New capabilities that can assist you safe your AI transformation

AI is remodeling our world, unlocking new potentialities to reinforce human talents and to increase alternatives globally. On the identical time, we’re additionally dealing with an unprecedented risk panorama with the pace, scale, and class of assaults growing quickly. To satisfy these challenges, we should be sure that AI is constructed, deployed, and used responsibly with security and safety at its core. And it’s extra essential than ever to leverage AI to empower all defenders and tilt the stability of their favor.

Safety is our prime precedence at Microsoft—above all else—and our expanded Safe Future Initiative underscores our company-wide dedication to creating the world a safer place for everybody. I’m proud that Microsoft is prioritizing safety within the age of AI as we proceed to innovate with a security-first mindset. 

Immediately, new capabilities at the moment are obtainable in Microsoft Defender and Microsoft Purview to assist organizations safe and govern generative AI purposes at work. These releases ship purpose-built coverage instruments and higher visibility that can assist you safe and govern generative AI apps and their information. We’re additionally delivering a brand new unified expertise for the safety analyst and integrating Microsoft Copilot for Safety throughout our safety product portfolio.  

You’ll be capable of see firsthand these improvements and extra throughout the Microsoft Safety portfolio at RSA Convention (RSAC). I additionally hope additionally, you will be part of me on Tuesday, Might 7, 2024, for “Securing AI: What We’ve Discovered and What Comes Subsequent,” to discover the methods that each group can implement to securely design, deploy, and govern AI.

Safe your AI transformation with Microsoft Safety

Wherever your group is in your AI transformation, you have to complete safety controls to safe govern your AI purposes and information all through their lifecycle—growth, deployment, and runtime.  

With the brand new capabilities introduced at the moment, Microsoft turns into the primary safety supplier to ship end-to-end AI safety posture administration, risk safety, information safety, and governance for AI.

Uncover new AI assault surfaces, strengthen your AI safety posture, and shield AI apps in opposition to threats with Microsoft Defender for Cloud. Now safety groups can determine their whole AI infrastructure—akin to plugins, SDKs, and different AI applied sciences—with AI safety posture administration capabilities throughout platforms like Microsoft Azure OpenAI Service, Azure Machine Studying, and Amazon Bedrock. You’ll be able to repeatedly determine dangers, map assault paths, and use built-in safety finest practices to stop direct and oblique assaults on AI purposes, from growth to runtime.

Built-in with Microsoft Azure AI companies, together with Microsoft Azure AI Content material Security and Azure OpenAI, Defender for Cloud will repeatedly monitor AI purposes for anomalous exercise, correlate findings, and enrich safety alerts with supporting proof. Defender for Cloud is the primary cloud-native software safety platform (CNAPP) to ship risk safety for AI workloads at runtime, offering safety operations middle (SOC) analysts with new detections that alert to malicious exercise and lively threats, akin to jailbreak assaults, credential theft, and delicate information leakage. Moreover, SOC analysts might be in a position facilitate incident response with native integration of those indicators into Microsoft Defender XDR.

Determine and mitigate information safety and information compliance dangers with Microsoft Purview. Give your safety groups higher visibility into and understanding of which AI purposes are getting used and the way that can assist you safeguard your information successfully within the age of AI. The Microsoft Purview AI Hub, now in preview, delivers insights akin to delicate information shared with AI purposes, complete variety of customers interacting with AI apps and their related threat degree, and extra. To stop potential oversharing of delicate information, new insights assist organizations determine unlabeled recordsdata that Copilot references and prioritize mitigation of oversharing dangers. Moreover, we’re excited to announce the preview of non-compliant utilization insights within the AI Hub to assist prospects uncover potential AI interactions that violate enterprise and regulatory insurance policies in areas like hate and discrimination, company sabotage, cash laundering, and extra.

Govern AI utilization to adjust to regulatory insurance policies with new AI compliance assessments in Microsoft Purview. We perceive how essential it’s to adjust to laws, and the way difficult it may be when deploying new expertise. 4 new Compliance Supervisor evaluation templates, now in preview, can be found that can assist you assess, implement, and strengthen compliance with AI laws and requirements, together with EU AI Act, NIST AI RMF, ISO/IEC 23894:2023, and ISO/IEC 42001. The brand new evaluation insights may even be surfaced inside the Purview AI Hub, offering really useful actions to assist compliance as you onboard and deploy AI options.

Collectively we may help everybody pursue the advantages of AI, by thoughtfully addressing the brand new dangers. The brand new capabilities in Microsoft Defender for Cloud and Microsoft Purview, which construct on prime of the improvements we shared at Microsoft Ignite 2023 and Microsoft Safe 2024, are essential developments in empowering safety groups to find, shield, and govern AI—whether or not you’re adopting software program as a service (SaaS) AI options or constructing your personal.

Learn extra about the entire new capabilities and options that make it easier to safe and govern AI.

Strengthening end-to-end safety with a unified safety operations platform

We proceed investing in our long-standing dedication to offering you with essentially the most full end-to-end safety in your whole digital property. There’s an instantaneous want for instrument consolidation and AI to achieve the pace and scale required to defend in opposition to these new digital threats. Microsoft integrates the entire foundational SOC instruments—cloud-native safety data and occasion administration (SIEM), complete native prolonged detection and response (XDR), unified safety posture administration, and generative AI—to ship true end-to-end risk safety in a single platform, with a typical information mannequin, and a unified analyst expertise.  

The brand new unified safety operations platform expertise, in preview, transforms the real-world analyst expertise with a easy, approachable person expertise that brings collectively all the safety indicators and risk intelligence at the moment caught in different instruments. Analysts could have extra context at each stage, with useful suggestions and ideas for automation that make investigation and response simpler than ever earlier than. We’re additionally introducing new options throughout Microsoft Sentinel and Defender XDR, together with world search, customized detections, and automation guidelines.

We’re additionally happy to announce various further new options and capabilities that can empower your safety operations middle (SOC) to work throughout Microsoft safety merchandise for stronger end-to-end safety.

• Microsoft Safety Publicity Administration initiatives assist your safety staff determine dangerous exposures and cases of inadequate implementation of important safety controls, to search out alternatives for enchancment.
• SOC analysts can now use insider threat data as a part of their investigation in Microsoft Defender XDR.
• Microsoft Defender XDR expands to incorporate native operational expertise (OT) safety, enabling automated correlation of OT risk sign into cross-workload incidents and the power to handle OT and industrial management system vulnerabilities instantly inside Defender XDR.
• Expanded assault disruption in Microsoft Defender XDR, powered by AI, machine studying, and risk intelligence, will cowl new assault eventualities like disabling malicious OAuth apps and can considerably broaden compromised person disruption, akin to leaked credentials, stuffing, and guessing.
• Microsoft Sentinel launches SOC Optimizations to supply tailor-made steerage to assist handle prices, enhance the worth of information ingested, and enhance protection in opposition to widespread assault strategies.

Expanded Microsoft Copilot for Safety integrations

In the case of supporting safety groups and relieving complexity, Microsoft Copilot for Safety affords a fantastic benefit. Higher integration of Copilot throughout the Microsoft safety portfolio and past gives richer embedded experiences and Copilot capabilities from acquainted and trusted merchandise. We’re proud to announce new Microsoft Copilot for Safety integrations, together with Purview, new accomplice plugins, Azure Firewall, and Azure Net Utility Firewall. These integrations present your safety groups with real-time steerage, deeper investigative insights, and expanded entry to information from throughout your surroundings.  

Safety for the period of AI

An end-to-end safety platform might be a figuring out think about each group’s transformation and can play a important function within the sturdiness of AI-powered innovation. Organizations that target securing AI and put money into utilizing AI to strengthen safety would be the lasting leaders of their industries and markets. Microsoft is dedicated to empowering these {industry} and market leaders with safety options that may assist them obtain extra. We convey collectively 4 important benefits: large-scale information and risk intelligence; essentially the most full end-to-end platform; {industry} main, accountable AI; and instruments that can assist you safe and govern AI.

With the final availability of Copilot for Safety, Microsoft has delivered on our promise to place industry-leading generative AI into the palms of IT and safety professionals of all ranges of expertise. Now, with at the moment’s launch of latest capabilities in Defender for Cloud and Microsoft Purview, we’re additionally delivering on our dedication to empower IT and safety groups with the instruments they should benefit from AI safely, responsibly, and securely.

Lastly and importantly, safety is a staff sport. We look ahead to working along with the {industry} and our companions on advancing cyber safety for all. 

I do hope you’ll join with us at RSAC this week, the place we might be demonstrating our complete safety portfolio and the way it helps you shield your surroundings from each angle to arrange for and confidently undertake and deploy AI. 

Be taught extra

To be taught extra about Microsoft Safety options, go to our web site. Bookmark the Safety weblog to maintain up with our professional protection on safety issues. Additionally, comply with us on LinkedIn (Microsoft Safety) and X (@MSFTSecurity) for the most recent information and updates on cybersecurity.