External website data source risk
AI summary
External website connections to M365 Copilot can introduce unverified or outdated information, affecting response accuracy and business decisions. You should validate all such connections by documenting their reliability, restricting them to trusted sources, and requiring owners to justify business needs with demonstrated data quality controls.
What it detects
External connections that load data from websites into M365 Copilot can introduce unverified, outdated, or malicious information, leading to incorrect results or risks.
Why it matters
External website connections pose risks to CopilotMicrosoft 365 CopilotMicrosoft 365 Copilot is the AI assistant in the Microsoft 365 apps. Rencore Governance covers it with the Copilot connector, part of the AI & Agents module.Read more's response accuracy because unverified web sources can contain outdated, biased, or incorrect information that gets incorporated into AI-generated answers, potentially leading to flawed business decisions or compliance issues. Validate all external website connections by documenting their reliability, implementing regular accuracy checks, restricting connections to trusted and verified sources only, and establishing a review process where connection owners must justify the business need and demonstrate data quality controls before approval.
The rule
Every External Graph Connection where BaseUrl is not empty
In Rencore Governance
Details
| Applies to | External Graph connection |
|---|---|
| Connector | Copilot |
| Severity | High |
| Category | External Access |
| Recommended | Yes |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check External Graph connection objects:
Frequently asked questions
What does the external website data source risk policy detect?
External connections that load data from websites into M365 Copilot can introduce unverified, outdated, or malicious information, leading to incorrect results or risks.
Which objects does the external website data source risk policy check?
The External website data source risk policy checks External Graph connection objects from the Copilot inventory and reports each one that matches its rule as a violation.
How severe is a violation of the external website data source risk policy?
Violations of the External website data source risk policy have High severity. The policy is in the External Access category.
Which module includes the external website data source risk policy?
The External website data source risk policy comes with the Copilot connector in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?