Train staff on safe AI data handling or audit Copilot permissions?

How to choose

For staff, practice input and output hygiene

Choose employee instruction that shows how to minimize prompt data, remove identifiers, check sources, and review generated output. Test the method with realistic but de-identified examples. Redaction reduces exposure but does not automatically authorize a use or guarantee anonymity.

For administrators, inspect source permissions

If Copilot can retrieve SharePoint content, the responsible administrator needs to review access boundaries and source permissions before enabling search. Identify the sites, groups, and sensitive repositories in scope. Confirm who can remediate permissions and how changes will be tested.

Assign each control to an owner

Set a staff workflow for data classification and a separate technical procedure for permissions. Do not infer that a course proves current security or compliance. Record who approves the tool, who can change access, and how staff report unexpected retrieval or exposure.

Before you enroll

• Do learners need staff-level data habits or administrator-level permission review?
• Which data classifications and source systems are covered?
• Who can change SharePoint access and test the permission boundary?
• How are accidental exposures or unexpected retrievals escalated?

Train staff to handle inputs and outputs carefully, and assign a technical owner to audit source access. Neither skill establishes the other control.