microsoft 365 features adds an extra layer of protection. That\u2019s a core principle of Zero Trust.<\/p>\n\n\n\n Empower self-service with sensitivity labels, but verify them by checking against data loss prevention standards, then use auto-labeling and quarantining when necessary. Internally, we\u2019ve configured Microsoft Purview Data Loss Prevention<\/a> to detect and control sensitive content automatically.<\/p>\n<\/div>\n\n\n\n Put strong lifecycle management protocols in place that require your employees to attest containers to keep them from expiring. We don\u2019t keep items that don\u2019t have an accountable employee, or that might not be necessary for our work.<\/p>\n<\/div>\n\n\n\n Limit oversharing at the source by enabling company-shareable links instead of forcing employees to grant access to large groups. At Microsoft, we add an extra layer of highly confidential items users can only share with specific people on a need-to-know basis. To enforce these behaviors, you can set default link types based on labels through Purview.<\/p>\n<\/div>\n\n\n\n Even under the best circumstances, accidents happen. When one of our employees does overshare sensitive data, we use Microsoft Graph Data Connect extraction<\/a> in conjunction with Microsoft Purview to catch and report oversharing.<\/p>\n<\/div>\n<\/div>\n\n\n\n Europe has extra requirements in the form of EU Data Boundary regulations and works councils\u2014internal organizations that provide employee co-determination on workers\u2019 rights or regulatory issues, including performance management or monitoring. Our Microsoft 365 Copilot deployment meant we needed to partner closely with our Microsoft works councils when launching an AI technology with complex data and privacy implications.<\/p>\n\n\n\n Your experience will vary depending on your industry and where you operate, but we\u2019ve learned that it\u2019s best to work closely with local subsidiaries to ensure you have a complete picture of a region\u2019s regulatory situation. Local insiders are poised to liaise with their\u202fworks councils (here\u2019s how we do so internally at Microsoft)<\/a> or other bodies through direct relationships. Start the process early so you can manage feedback cycles effectively, make adjustments, synthesize any answers works councils need, and resolve any concerns through configurations that work for your employees.<\/p>\n\n\n\n Bring the right people into the conversation<\/strong><\/p>\n<\/div>\n\n\n\n Don\u2019t keep this conversation in the IT sphere alone. Bring in all the relevant security, legal, and compliance professionals.<\/p>\n<\/div>\n\n\n\n Microsoft Purview Data Loss Prevention has powerful intelligent detection, but it relies on establishing good defaults.<\/p>\n<\/div>\n<\/div>\n\n\n\n Determine the primary use cases for Copilot. The kinds of collaboration and access employees need will affect your default labeling architecture.<\/p>\n<\/div>\n\n\n\n If you\u2019ve been looking for an excuse to refresh employee knowledge around data privacy, let this moment be your milestone. It will be far easier to start with a clean data estate.<\/p>\n<\/div>\n<\/div>\n\n\n\n Make labeling simple and intuitive, and ensure it isn\u2019t overwhelming. Employees should have a limited set of choices to keep things comprehensible. It\u2019s also valid for different employees to see different choices.<\/p>\n<\/div>\n\n\n\n Because of the scope and complexity of Microsoft\u2019s deployment, we took a very thorough approach to governance. If speed is your priority, you might consider a faster deployment with a less comprehensive governance approach, for example, using Restricted SharePoint Search<\/a> to restrict both Enterprise Search and Copilot experiences to a curated set of SharePoint sites of your choice.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n We put this checklist together based on what we learned while tackling governance, security, and compliance.<\/p>\n\n\n\n Labeling<\/strong><\/strong><\/p>\n<\/div>\n\n\n\n <\/strong>Data loss prevention<\/strong><\/p>\n<\/div>\n\n\n\n International compliance<\/strong><\/p>\n<\/div>\n\n\n\n Use these assets to guide your own deployment and adoption\u2014they represent how we did things here in Microsoft Digital.<\/p>\n\n\n\n Learn how we\u2019re getting the most out of generative AI internally here at Microsoft with good governance.<\/a> This story shares what our Microsoft Digital governance team learned deploying Copilot here at Microsoft.<\/p>\n\n\n\n Download your own copy here.<\/a><\/p>\n<\/div>\n\n\n\n Check out how we\u2019re using sensitivity labels to empower our employees while making Microsoft more secure.<\/a> This article shows you how having a preestablished plan for labeling helped our Microsoft Digital team quickly deploy Copilot with proper guardrails.<\/p>\n\n\n\n Download your own copy here.<\/a><\/p>\n<\/div>\n<\/div>\n\n\n\n Here are more assets that we found useful.<\/p>\n\n\n\n Find these resources and more at adoption.microsoft.com<\/a>.<\/p>\n<\/div>\n\n\n\n We\u2019ve adapted these assets from Microsoft Digital\u2019s deployment material so you can use them within your organization.<\/p>\n\n\n\n Find further downloadable assets to support your governance efforts in the appendix.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n Follow along<\/strong><\/p>\n\n\n\n Learn from our experience and capture the benefits that Copilot has to offer your employees and your organization.<\/p>\n\n\n\nDeploying Microsoft 365 Copilot at Microsoft<\/h2>\n\n\n\n
Welcome to the new era of productivity<\/h3>\n\n\n\n
<\/figure>\n\n\n\n
Meet Microsoft 365 Copilot<\/h3>\n\n\n\n
<\/figure>\n\n\n\n
\n
Chapter 1: Getting governance right<\/h2>\n\n\n\n
Maintaining privacy, security, and compliance while respecting regulatory frameworks<\/h3>\n\n\n\n
This chapter outlines the highly robust, best-case scenario we created at Microsoft, but we know not every organization has a fully deployed data governance system and strategy. If you\u2019re in that position, don\u2019t worry! You can use techniques like Restricted SharePoint Search<\/a> that provide value and protection without exposing Copilot to your internal resources.<\/p>\n\n\n\nLaying the groundwork with proper labeling<\/strong><\/h4>\n\n\n\n
<\/figure>\n<\/div>\n\n\n\n
Responsible self-service<\/h4>\n<\/div>\n<\/div>\n\n\n\n
<\/p>\n<\/div>\n\n\n\n<\/figure>\n<\/div>\n\n\n\n
Top-down defaults<\/h4>\n<\/div>\n<\/div>\n\n\n\n
<\/figure>\n<\/div>\n\n\n\n
Consistency within containers<\/h4>\n<\/div>\n<\/div>\n\n\n\n
<\/figure>\n<\/div>\n\n\n\n
Employee awareness<\/h4>\n<\/div>\n<\/div>\n\n\n\n
Self-service with guardrails<\/h3>\n\n\n\n
<\/figure>\n<\/div>\n\n\n\n
Trust, but verify<\/h4>\n<\/div>\n<\/div>\n\n\n\n
<\/figure>\n<\/div>\n\n\n\n
Expiry and attestation<\/h4>\n<\/div>\n<\/div>\n\n\n\n
<\/figure>\n<\/div>\n\n\n\n
Controlling the flow<\/h4>\n<\/div>\n<\/div>\n\n\n\n
<\/figure>\n<\/div>\n\n\n\n
Oversharing detection<\/h4>\n<\/div>\n<\/div>\n\n\n\n
International compliance: No size fits all<\/h3>\n\n\n\n
Learning from Microsoft\u2019s governance, security, and compliance practices<\/h3>\n\n\n\n
<\/figure>\n\n\n\n
<\/figure>\n\n\n\n
Build a foundation for automation<\/strong><\/h4>\n<\/div>\n\n\n\n
<\/figure>\n\n\n\n
Think about how your employees will use Copilot<\/strong><\/h4>\n<\/div>\n\n\n\n
<\/figure>\n\n\n\n
Take this opportunity to train employees<\/strong><\/h4>\n<\/div>\n\n\n\n
<\/figure>\n\n\n\n
Don\u2019t overwhelm your employees<\/strong><\/h4>\n<\/div>\n\n\n\n
<\/figure>\n\n\n\n
Balance good governance with time to value<\/strong><\/h4>\n<\/div>\n\n\n\n
Deployment checklist: Governance<\/h3>\n\n\n\n
<\/figure>\n\n\n\n
\n
\n
\n
<\/figure>\n\n\n\n
\n
<\/figure>\n\n\n\n
\n
<\/figure>\n\n\n\n
How we did it at Microsoft<\/h4>\n<\/div>\n\n\n\n
<\/figure>\n\n\n\n
<\/figure>\n\n\n\n
<\/figure>\n\n\n\n
More guidance for you<\/h4>\n<\/div>\n\n\n\n
Support for governance teams<\/h4>\n\n\n\n
\n
Downloadable governance assets<\/h4>\n\n\n\n
\n
\n