# Microsoft Learn Documentation Changes

**Run Date:** 2026-04-28
**Run Time:** 2026-04-28T08:27:27.865257+00:00
**Total URLs Checked:** 229

---

## Executive Summary

| Category | Count |
|----------|-------|
| CRITICAL Changes | 46 |
| HIGH Changes | 46 |
| MEDIUM Changes | 177 |
| Redirects | 14 |

---

## Change Summary (Quick Scan)

| # | URL | Classification | Affected Controls | Action Required |
|---|-----|----------------|-------------------|-----------------|
| 1 | managed-environment-overview | MEDIUM | 1.8, 3.7, 2.15, 2.1, 2.2, 2.7 | Update portal-walkthrough |
| 2 | managed-environment-enable | MEDIUM | 1.4, 2.1 | Review optional |
| 3 | managed-environment-sharing-limits | MEDIUM | 1.1, 2.1, 2.2 | Update portal-walkthrough |
| 4 | managed-environment-solution-checker | MEDIUM | 2.1, 2.2 | Review optional |
| 5 | managed-environment-usage-insights | MEDIUM | 3.2, 2.1 | Review optional |
| 6 | environment-groups | MEDIUM | 1.28, 1.4, 2.15, 2.2 | Update portal-walkthrough |
| 7 | environment-groups-rules | MEDIUM | 2.2 | Update portal-walkthrough |
| 8 | default-environment-routing | MEDIUM | 2.15 | Review optional |
| 9 | create-developer-environment | MEDIUM | 2.15 | Review optional |
| 10 | advanced-connector-policies | CRITICAL | 1.4 | Update portal-walkthrough |
| 11 | wp-data-loss-prevention | HIGH | 1.28, 1.14, 1.5, 3.7, 2.24, 2.7 | Update portal-walkthrough |
| 12 | dlp-connector-classification | CRITICAL | 1.14, 4.6 | Update portal-walkthrough |
| 13 | connections-list | MEDIUM | None | Review optional |
| 14 | ...en-us/connectors/connector-reference/ | CRITICAL | 1.4 | Review and update |
| 15 | ...m/en-us/connectors/custom-connectors/ | MEDIUM | 2.7 | Review optional |
| 16 | security-overview | HIGH | 1.26, 1.8, 3.7 | Review and update |
| 17 | security-roles-privileges | MEDIUM | 1.18, 1.1, 2.8 | Review optional |
| 18 | create-edit-security-role | MEDIUM | 1.18 | Review optional |
| 19 | database-security | HIGH | 1.1 | Review and update |
| 20 | field-level-security | HIGH | 1.18 | Review and update |
| 21 | manage-high-privileged-admin-roles | MEDIUM | 2.8 | Review optional |
| 22 | ip-firewall | MEDIUM | 1.20 | Update portal-walkthrough |
| 23 | cross-tenant-restrictions | MEDIUM | 2.1 | Review optional |
| 24 | manage-encryption-key | MEDIUM | 1.15 | Review optional |
| 25 | analytics-common-data-service | MEDIUM | 2.9 | Review optional |
| 26 | self-service-analytics | MEDIUM | 2.9 | Review optional |
| 27 | power-platform-inventory | MEDIUM | 3.11 | Review optional |
| 28 | monitor-copilot-studio | MEDIUM | 3.2 | Review optional |
| 29 | monitoring-overview | MEDIUM | None | Review optional |
| 30 | alerts | MEDIUM | None | Review optional |
| 31 | activity-logs-power-platform-admin | HIGH | None | Review and update |
| 32 | copilot-hub | MEDIUM | 3.1, 3.8 | Review and update |
| 33 | welcome-content | MEDIUM | None | Review optional |
| 34 | identity-access-management | MEDIUM | None | Review optional |
| 35 | manage-copilot-studio-messages-capacity | MEDIUM | None | Review optional |
| 36 | business-continuity-disaster-recovery | MEDIUM | 2.4 | Review optional |
| 37 | backup-restore-environments | MEDIUM | 2.4 | Update portal-walkthrough |
| 38 | regions-overview | MEDIUM | 2.4 | Update portal-walkthrough |
| 39 | capacity-storage | MEDIUM | 3.5 | Review optional |
| 40 | powerapps-powershell | MEDIUM | None | Review and update |
| 41 | powershell-getting-started | MEDIUM | 3.1 | Review optional |
| 42 | dlp-strategy | MEDIUM | 1.4 | Review optional |
| 43 | environment-strategy | MEDIUM | 2.4 | Review optional |
| 44 | power-bi-monitor | MEDIUM | 2.6 | Review optional |
| 45 | ...ower-platform/release-plan/2025wave2/ | MEDIUM | 1.27 | Review and update |
| 46 | ...ower-platform/release-plan/2026wave1/ | MEDIUM | 1.4, 1.18, 3.8, 2.25, 2.8, 2.3, 2.10, 2.17 | Review optional |
| 47 | ...ilot-security-enhanced-admin-controls | MEDIUM | 1.18, 2.8, 2.3 | Review optional |
| 48 | pipelines | MEDIUM | 1.28, 2.5, 2.3 | Update portal-walkthrough |
| 49 | set-up-pipelines | MEDIUM | 2.3 | Review optional |
| 50 | run-pipeline | MEDIUM | 2.3 | Review optional |
| 51 | ...-pipeline-rule-for-environment-groups | MEDIUM | None | Review optional |
| 52 | solution-concepts-alm | MEDIUM | 2.4, 2.3 | Review optional |
| 53 | admin-deployment-hub | MEDIUM | 2.1, 2.3 | Update portal-walkthrough |
| 54 | fundamentals-what-is-copilot-studio | MEDIUM | 2.13 | Review optional |
| 55 | security-and-governance | MEDIUM | 1.28, 1.4, 1.5, 1.8, 1.1, 1.3, 2.8 | Update portal-walkthrough |
| 56 | sensitivity-label-copilot-studio | MEDIUM | None | Review optional |
| 57 | ...ication-fundamentals-publish-channels | HIGH | None | Review and update |
| 58 | admin-share-bots | HIGH | None | Review and update |
| 59 | analytics-overview | MEDIUM | 3.2, 3.10, 2.5, 2.6, 2.9 | Update portal-walkthrough |
| 60 | analytics-improve-agent-effectiveness | HIGH | None | Update portal-walkthrough |
| 61 | advanced-connectors | MEDIUM | None | Review optional |
| 62 | knowledge-copilot-studio | MEDIUM | 1.14, 4.8, 2.16 | Review optional |
| 63 | nlu-gpt-overview | MEDIUM | 2.12 | Review optional |
| 64 | add-tools-custom-agent | MEDIUM | None | Review optional |
| 65 | external-security-provider | MEDIUM | 1.8 | Update portal-walkthrough |
| 66 | advanced-hand-off | MEDIUM | 2.12, 2.19 | Update portal-walkthrough |
| 67 | authoring-test-bot | HIGH | 2.5 | Update portal-walkthrough |
| 68 | admin-network-isolation-vnet | MEDIUM | None | Review optional |
| 69 | whats-new | MEDIUM | 2.10 | Review and update |
| 70 | sec-gov-intro | MEDIUM | 3.8 | Review optional |
| 71 | ...copilot-studio/guidance/architecture/ | MEDIUM | 2.12, 2.3, 2.17 | Review optional |
| 72 | planned-features | HIGH | 1.4, 3.8, 2.25, 2.17 | Review and update |
| 73 | mcp-create-new-server | MEDIUM | None | Review optional |
| 74 | ...ring-detecting-credential-oversharing | MEDIUM | 1.18, 3.8, 2.8, 2.3 | Review optional |
| 75 | whats-new | MEDIUM | None | Review optional |
| 76 | microsoft-365-copilot-overview | HIGH | 3.8 | Review and update |
| 77 | microsoft-365-copilot-privacy | MEDIUM | 4.7, 4.6, 2.23 | Review optional |
| 78 | microsoft-365-copilot-enable-users | MEDIUM | None | Review optional |
| 79 | manage-copilot-agents-integrated-apps | MEDIUM | 3.1, 3.11, 3.6, 3.8, 2.25 | Review optional |
| 80 | microsoft-365-copilot-usage | MEDIUM | 3.8 | Review optional |
| 81 | overview | MEDIUM | 3.8 | Review optional |
| 82 | security-governance | MEDIUM | None | Review optional |
| 83 | management-controls | MEDIUM | 3.8 | Review optional |
| 84 | agent-essentials-overview | MEDIUM | 2.25 | Review optional |
| 85 | agent-prerequisites | MEDIUM | 2.25 | Review optional |
| 86 | m365-agents-visual-map | MEDIUM | 1.1 | Review optional |
| 87 | m365-agents-checklist | MEDIUM | 1.11, 1.5, 1.1, 1.6, 3.1, 3.5 | Review optional |
| 88 | m365-agents-blueprint | MEDIUM | 1.11, 2.1, 2.3 | Review optional |
| 89 | ...rosoft.com/en-us/microsoft-agent-365/ | HIGH | 1.7, 3.2, 3.1, 3.6, 3.13, 2.12, 2.25, 2.5, 2.6 | Update portal-walkthrough |
| 90 | overview | HIGH | 3.1, 3.13, 2.12, 2.25, 2.6 | Update portal-walkthrough |
| 91 | .../en-us/microsoft-agent-365/developer/ | MEDIUM | 1.7, 3.2, 3.6, 2.5 | Review optional |
| 92 | agent-365-overview | MEDIUM | 3.13, 3.8, 2.25 | Review optional |
| 93 | agent-365-security | MEDIUM | 3.7, 2.25 | Review optional |
| 94 | human-in-the-loop | MEDIUM | 2.12, 2.17 | Review optional |
| 95 | dlp-learn-about-dlp | CRITICAL | 1.26, 1.5, 1.25, 1.3 | Update portal-walkthrough |
| 96 | dlp-create-deploy-policy | MEDIUM | 1.5 | Update portal-walkthrough |
| 97 | dlp-policy-reference | HIGH | None | Review and update |
| 98 | sensitivity-labels | CRITICAL | 1.26, 1.5, 1.3, 4.9 | Update portal-walkthrough |
| 99 | sensitivity-labels-teams-groups-sites | MEDIUM | 1.5, 1.3 | Update portal-walkthrough |
| 100 | audit-solutions-overview | HIGH | 1.28, 1.27, 1.7, 4.5, 2.13 | Update portal-walkthrough |
| 101 | audit-copilot | HIGH | 1.14, 1.7, 1.6, 1.19, 1.21 | Review and update |
| 102 | audit-log-retention-policies | HIGH | 1.7, 3.14, 4.5 | Update portal-walkthrough |
| 103 | audit-search | HIGH | None | Review and update |
| 104 | ai-microsoft-purview | MEDIUM | 1.5, 1.6, 1.16, 4.7, 4.8, 2.6 | Review and update |
| 105 | dspm-for-ai-considerations | MEDIUM | 1.6 | Review optional |
| 106 | communication-compliance | MEDIUM | 1.10, 1.21 | Update portal-walkthrough |
| 107 | communication-compliance-policies | MEDIUM | 1.10 | Update portal-walkthrough |
| 108 | ...tion-compliance-investigate-remediate | MEDIUM | 1.10 | Update portal-walkthrough |
| 109 | insider-risk-management | MEDIUM | 1.12, 1.5, 1.6 | Update portal-walkthrough |
| 110 | insider-risk-management-policies | MEDIUM | 1.12 | Update portal-walkthrough |
| 111 | ...management-settings-policy-indicators | MEDIUM | 1.12 | Update portal-walkthrough |
| 112 | insider-risk-management-activities | MEDIUM | 1.12 | Update portal-walkthrough |
| 113 | import-hr-data | HIGH | 1.12 | Update portal-walkthrough |
| 114 | ...ensitive-information-type-learn-about | MEDIUM | 1.13 | Review and update |
| 115 | ...e-a-custom-sensitive-information-type | MEDIUM | 1.13 | Review and update |
| 116 | sit-create-a-keyword-dictionary | MEDIUM | 1.13 | Review optional |
| 117 | ...arn-about-exact-data-match-based-sits | MEDIUM | 1.13 | Review and update |
| 118 | trainable-classifiers-learn-about | MEDIUM | 1.13 | Review and update |
| 119 | retention | MEDIUM | 1.9, 1.19, 3.5, 4.3, 2.21, 2.13 | Update portal-walkthrough |
| 120 | create-retention-policies | MEDIUM | None | Review optional |
| 121 | ...tion-labels-data-lifecycle-management | MEDIUM | 1.9, 4.3 | Review optional |
| 122 | retention-policies-sharepoint | MEDIUM | 4.3 | Review and update |
| 123 | disposition | MEDIUM | 1.9 | Review and update |
| 124 | retention-regulatory-requirements | MEDIUM | 1.9, 4.3 | Review and update |
| 125 | records-management | MEDIUM | 1.9, 3.3, 2.13 | Review and update |
| 126 | data-lifecycle-management | MEDIUM | None | Review optional |
| 127 | ediscovery | MEDIUM | 1.9, 1.19 | Update portal-walkthrough |
| 128 | ediscovery-create-and-manage-cases | MEDIUM | 1.19 | Review optional |
| 129 | ...keyword-queries-and-search-conditions | MEDIUM | 1.19 | Review optional |
| 130 | ediscovery-create-holds | HIGH | 1.9, 1.19 | Review and update |
| 131 | endpoint-dlp-learn-about | HIGH | 1.17 | Review and update |
| 132 | endpoint-dlp-getting-started | MEDIUM | 1.17 | Review optional |
| 133 | dlp-configure-endpoint-settings | MEDIUM | 1.17 | Review optional |
| 134 | information-barriers | HIGH | 1.22 | Update portal-walkthrough |
| 135 | encryption-sensitivity-labels | HIGH | 1.16 | Review and update |
| 136 | encryption | MEDIUM | 1.16 | Review optional |
| 137 | data-classification-activity-explorer | MEDIUM | 1.14, 1.6 | Review optional |
| 138 | compliance-manager | MEDIUM | 3.3, 2.13 | Review optional |
| 139 | compliance-manager-assessments | MEDIUM | 3.3, 2.13 | Review optional |
| 140 | overview | HIGH | 1.11 | Review and update |
| 141 | concept-conditional-access-policies | MEDIUM | None | Review optional |
| 142 | concept-conditional-access-cloud-apps | HIGH | None | Review and update |
| 143 | ...o-conditional-access-session-lifetime | MEDIUM | None | Review optional |
| 144 | concept-authentication-strengths | MEDIUM | None | Review and update |
| 145 | overview-authentication | MEDIUM | 1.11 | Review optional |
| 146 | how-to-authentication-passkeys-fido2 | HIGH | None | Review and update |
| 147 | custom-overview | MEDIUM | None | Review optional |
| 148 | permissions-reference | MEDIUM | 2.23 | Review optional |
| 149 | access-reviews-overview | MEDIUM | 1.14 | Update portal-walkthrough |
| 150 | create-access-review | MEDIUM | 1.3, 4.2, 2.8 | Review optional |
| 151 | pim-configure | MEDIUM | 1.18, 2.8 | Update portal-walkthrough |
| 152 | ...osoft.com/en-us/entra/identity/users/ | MEDIUM | 3.6 | Review optional |
| 153 | ...-entra-agent-identities-for-ai-agents | MEDIUM | 1.11, 1.18 | Review optional |
| 154 | agent-id-governance-overview | HIGH | 1.11, 3.6, 2.26 | Review and update |
| 155 | sharepoint-admin-role | MEDIUM | None | Review optional |
| 156 | modern-experience-sharing-permissions | MEDIUM | 1.14, 4.8 | Review and update |
| 157 | external-sharing-overview | MEDIUM | 4.4 | Review and update |
| 158 | turn-external-sharing-on-or-off | MEDIUM | 1.3, 4.4 | Review and update |
| 159 | restricted-access-control | MEDIUM | 1.3, 4.1 | Review optional |
| 160 | restricted-content-discovery | MEDIUM | 1.14, 1.3, 4.1, 4.7, 4.6 | Review and update |
| 161 | restricted-sharepoint-search | MEDIUM | 1.14, 1.3, 4.1, 4.7, 4.6 | Review and update |
| 162 | advanced-management | HIGH | 1.3, 4.1, 4.5, 4.2, 4.6 | Review and update |
| 163 | data-access-governance-reports | MEDIUM | 1.14, 1.3, 4.4, 4.1, 4.5, 4.2, 4.6 | Update portal-walkthrough |
| 164 | site-lifecycle-management | MEDIUM | 4.3, 4.2 | Review and update |
| 165 | request-site-attestations | MEDIUM | 4.2 | Review optional |
| 166 | information-barriers-sharepoint | HIGH | None | Review and update |
| 167 | insights-on-sharepoint-agents | MEDIUM | 4.5 | Review and update |
| 168 | control-lists | MEDIUM | None | Review optional |
| 169 | create-training-site | MEDIUM | None | Review optional |
| 170 | ...ntent-approval-and-check-out-planning | MEDIUM | 2.16 | Review optional |
| 171 | create-retention-policies | MEDIUM | None | Review optional |
| 172 | manage-addins-in-the-admin-center | MEDIUM | 1.2 | Review optional |
| 173 | view-service-health | MEDIUM | None | Review optional |
| 174 | message-center | CRITICAL | 2.10 | Monitor |
| 175 | overview | MEDIUM | 3.9 | Review optional |
| 176 | connect-data-sources | MEDIUM | 3.9 | Review optional |
| 177 | create-analytics-rules | MEDIUM | None | Review optional |
| 178 | threat-detection | MEDIUM | None | Review optional |
| 179 | monitor-your-data | MEDIUM | 3.9 | Review optional |
| 180 | ...cident-handling-with-automation-rules | MEDIUM | 3.9 | Review optional |
| 181 | investigate-cases | MEDIUM | None | Review optional |
| 182 | overview | MEDIUM | None | Review optional |
| 183 | private-link-service | HIGH | 1.20 | Review and update |
| 184 | private-link-overview | MEDIUM | 1.20 | Review optional |
| 185 | immutable-storage-overview | MEDIUM | 1.7, 2.13 | Update portal-walkthrough |
| 186 | alerts-overview | MEDIUM | 2.9 | Review optional |
| 187 | overview | MEDIUM | 2.10 | Review optional |
| 188 | what-is-information-protection | MEDIUM | None | Review optional |
| 189 | track-and-revoke-admin | MEDIUM | None | Review optional |
| 190 | apply-irm-to-a-list-or-library | MEDIUM | 1.16 | Review optional |
| 191 | concept-responsible-ai | MEDIUM | 2.21 | Review optional |
| 192 | overview | MEDIUM | 1.8, 1.27 | Update portal-walkthrough |
| 193 | overview-cost-management | MEDIUM | 3.5 | Review optional |
| 194 | tutorial-acm-create-budgets | MEDIUM | 3.5 | Review optional |
| 195 | overview | MEDIUM | None | Review optional |
| 196 | device-control-overview | MEDIUM | 1.17 | Review optional |
| 197 | ai-agent-inventory | HIGH | 1.8, 3.7 | Update portal-walkthrough |
| 198 | get-started-approvals | MEDIUM | 3.10, 3.12, 2.21, 2.16 | Update portal-walkthrough |
| 199 | run-scheduled-tasks | MEDIUM | 3.3, 3.6 | Review optional |
| 200 | use-powerapps-checker | MEDIUM | None | Review optional |
| 201 | plan-designer | MEDIUM | None | Review optional |
| 202 | information-barriers-teams | HIGH | None | Review and update |
| 203 | application | HIGH | 1.2 | Review and update |
| 204 | accessreviewsv2-overview | MEDIUM | 4.2 | Review optional |
| 205 | fabric-adoption-roadmap-governance | MEDIUM | None | Review optional |
| 206 | overview-viva-learning | MEDIUM | 2.14 | Review optional |
| 207 | incident-response-planning | MEDIUM | None | Review optional |
| 208 | ...osoft.com/en-us/security/ai-red-team/ | MEDIUM | 2.20 | Update portal-walkthrough |
| 209 | new-dlpcompliancepolicy | CRITICAL | 1.5 | Monitor |
| 210 | ...365-management-activity-api-reference | MEDIUM | 1.7 | Review optional |
| 211 | whats-new | HIGH | None | Review and update |
| 212 | pricing-billing-skus | MEDIUM | 3.5, 2.1 | Review optional |
| 213 | microsoft-365-overview | MEDIUM | None | Review optional |
| 214 | ...ecurity-compliance-licensing-guidance | MEDIUM | 1.19, 1.21, 1.13 | Update portal-walkthrough |
| 215 | microsoft-purview-service-description | MEDIUM | None | Review optional |
| 216 | requirements-licensing-subscriptions | MEDIUM | None | Review optional |

---

## CRITICAL: Playbook Updates Required

These changes affect step-by-step procedures and must be addressed.

### 1. Managed Environments

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-overview
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.8: Control 1.8: Runtime Protection and External Threat Detection
  - File: `controls/pillar-1-security/1.8-runtime-protection-and-external-threat-detection.md`
- Control 3.7: Control 3.7: PPAC Security Posture Assessment
  - File: `controls/pillar-3-reporting/3.7-ppac-security-posture-assessment.md`
- Control 2.15: Control 2.15: Environment Routing and Auto-Provisioning
  - File: `controls/pillar-2-management/2.15-environment-routing.md`
- Control 2.1: Control 2.1: Managed Environments
  - File: `controls/pillar-2-management/2.1-managed-environments.md`
- Control 2.2: Control 2.2: Environment Groups and Tier Classification
  - File: `controls/pillar-2-management/2.2-environment-groups-and-tier-classification.md`
- Control 2.7: Control 2.7: Vendor and Third-Party Risk Management
  - File: `controls/pillar-2-management/2.7-vendor-and-third-party-risk-management.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.1/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/1.8/powershell-setup.md` (HIGH)
- ⚠️ `playbooks/control-implementations/2.5/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/1.14/verification-testing.md` (HIGH)
- ⚠️ `playbooks/control-implementations/2.15/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 2. Managed Environment Sharing Limits

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-sharing-limits
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.1: Control 1.1: Restrict Agent Publishing by Authorization
  - File: `controls/pillar-1-security/1.1-restrict-agent-publishing-by-authorization.md`
- Control 2.1: Control 2.1: Managed Environments
  - File: `controls/pillar-2-management/2.1-managed-environments.md`
- Control 2.2: Control 2.2: Environment Groups and Tier Classification
  - File: `controls/pillar-2-management/2.2-environment-groups-and-tier-classification.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.1/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 3. Environment Groups

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/environment-groups
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.28: Control 1.28: Policy-Based Agent Publishing Restrictions
  - File: `controls/pillar-1-security/1.28-policy-based-agent-publishing-restrictions.md`
- Control 1.4: Control 1.4: Advanced Connector Policies (ACP)
  - File: `controls/pillar-1-security/1.4-advanced-connector-policies-acp.md`
- Control 2.15: Control 2.15: Environment Routing and Auto-Provisioning
  - File: `controls/pillar-2-management/2.15-environment-routing.md`
- Control 2.2: Control 2.2: Environment Groups and Tier Classification
  - File: `controls/pillar-2-management/2.2-environment-groups-and-tier-classification.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.4/portal-walkthrough.md` (CRITICAL)
- ⚠️ `playbooks/control-implementations/2.2/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/2.2/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 4. Environment Group Rules

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/environment-groups-rules
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.2: Control 2.2: Environment Groups and Tier Classification
  - File: `controls/pillar-2-management/2.2-environment-groups-and-tier-classification.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.2/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/2.2/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 5. Advanced Connector Policies

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/advanced-connector-policies
**Section:** Power Platform Administration
**Classification:** CRITICAL (Deprecation notice)

**Affected Controls:**
- Control 1.4: Control 1.4: Advanced Connector Policies (ACP)
  - File: `controls/pillar-1-security/1.4-advanced-connector-policies-acp.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.4/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/1.4/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -29,27 +24,76 @@ Summarize this article for me
 [This article is prerelease documentation and is subject to change.]
 Overview
-Advanced connector policies (ACP) represent the next generation of securing connector usage within the Power Platform. This feature provides a modern and flexible approach to managing all
+Advanced connector policies (ACP) represent the next generation of securing connector usage within Power Platform. ACP provides a modern, flexible approach to managing
 certified connectors
-, aligning with the broader governance strategy of per-environment security controls paired with
-environment group support
-.
+, replacing the Business/Non-Business/Blocked classification model in classic
+data policies
+with a strict allowlist that blocks all connectors by default.
+Key principles of advanced connector policies:
+Default-deny posture
+: All connectors and actions are blocked unless explicitly allowed. New connectors added to the platform are automatically blocked.
+Per-environment and environment group support
+: Configure policies directly on individual environments or deploy at scale through
+environment groups
+.
+Action-level visibility
+: See triggers, internal actions, and deprecated actions across all certified connectors to make informed governance decisions.
+Design-time enforcement
+: Makers are blocked from using restricted connectors while authoring, not just at runtime.
+ACP-only mode
+: Optionally skip classic data policy evaluation entirely for a clean governance posture.
 By adopting advanced connector policies, administrators gain greater control and granularity in securing and managing connector usage while enhancing the overall governance of their Power Platform environments.
+Important
+Advanced connector p
```

---

### 6. DLP Policies (Power Platform)

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/wp-data-loss-prevention
**Section:** Power Platform Administration
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 1.28: Control 1.28: Policy-Based Agent Publishing Restrictions
  - File: `controls/pillar-1-security/1.28-policy-based-agent-publishing-restrictions.md`
- Control 1.14: Control 1.14: Data Minimization and Agent Scope Control
  - File: `controls/pillar-1-security/1.14-data-minimization-and-agent-scope-control.md`
- Control 1.5: Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels
  - File: `controls/pillar-1-security/1.5-data-loss-prevention-dlp-and-sensitivity-labels.md`
- Control 3.7: Control 3.7: PPAC Security Posture Assessment
  - File: `controls/pillar-3-reporting/3.7-ppac-security-posture-assessment.md`
- Control 2.24: Control 2.24: Agent Feature Enablement and Restriction Governance
  - File: `controls/pillar-2-management/2.24-agent-feature-enablement-and-restriction-governance.md`
- Control 2.7: Control 2.7: Vendor and Third-Party Risk Management
  - File: `controls/pillar-2-management/2.7-vendor-and-third-party-risk-management.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.25/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.14/verification-testing.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.4/portal-walkthrough.md` (CRITICAL)
- ⚠️ `playbooks/control-implementations/1.5/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/1.5/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -28,66 +23,77 @@ Feedback
 Summarize this article for me
 Data policies are a critical aspect of maintaining data security and compliance within the Microsoft Power Platform ecosystem.
-You can create data policies that can act as guardrails to help reduce the risk of users from unintentionally exposing organizational data. A core component of Power Apps, Power Automate, and Microsoft Copilot Studio is the use of connectors to enumerate, populate, push, and pull data. Data policies in Power Platform admin center allow administrators to control access to these connectors in various ways to help reduce risk in your organization.
+Create data policies that act as guardrails to help reduce the risk of users unintentionally exposing organizational data. A core component of Power Apps, Power Automate, and Microsoft Copilot Studio is the use of connectors to enumerate, populate, push, and pull data. Power Platform admin center data policies allow administrators to control access to these connectors in various ways to help reduce risk in your organization.
 This overview describes some high-level concepts related to connectors and several important considerations to take into account when setting up your policies or making policy changes.
 Connectors
-Connectors, at their most basic level, are strongly typed representations of restful, application programming interfaces, also known as APIs. For example, the Power Platform API provides several operations related to functionality in Power Platform admin center.
-When wrapping the Power Platform API in to a connector, it becomes easier for makers and citizen developers to utilize the API in their low-code apps, workflows, and chatbots. For example, the Power Platform for Admins V2 connector is the repres
```

---

### 7. Connector Classification

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/dlp-connector-classification
**Section:** Power Platform Administration
**Classification:** CRITICAL (Deprecation notice)

**Affected Controls:**
- Control 1.14: Control 1.14: Data Minimization and Agent Scope Control
  - File: `controls/pillar-1-security/1.14-data-minimization-and-agent-scope-control.md`
- Control 4.6: Control 4.6: Grounding Scope Governance
  - File: `controls/pillar-4-sharepoint/4.6-grounding-scope-governance.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.14/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/1.14/verification-testing.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.4/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -27,30 +22,31 @@ Connector classification
 Feedback
 Summarize this article for me
-Data groups are a simple way to categorize connectors within a data policy. The three data groups available are the
+Data groups categorize connectors within a data policy. The three data groups are the
 Business
 data group, the
 Non-Business
 data group, and the
 Blocked
 data group.
-A good way to categorize connectors is to place them in groups based on the business-centered or personal-use-centered services that they connect to in the context of your organization. Connectors that host business-use data should be classified as
-Business
-, and connectors that host personal-use data should be classified as
-Non-Business
-. Any connectors that you want to keep from being used at all across one or more environments should be classified as
-Blocked
-.
-When a new policy is created, by default all connectors are placed in the
-Non-Business
-group. From there they can be moved to
-Business
-or
-Blocked
-based on your preference. You manage the connectors in a data group when you create or modify the properties of a data policy from the admin center. See
+Categorize connectors by placing them in groups based on the business-centered or personal-use-centered services that they connect to in the context of your organization. Classify connectors that host business-use data as
+Business
+. Classify connectors that host personal-use data as
+Non-Business
+. Classify connectors that you want to keep from being used at all across one or more environments as
+Blocked
+.
+When you create a new policy, all connectors are placed in the
+Non-Business
+group by default. From there, you can move connectors to
+Business
+or
+Blocked
+based on your preference. You manage the conn
```

---

### 8. IP Firewall

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/ip-firewall
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.20: Control 1.20: Network Isolation and Private Connectivity
  - File: `controls/pillar-1-security/1.20-network-isolation-private-connectivity.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.1/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/2.1/verification-testing.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 9. Backup and Restore

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/backup-restore-environments
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.4: Control 2.4: Business Continuity and Disaster Recovery
  - File: `controls/pillar-2-management/2.4-business-continuity-and-disaster-recovery.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.4/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 10. Regions Overview

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/regions-overview
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.4: Control 2.4: Business Continuity and Disaster Recovery
  - File: `controls/pillar-2-management/2.4-business-continuity-and-disaster-recovery.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.4/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 11. Pipelines Overview

**URL:** https://learn.microsoft.com/en-us/power-platform/alm/pipelines
**Section:** Power Platform ALM
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.28: Control 1.28: Policy-Based Agent Publishing Restrictions
  - File: `controls/pillar-1-security/1.28-policy-based-agent-publishing-restrictions.md`
- Control 2.5: Control 2.5: Testing, Validation, and Quality Assurance
  - File: `controls/pillar-2-management/2.5-testing-validation-and-quality-assurance.md`
- Control 2.3: Control 2.3: Change Management and Release Planning
  - File: `controls/pillar-2-management/2.3-change-management-and-release-planning.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.5/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 12. Admin Deployment Hub

**URL:** https://learn.microsoft.com/en-us/power-platform/alm/admin-deployment-hub
**Section:** Power Platform ALM
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.1: Control 2.1: Managed Environments
  - File: `controls/pillar-2-management/2.1-managed-environments.md`
- Control 2.3: Control 2.3: Change Management and Release Planning
  - File: `controls/pillar-2-management/2.3-change-management-and-release-planning.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.3/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 13. Security and Governance

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/security-and-governance
**Section:** Copilot Studio
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.28: Control 1.28: Policy-Based Agent Publishing Restrictions
  - File: `controls/pillar-1-security/1.28-policy-based-agent-publishing-restrictions.md`
- Control 1.4: Control 1.4: Advanced Connector Policies (ACP)
  - File: `controls/pillar-1-security/1.4-advanced-connector-policies-acp.md`
- Control 1.5: Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels
  - File: `controls/pillar-1-security/1.5-data-loss-prevention-dlp-and-sensitivity-labels.md`
- Control 1.8: Control 1.8: Runtime Protection and External Threat Detection
  - File: `controls/pillar-1-security/1.8-runtime-protection-and-external-threat-detection.md`
- Control 1.1: Control 1.1: Restrict Agent Publishing by Authorization
  - File: `controls/pillar-1-security/1.1-restrict-agent-publishing-by-authorization.md`
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`
- Control 2.8: Control 2.8: Access Control and Segregation of Duties
  - File: `controls/pillar-2-management/2.8-access-control-and-segregation-of-duties.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.8/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 14. Analytics

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/analytics-overview
**Section:** Copilot Studio
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 3.2: Control 3.2: Usage Analytics and Activity Monitoring
  - File: `controls/pillar-3-reporting/3.2-usage-analytics-and-activity-monitoring.md`
- Control 3.10: Control 3.10: Hallucination Feedback Loop
  - File: `controls/pillar-3-reporting/3.10-hallucination-feedback-loop.md`
- Control 2.5: Control 2.5: Testing, Validation, and Quality Assurance
  - File: `controls/pillar-2-management/2.5-testing-validation-and-quality-assurance.md`
- Control 2.6: Control 2.6: Model Risk Management (OCC 2011-12/SR 11-7)
  - File: `controls/pillar-2-management/2.6-model-risk-management-sr-26-2.md`
- Control 2.9: Control 2.9: Agent Performance Monitoring and Optimization
  - File: `controls/pillar-2-management/2.9-agent-performance-monitoring-and-optimization.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.6/portal-walkthrough.md` (CRITICAL)
- ⚠️ `playbooks/control-implementations/2.5/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 15. Customer Satisfaction

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/analytics-improve-agent-effectiveness
**Section:** Copilot Studio
**Classification:** HIGH (Feature availability)

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.5/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -62,7 +57,7 @@ : Understanding when agent struggles to provide answers to user questions and how it uses knowledge sources can help you find ways to improve your agent's answer rate and quality.
 Tool use
 : Learning how often tools are used and how often they succeed can help you understand if those tools are useful and successful for users.
-Satisfaction
+Effectiveness
 : Reviewing user feedback helps you identify new user scenarios and issues, and making improvements based directly on what your users are asking for.
 You can view analytics for events that occurred in the last 90 days.
 Conversation outcomes
@@ -247,15 +242,7 @@ The
 See all
 button is visible only if there are more than five connected or child agents to your main agent.
-Generated answer rate and quality (preview)
-Important
-This article contains Microsoft Copilot Studio preview documentation and is subject to change.
-Preview features aren't meant for production use and may have restricted functionality. These features are available before an official release so that you can get early access and
-provide feedback
-.
-If you're building a production-ready agent, see
-Microsoft Copilot Studio Overview
-.
+Generated answer rate and quality
 With generative answers, your agent can use AI to generate answers to user queries using knowledge sources and the instructions you provide. However, your agent might not be able to answer all user queries. The
 Generated answer rate and quality
 section tracks, organizes, and analyzes unanswered queries and answer quality to give you guidance for improving your agent's answering performance.
@@ -291,8 +278,6 @@ for metrics about the main agent only, or
 Child agent
 for metrics about child agents only.
-Unanswered questions
-shows the re
```

---

### 16. External Threat Detection

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/external-security-provider
**Section:** Copilot Studio
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.8: Control 1.8: Runtime Protection and External Threat Detection
  - File: `controls/pillar-1-security/1.8-runtime-protection-and-external-threat-detection.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.8/powershell-setup.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.8/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 17. Human Agent Handoff

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/advanced-hand-off
**Section:** Copilot Studio
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.12: Control 2.12: Supervision and Oversight (FINRA Rule 3110)
  - File: `controls/pillar-2-management/2.12-supervision-and-oversight-finra-rule-3110.md`
- Control 2.19: Control 2.19: Customer AI Disclosure and Transparency
  - File: `controls/pillar-2-management/2.19-customer-ai-disclosure-and-transparency.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.19/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/2.19/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 18. Test Your Agent

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/authoring-test-bot
**Section:** Copilot Studio
**Classification:** HIGH (UI element names)

**Affected Controls:**
- Control 2.5: Control 2.5: Testing, Validation, and Quality Assurance
  - File: `controls/pillar-2-management/2.5-testing-validation-and-quality-assurance.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.5/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -27,7 +22,7 @@ Test your agent
 Feedback
 Summarize this article for me
-As you design your agent in Copilot Studio, use a test panel to see how the agent leads a customer through the conversation. It's a good way to make sure your topics work and that conversations flow as you expect.
+As you design your agent in Copilot Studio, use the test panel to see how the agent leads a customer through the conversation. It's a good way to make sure your topics work and that conversations flow as you expect.
 When you test an agent that uses generative orchestration, you can follow the orchestrator's plan in real time on the
 activity map
 . Close the activity map if you want to follow through the conversation path step by step with tracking between topics turned on.
@@ -186,6 +181,10 @@ ) at the top of the test panel, thenâ¯select
 Manage connections
 .
+Important
+The
+Test your agent
+panel is for design-time validation and doesn't fully replicate all published channel behaviors. Timer-based and background-triggered events, including inactivity triggers, might not fire or surface follow-up messages in the test panel even when the agent is configured correctly. To validate inactivity-triggered behavior, publish the agent and test it in a supported channel such as Microsoft Teams. Don't treat the test panel as authoritative validation for inactivity-based scenarios.
 Report issues
 Help us improve Copilot Studio by reporting issues. All information collected remains anonymous.
 Web app

```

---

### 19. Agent 365 Documentation Hub

**URL:** https://learn.microsoft.com/en-us/microsoft-agent-365/
**Section:** Microsoft Agent 365 & Agent Essentials
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.7: Control 1.7: Comprehensive Audit Logging and Compliance
  - File: `controls/pillar-1-security/1.7-comprehensive-audit-logging-and-compliance.md`
- Control 3.2: Control 3.2: Usage Analytics and Activity Monitoring
  - File: `controls/pillar-3-reporting/3.2-usage-analytics-and-activity-monitoring.md`
- Control 3.1: Control 3.1: Agent Inventory and Metadata Management
  - File: `controls/pillar-3-reporting/3.1-agent-inventory-and-metadata-management.md`
- Control 3.6: Control 3.6: Orphaned Agent Detection and Remediation
  - File: `controls/pillar-3-reporting/3.6-orphaned-agent-detection-and-remediation.md`
- Control 3.13: Control 3.13: Agent 365 Admin Center Analytics and Reporting
  - File: `controls/pillar-3-reporting/3.13-agent-365-admin-center-analytics.md`
- Control 2.12: Control 2.12: Supervision and Oversight (FINRA Rule 3110)
  - File: `controls/pillar-2-management/2.12-supervision-and-oversight-finra-rule-3110.md`
- Control 2.25: Control 2.25: Microsoft Agent 365 — Admin Center Governance Console
  - File: `controls/pillar-2-management/2.25-agent-365-admin-center-governance-console.md`
- Control 2.5: Control 2.5: Testing, Validation, and Quality Assurance
  - File: `controls/pillar-2-management/2.5-testing-validation-and-quality-assurance.md`
- Control 2.6: Control 2.6: Model Risk Management (OCC 2011-12/SR 11-7)
  - File: `controls/pillar-2-management/2.6-model-risk-management-sr-26-2.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.25/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -1,8 +1,8 @@ Microsoft Agent 365 documentation
-Agent 365 enables frontier organizations to deploy, govern, and manage agents at scale with confidence. By seamlessly integrating with Microsoft productivity and business tools, and powered by enterprise-grade security, Agent 365 unlocks new possibilities for employees to work smarter, faster, and more creatively with agents.
+Agent 365 is the control plane for IT and security leaders to observe, secure, and govern agents across the organization.
 Get early access to Agent 365 for IT admins
 Get started with Microsoft Agent 365
-Learn more about Microsoft Agent 365.
+Microsoft Agent 365 allows you to manage all your organizationâs agents at scale, regardless of where these agents are built or acquired.
 What is Agent 365?
 Agent 365 is the control plane for AI agents. Empower your organization to confidently deploy, govern, and manage all your agents at scale, regardless of where these agents are built or acquired.
 Learn more
@@ -12,17 +12,16 @@ How can I extend my agent to be Microsoft Agent 365 compatible?
 Any agent can adopt Agent 365, regardless of where the agent is built or acquired. Learn how to get started as an agent developer.
 Learn more
-What do I get with Microsoft Agent 365?
-Microsoft Agent 365 allows you to manage all your organizationâs agents at scale, regardless of where these agents are built or acquired.
-Registry
-Get a complete view of all agents that are being used in your organization, including agents with agent ID, agents you register yourself, and shadow agents.
-Access Control
-Bring agents under management and limit their access to only the resources they need. Prevent agent compromise with risk-based conditional access policies.
-Visualization
-Explore connections between agents, people, and data. Monitor agent behavior and performance in real time to assess their impact on your organization.
-Interoperability
-Equip agents with apps and data to simplify human-agent workf
```

---

### 20. Agent 365 Overview

**URL:** https://learn.microsoft.com/en-us/microsoft-agent-365/overview
**Section:** Microsoft Agent 365 & Agent Essentials
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 3.1: Control 3.1: Agent Inventory and Metadata Management
  - File: `controls/pillar-3-reporting/3.1-agent-inventory-and-metadata-management.md`
- Control 3.13: Control 3.13: Agent 365 Admin Center Analytics and Reporting
  - File: `controls/pillar-3-reporting/3.13-agent-365-admin-center-analytics.md`
- Control 2.12: Control 2.12: Supervision and Oversight (FINRA Rule 3110)
  - File: `controls/pillar-2-management/2.12-supervision-and-oversight-finra-rule-3110.md`
- Control 2.25: Control 2.25: Microsoft Agent 365 — Admin Center Governance Console
  - File: `controls/pillar-2-management/2.25-agent-365-admin-center-governance-console.md`
- Control 2.6: Control 2.6: Model Risk Management (OCC 2011-12/SR 11-7)
  - File: `controls/pillar-2-management/2.6-model-risk-management-sr-26-2.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.25/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -33,7 +28,36 @@ to get
 early access
 to Microsoft Agent 365. Frontier connects you directly with Microsoftâs latest AI innovations. Frontier previews are subject to the existing preview terms of your customer agreements. As these features are still in development, their availability and capabilities may change over time.
-Agent 365 gives each AI agent its own Microsoft Entra Agent ID, for identity, lifecycle, and access management. It also allows agents to be observable and managed in the Microsoft 365 admin center. In addition, AI agents might adopt Agent 365 capabilities that empower these agents to listen for tool notifications and take actions directly within productivity tools.
+AI-powered agents are rapidly becoming ubiquitous across enterprises, driving a broad and accelerating transformation. Microsoft Agent 365 provides the ability to
+observe
+,
+govern
+, and
+secure
+the growing number of agents within organizations.
+Observe
+Microsoft Agent 365 gives organizations real-time visibility into their agentic environment, helping admins understand how agents are used, identify performance or risk signals early, and take action before issues impact the business. Admins can now view all their agents in a single, centralized registry providing a unified view of agent adoption, activity, and agent health. These insights help leaders and AI admins stay in control, operate efficiently, and maximize the value of their agent investments from a centralized AI admin experience. Learn more:
+Observability
+,
+Use and collaborate with agents
+,
+Observe agent activity
+,
+Use Agent Map
+.
+Govern
+Establish consistent guardrails for AI agents by centralizing lifecycle management, access control, and compliance across the enterprise. Through the
```

---

### 21. Data Loss Prevention

**URL:** https://learn.microsoft.com/en-us/purview/dlp-learn-about-dlp
**Section:** Microsoft Purview
**Classification:** CRITICAL (Deprecation notice)

**Affected Controls:**
- Control 1.26: Control 1.26: Agent File Upload and File Analysis Restrictions
  - File: `controls/pillar-1-security/1.26-agent-file-upload-and-file-analysis-restrictions.md`
- Control 1.5: Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels
  - File: `controls/pillar-1-security/1.5-data-loss-prevention-dlp-and-sensitivity-labels.md`
- Control 1.25: Control 1.25: MIME Type Restrictions for File Uploads
  - File: `controls/pillar-1-security/1.25-mime-type-restrictions.md`
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/3.1/verification-testing.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.5/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -344,6 +339,8 @@ Use these cmdlets:
 Get-DlpDetailReport
 Get-MailDetailDlpPolicyReport
+DLP Rule Undo event
+A DLP Rule Undo event occurs when a previously matched DLP rule no longer applies to a document, causing the rule to be effectively reversed. This can happen in two main scenarios: when a user modifies content so it no longer meets the rule conditions, or when a policy or rule is changed and triggers re-evaluation of already-classified content. During this re-evaluation, if a document no longer satisfies the rule criteria, a DLP Rule Undo event is generated. For example, if a policy is configured to detect documents containing at least five Social Security numbers and a user uploads a document with ten, the rule will initially match. If the user later removes the sensitive data so the document no longer meets the threshold, the rule is undone. Similarly, if an administrator updates the policy to require fifteen Social Security numbers, the same document will no longer meet the criteria upon re-evaluation, resulting in a DLP Rule Undo event.
 Contextual summary
 You can see the text that surrounds the matched content, like a credit card number in a
 DLPRuleMatch

```

---

### 22. Create DLP Policies

**URL:** https://learn.microsoft.com/en-us/purview/dlp-create-deploy-policy
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.5: Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels
  - File: `controls/pillar-1-security/1.5-data-loss-prevention-dlp-and-sensitivity-labels.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.13/troubleshooting.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.5/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 23. Sensitivity Labels

**URL:** https://learn.microsoft.com/en-us/purview/sensitivity-labels
**Section:** Microsoft Purview
**Classification:** CRITICAL (Deprecation notice)

**Affected Controls:**
- Control 1.26: Control 1.26: Agent File Upload and File Analysis Restrictions
  - File: `controls/pillar-1-security/1.26-agent-file-upload-and-file-analysis-restrictions.md`
- Control 1.5: Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels
  - File: `controls/pillar-1-security/1.5-data-loss-prevention-dlp-and-sensitivity-labels.md`
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`
- Control 4.9: Control 4.9: Embedded File Content Governance
  - File: `controls/pillar-4-sharepoint/4.9-embedded-file-content-governance.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.26/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/3.1/verification-testing.md` (HIGH)
- ℹ️ `playbooks/control-implementations/4.8/troubleshooting.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.5/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -33,7 +28,7 @@ Apply sensitivity labels to your files
 .
 The information on this page is for IT administrators who can create and configure those labels by using the Microsoft Purview management solution.
-To get their work done, people in your organization collaborate with others both inside and outside the organization. This means that content no longer stays behind a firewallâit can roam everywhere, across devices, apps, and services. And when it roams, you want it to do so in a secure, protected way that meets your organization's business and compliance policies.
+To get their work done, people in your organization collaborate with others both inside and outside the organization. This collaboration means that content no longer stays behind a firewallâit can roam everywhere, across devices, apps, and services. When content roams, you want it to do so in a secure, protected way that meets your organization's business and compliance policies.
 Sensitivity labels from Microsoft Purview Information Protection let you classify and protect your organization's data, while making sure that user productivity and their ability to collaborate isn't hindered.
 The following example from Excel shows how users might see an applied sensitivity label from the window bar, and how they can easily change the label by using the
 sensitivity bar
@@ -85,15 +80,15 @@ Microsoft 365 roadmap
 .
 What a sensitivity label is
-When you assign a sensitivity label to content, it's like a stamp that's applied and is:
+When you assign a sensitivity label to content, it's like a stamp that you apply. The label is:
 Customizable.
-Specific to your organization and business needs, you can create categories for different levels of sensitive content in your organization. F
```

---

### 24. Sensitivity Labels for Sites

**URL:** https://learn.microsoft.com/en-us/purview/sensitivity-labels-teams-groups-sites
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.5: Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels
  - File: `controls/pillar-1-security/1.5-data-loss-prevention-dlp-and-sensitivity-labels.md`
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.5/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 25. Audit Logging

**URL:** https://learn.microsoft.com/en-us/purview/audit-solutions-overview
**Section:** Microsoft Purview
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 1.28: Control 1.28: Policy-Based Agent Publishing Restrictions
  - File: `controls/pillar-1-security/1.28-policy-based-agent-publishing-restrictions.md`
- Control 1.27: Control 1.27: AI Agent Content Moderation Enforcement
  - File: `controls/pillar-1-security/1.27-ai-agent-content-moderation-enforcement.md`
- Control 1.7: Control 1.7: Comprehensive Audit Logging and Compliance
  - File: `controls/pillar-1-security/1.7-comprehensive-audit-logging-and-compliance.md`
- Control 4.5: Control 4.5: SharePoint Security and Compliance Monitoring
  - File: `controls/pillar-4-sharepoint/4.5-sharepoint-security-and-compliance-monitoring.md`
- Control 2.13: Control 2.13: Documentation and Record Keeping
  - File: `controls/pillar-2-management/2.13-documentation-and-record-keeping.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.27/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/4.5/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.2/sponsorship-lifecycle-workflows.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.8/powershell-setup.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.7/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -190,10 +185,17 @@ Before you get started, review the
 subscription requirements
 for Audit (Standard) and Audit (Premium).
-Training
-Training your security operations team, IT administrators, and compliance investigators in the fundamentals for Audit (Standard) and Audit (Premium) can help your organization get started more quickly using auditing to help with your investigations. Microsoft Purview provides the following resource to help these users in your organization get started with auditing:
+Next steps
+Tip
+Training your security operations team, IT administrators, and compliance investigators in Audit (Standard) and Audit (Premium) can help your organization get started more quickly. For more information, see
 Describe the eDiscovery and audit capabilities of Microsoft Purview
 .
+Get started with auditing solutions
+: Walk through the setup steps to enable Audit (Standard) or Audit (Premium) in your organization.
+Search the audit log
+: Run your first audit log search to find user and admin activities.
+Manage audit log retention policies
+: Create custom retention policies to keep audit records beyond the default period.
 Feedback
 Was this page helpful?
 Yes

```

---

### 26. Audit Log Retention

**URL:** https://learn.microsoft.com/en-us/purview/audit-log-retention-policies
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 1.7: Control 1.7: Comprehensive Audit Logging and Compliance
  - File: `controls/pillar-1-security/1.7-comprehensive-audit-logging-and-compliance.md`
- Control 3.14: Control 3.14: Agent 365 Observability SDK and Custom Agent Telemetry
  - File: `controls/pillar-3-reporting/3.14-agent-365-observability-sdk.md`
- Control 4.5: Control 4.5: SharePoint Security and Compliance Monitoring
  - File: `controls/pillar-4-sharepoint/4.5-sharepoint-security-and-compliance-monitoring.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.5/powershell-setup.md` (HIGH)
- ℹ️ `playbooks/control-implementations/4.5/troubleshooting.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.7/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -47,6 +42,7 @@ property (which is the service in which the activity occurred). Audit records for all other activities are retained for 180 days by default or you can change the retention to a different duration using a custom retention policy.
 Note
 The default audit log retention policy only applies to audit records for activity performed by users who are assigned an Office 365 or Microsoft 365 E5 license or have a Microsoft Purview Suite (formerly known as Microsoft 365 E5 Compliance) or E5 eDiscovery and Audit add-on license. If you have non-E5 users or guest users in your organization, their corresponding audit records are retained for 180 days.
+The default retention period for audit records varies by license type and when the records were generated.
 Important
 The default retention period for Audit (Standard) changed from 90 days to 180 days. Audit (Standard) logs generated before October 17, 2023 are retained for 90 days. Audit (Standard) logs generated on or after October 17, 2023 follow the new default retention of 180 days.
 Before you create an audit log retention policy
@@ -92,7 +88,7 @@ : The audit record type the policy applies to. If you leave this property blank, the policy applies to all record types. You can select a single record type or multiple record types:
 If you select a single record type, the
 Activities
-field is dynamically displayed. Use the drop-down list to select activities from the selected record type to apply the policy to. If you don't choose specific activities, the policy applies to all activities of the selected record type.
+field is dynamically displayed. Use the drop-down list to select activities from the selected record type to apply the policy to. If you don't select specific activities, the poli
```

---

### 27. Communication Compliance

**URL:** https://learn.microsoft.com/en-us/purview/communication-compliance
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.10: Control 1.10: Communication Compliance Monitoring
  - File: `controls/pillar-1-security/1.10-communication-compliance-monitoring.md`
- Control 1.21: Control 1.21: Adversarial Input Logging
  - File: `controls/pillar-1-security/1.21-adversarial-input-logging.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.21/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/1.10/powershell-setup.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.10/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 28. Create Policies

**URL:** https://learn.microsoft.com/en-us/purview/communication-compliance-policies
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.10: Control 1.10: Communication Compliance Monitoring
  - File: `controls/pillar-1-security/1.10-communication-compliance-monitoring.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.10/powershell-setup.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.10/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 29. Investigate Alerts

**URL:** https://learn.microsoft.com/en-us/purview/communication-compliance-investigate-remediate
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.10: Control 1.10: Communication Compliance Monitoring
  - File: `controls/pillar-1-security/1.10-communication-compliance-monitoring.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.10/powershell-setup.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.10/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 30. Insider Risk Management

**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.12: Control 1.12: Insider Risk Detection and Response
  - File: `controls/pillar-1-security/1.12-insider-risk-detection-and-response.md`
- Control 1.5: Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels
  - File: `controls/pillar-1-security/1.5-data-loss-prevention-dlp-and-sensitivity-labels.md`
- Control 1.6: Control 1.6: Microsoft Purview DSPM for AI
  - File: `controls/pillar-1-security/1.6-microsoft-purview-dspm-for-ai.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.12/powershell-setup.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.12/portal-walkthrough.md` (CRITICAL)
- ⚠️ `playbooks/control-implementations/1.5/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/1.5/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 31. Create Insider Risk Policies

**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management-policies
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.12: Control 1.12: Insider Risk Detection and Response
  - File: `controls/pillar-1-security/1.12-insider-risk-detection-and-response.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.12/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 32. Insider Risk Indicators

**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-policy-indicators
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.12: Control 1.12: Insider Risk Detection and Response
  - File: `controls/pillar-1-security/1.12-insider-risk-detection-and-response.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.12/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 33. Investigate Alerts

**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management-activities
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.12: Control 1.12: Insider Risk Detection and Response
  - File: `controls/pillar-1-security/1.12-insider-risk-detection-and-response.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.12/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 34. HR Data Connector

**URL:** https://learn.microsoft.com/en-us/purview/import-hr-data
**Section:** Microsoft Purview
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.12: Control 1.12: Insider Risk Detection and Response
  - File: `controls/pillar-1-security/1.12-insider-risk-detection-and-response.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.12/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -224,7 +219,7 @@ Note
 *
 This column is mandatory. If a mandatory column is missing, the CSV file isn't validated and other data in the file isn't imported.
-We recommend that you create an HR connector that only imports employee profile data. For this connector, frequently refresh the employee profile data, preferably every 15 to 20 days. Employee profile records are deleted if you don't update them in the past 30 days.
+Create an HR connector that only imports employee profile data. For this connector, frequently refresh the employee profile data, preferably every 15 to 20 days. Employee profile records are deleted if you don't update them in the past 30 days.
 Determining how many CSV files to use for HR data
 In Step 3, you can choose to create separate connectors for each HR data type or a single connector for all data types. You can use separate CSV files that contain data for one HR scenario (like the examples of the CSV files described in the previous sections). Alternatively, you can use a single CSV file that contains data for two or more HR scenarios. Here are some guidelines to help you determine how many CSV files to use for HR data.
 If the insider risk management policy that you want to implement requires multiple HR data types, consider using a single CSV file that contains all the required data types.
@@ -293,7 +288,7 @@ , then select
 Add connector
 .
-From the list, choose
+From the list, select
 HR (preview)
 .
 On the
@@ -576,7 +571,7 @@ .
 If needed, you can update the flow to create triggers based on file availability and modification events on SharePoint and other data sources supported by Power Automate Flows.
 Existing HR connectors
-On December 13, 2021, we released the employee profile data scenario for HR connecto
```

---

### 35. Data Retention

**URL:** https://learn.microsoft.com/en-us/purview/retention
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.9: Control 1.9: Data Retention and Deletion Policies
  - File: `controls/pillar-1-security/1.9-data-retention-and-deletion-policies.md`
- Control 1.19: Control 1.19: eDiscovery for Agent Interactions
  - File: `controls/pillar-1-security/1.19-ediscovery-for-agent-interactions.md`
- Control 3.5: Control 3.5: Cost Allocation and Budget Tracking
  - File: `controls/pillar-3-reporting/3.5-cost-allocation-and-budget-tracking.md`
- Control 4.3: Control 4.3: Site and Document Retention Management
  - File: `controls/pillar-4-sharepoint/4.3-site-and-document-retention-management.md`
- Control 2.21: Control 2.21: AI Marketing Claims and Substantiation
  - File: `controls/pillar-2-management/2.21-ai-marketing-claims-and-substantiation.md`
- Control 2.13: Control 2.13: Documentation and Record Keeping
  - File: `controls/pillar-2-management/2.13-documentation-and-record-keeping.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/2.13/troubleshooting.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.21/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/3.9/powershell-setup.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.9/powershell-setup.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.9/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 36. eDiscovery

**URL:** https://learn.microsoft.com/en-us/purview/ediscovery
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.9: Control 1.9: Data Retention and Deletion Policies
  - File: `controls/pillar-1-security/1.9-data-retention-and-deletion-policies.md`
- Control 1.19: Control 1.19: eDiscovery for Agent Interactions
  - File: `controls/pillar-1-security/1.19-ediscovery-for-agent-interactions.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.19/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 37. Information Barriers

**URL:** https://learn.microsoft.com/en-us/purview/information-barriers
**Section:** Microsoft Purview
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.22: Control 1.22: Information Barriers for AI Agents
  - File: `controls/pillar-1-security/1.22-information-barriers.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.22/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/1.22/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -137,13 +132,11 @@ in Exchange Online.
 Ready to get started?
 Get started with Information Barriers
-Manage IB policies
+: Define segments and create your first IB policies.
+Information Barriers attributes
+: Review the Microsoft Entra attributes available for defining user segments.
 Use multi-segment support in Information Barriers
-See the attributes that can be used for IB policies
-Information Barriers in Microsoft Teams
-Information Barriers in SharePoint
-Information Barriers in OneDrive
-SharePoint & OneDrive insights report
+: Assign users to multiple segments for complex organizational scenarios.
 Feedback
 Was this page helpful?
 Yes

```

---

### 38. Access Reviews

**URL:** https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview
**Section:** Microsoft Entra ID
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.14: Control 1.14: Data Minimization and Agent Scope Control
  - File: `controls/pillar-1-security/1.14-data-minimization-and-agent-scope-control.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.12/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/1.2/sponsorship-lifecycle-workflows.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 39. Privileged Identity Management

**URL:** https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure
**Section:** Microsoft Entra ID
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.18: Control 1.18: Application-Level Authorization and Role-Based Access Control (RBAC)
  - File: `controls/pillar-1-security/1.18-application-level-authorization-and-role-based-access-control-rbac.md`
- Control 2.8: Control 2.8: Access Control and Segregation of Duties
  - File: `controls/pillar-2-management/2.8-access-control-and-segregation-of-duties.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/3.3/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 40. Data Access Governance Reports

**URL:** https://learn.microsoft.com/en-us/sharepoint/data-access-governance-reports
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.14: Control 1.14: Data Minimization and Agent Scope Control
  - File: `controls/pillar-1-security/1.14-data-minimization-and-agent-scope-control.md`
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`
- Control 4.4: Control 4.4: Guest and External User Access Controls
  - File: `controls/pillar-4-sharepoint/4.4-guest-and-external-user-access-controls.md`
- Control 4.1: Control 4.1: SharePoint Information Access Governance (IAG) / Restricted Content Discovery
  - File: `controls/pillar-4-sharepoint/4.1-sharepoint-information-access-governance-iag-restricted-content-discovery.md`
- Control 4.5: Control 4.5: SharePoint Security and Compliance Monitoring
  - File: `controls/pillar-4-sharepoint/4.5-sharepoint-security-and-compliance-monitoring.md`
- Control 4.2: Control 4.2: Site Access Reviews and Certification
  - File: `controls/pillar-4-sharepoint/4.2-site-access-reviews-and-certification.md`
- Control 4.6: Control 4.6: Grounding Scope Governance
  - File: `controls/pillar-4-sharepoint/4.6-grounding-scope-governance.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.5/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/4.4/troubleshooting.md` (HIGH)
- ⚠️ `playbooks/control-implementations/4.2/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -29,7 +24,7 @@ Summarize this article for me
 As sprawl and oversharing of SharePoint sites increase with exponential data growth, organizations need help with governing their data. Data access governance reports can help you govern access to SharePoint data. The reports let you discover sites that contain potentially overshared or sensitive content. You can use these reports to assess and apply the appropriate security and compliance policies.
 What you need to create a data access governance report
-What are the license requirements?
+License requirements
 Your organization needs to have the right
 licenses
 and meet certain administrative permissions or roles to use the feature described in this article.

```

---

### 41. Immutable Blob Storage

**URL:** https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-storage-overview
**Section:** Azure Services
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.7: Control 1.7: Comprehensive Audit Logging and Compliance
  - File: `controls/pillar-1-security/1.7-comprehensive-audit-logging-and-compliance.md`
- Control 2.13: Control 2.13: Documentation and Record Keeping
  - File: `controls/pillar-2-management/2.13-documentation-and-record-keeping.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.7/powershell-setup.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.7/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 42. AI Content Safety

**URL:** https://learn.microsoft.com/en-us/azure/ai-services/content-safety/overview
**Section:** Azure Services
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.8: Control 1.8: Runtime Protection and External Threat Detection
  - File: `controls/pillar-1-security/1.8-runtime-protection-and-external-threat-detection.md`
- Control 1.27: Control 1.27: AI Agent Content Moderation Enforcement
  - File: `controls/pillar-1-security/1.27-ai-agent-content-moderation-enforcement.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.27/troubleshooting.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.8/portal-walkthrough.md` (CRITICAL)
- ⚠️ `playbooks/control-implementations/2.5/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 43. Defender for Cloud Apps - AI Inventory

**URL:** https://learn.microsoft.com/en-us/defender-cloud-apps/ai-agent-inventory
**Section:** Microsoft Defender
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.8: Control 1.8: Runtime Protection and External Threat Detection
  - File: `controls/pillar-1-security/1.8-runtime-protection-and-external-threat-detection.md`
- Control 3.7: Control 3.7: PPAC Security Posture Assessment
  - File: `controls/pillar-3-reporting/3.7-ppac-security-posture-assessment.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/3.7/portal-walkthrough.md` (CRITICAL)
- ℹ️ `playbooks/control-implementations/3.7/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.8/powershell-setup.md` (HIGH)
- ⚠️ `playbooks/control-implementations/1.8/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -24,20 +19,28 @@ Access to this page requires authorization. You can try
 changing directories
 .
-Discover and protect your AI Agents (Preview)
+Discover and protect your Copilot Studio AI Agents (Preview)
 Feedback
 Summarize this article for me
 Microsoft Defender detects all Copilot Studio custom AI agents in your tenant and provides tools to identify misconfigured or potentially risky agents, and collects data from Copilot Studio for use in
 advanced hunting
 .
 Prerequisites
-To enable AI agent inventory and detection you must opt in to the
+To enable AI agent inventory and detection, you must:
+Have one of the following:
+A Microsoft Agent 365 license.
+Both a Microsoft Defender for Cloud Apps license and a Microsoft Copilot Studio license.
+Opt in to the
 Microsoft Defender preview features
 of:
-Microsoft Defender for Cloud Apps
 Microsoft Defender for Cloud
 Microsoft Defender XDR
-Enable the Copilot Studio AI agent inventory
+Enable discovery of Copilot Studio AI agents
+After you enable Security for AI, Microsoft Defender automatically discovers all Copilot Studio custom AI agents in your tenant. After discovery, you can view your agents in the
+AI agent inventory
+and use
+advanced hunting
+to investigate potential threats and misconfigurations.
 Note
 The onboarding process for the AI agent inventory requires collaboration with Power Platform administrators.
 To enable the Copilot Studio AI agent inventory, follow these steps:
@@ -45,10 +48,10 @@ Microsoft Defender portal
 as the System Administrator.
 Go to
-System > Settings > Cloud Apps > Copilot Studio AI Agents
+System > Settings > Security for AI
 .
 Turn on
-Copilot Studio AI Agents
+Security for AI Agents
 . Enabling Copilot Studio AI Agents confirms that you read the dis
```

---

### 44. Approval Workflows

**URL:** https://learn.microsoft.com/en-us/power-automate/get-started-approvals
**Section:** Power Automate
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 3.10: Control 3.10: Hallucination Feedback Loop
  - File: `controls/pillar-3-reporting/3.10-hallucination-feedback-loop.md`
- Control 3.12: Control 3.12: Agent Governance Exception and Override Management
  - File: `controls/pillar-3-reporting/3.12-agent-governance-exception-and-override-management.md`
- Control 2.21: Control 2.21: AI Marketing Claims and Substantiation
  - File: `controls/pillar-2-management/2.21-ai-marketing-claims-and-substantiation.md`
- Control 2.16: Control 2.16: RAG Source Integrity Validation
  - File: `controls/pillar-2-management/2.16-rag-source-integrity-validation.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/3.3/portal-walkthrough.md` (CRITICAL)
- ⚠️ `playbooks/control-implementations/2.12/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 45. AI Red Team

**URL:** https://learn.microsoft.com/en-us/security/ai-red-team/
**Section:** Security Operations
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.20: Control 2.20: Adversarial Testing and Red Team Framework
  - File: `controls/pillar-2-management/2.20-adversarial-testing-and-red-team-framework.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/2.5/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -1,11 +1,6 @@ Table of contents
 Read in English
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Microsoft AI Red Team
 Learn to safeguard your organization's AI with guidance and best practices from the industry leading Microsoft AI Red Team.
 About AI Red Team

```

---

### 46. M365 Licensing Guidance

**URL:** https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance
**Section:** Licensing
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.19: Control 1.19: eDiscovery for Agent Interactions
  - File: `controls/pillar-1-security/1.19-ediscovery-for-agent-interactions.md`
- Control 1.21: Control 1.21: Adversarial Input Logging
  - File: `controls/pillar-1-security/1.21-adversarial-input-logging.md`
- Control 1.13: Control 1.13: Sensitive Information Types (SITs) and Pattern Recognition
  - File: `controls/pillar-1-security/1.13-sensitive-information-types-sits-and-pattern-recognition.md`

**Affected Playbooks:**
- ⚠️ `playbooks/control-implementations/1.21/portal-walkthrough.md` (CRITICAL)
- ⚠️ `playbooks/control-implementations/1.19/portal-walkthrough.md` (CRITICAL)
- ⚠️ `playbooks/control-implementations/1.13/portal-walkthrough.md` (CRITICAL)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

## HIGH: Control Review Recommended

### 1. Connector Reference

**URL:** https://learn.microsoft.com/en-us/connectors/connector-reference/
**Section:** Power Platform Administration
**Classification:** CRITICAL (Deprecation notice)

**Affected Controls:**
- Control 1.4: Control 1.4: Advanced Connector Policies (ACP)
  - File: `controls/pillar-1-security/1.4-advanced-connector-policies-acp.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/2.10/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -105,16 +100,10 @@ By: Acumatica
 Address Labs (Independent Publisher)
 By: Richard Wilson
-ADO Boards
-By: Microsoft
 Adobe Acrobat Sign
 By: ADOBE INC.
 Adobe Acrobat Sign Sandbox
 By: Adobe Inc.
-Adobe Analytics [DEPRECATED]
-By: Microsoft
-Adobe Commerce
-By: Microsoft
 Adobe Creative Cloud
 By: Adobe Inc
 Adobe Experience Manager
@@ -165,6 +154,8 @@ By: Woong Choi
 Alemba ITSM
 By: Alemba Ltd
+Alert Relay
+By: independNET Products
 Aletheia
 By: Aletheia
 AlisQI
@@ -183,7 +174,7 @@ By: Almanac by PassBy
 ALVAO
 By: ALVAO
-Amazon Redshift
+Amazon Redshift [DEPRECATED]
 By: Microsoft
 Amazon S3
 By: Microsoft
@@ -271,8 +262,6 @@ By: Power DevBox
 AutoSeller
 By: Microsoft Corporation
-Avalara
-By: Microsoft
 AvePoint Cloud Governance
 By: AvePoint, inc.
 Aviationstack (Independent Publisher)
@@ -287,13 +276,11 @@ By: Microsoft
 Azure AI Foundry Inference
 By: Microsoft
-Azure AI Model Inference
-By: Microsoft Copilot Studio
 Azure AI Search
 By: Microsoft
 Azure App Service
 By: Microsoft
-Azure Application Insights
+Azure Application Insights [DEPRECATED]
 By: Microsoft
 Azure Automation
 By: Microsoft
@@ -324,8 +311,6 @@ Azure Data Factory
 By: Microsoft
 Azure Data Lake
-By: Microsoft
-Azure Data Lake Storage [DEPRECATED]
 By: Microsoft
 Azure Database for MySQL
 By: Microsoft
@@ -368,10 +353,6 @@ Azure Text to speech
 By: Microsoft
 Azure VM
-By: Microsoft
-AzureML [DEPRECATED]
-By: Microsoft
-B2C IDP configuration
 By: Microsoft
 Badgr (Independent Publisher)
 By: Troy Taylor, Hitachi Solutions

```

---

### 2. Security

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/security/security-overview
**Section:** Power Platform Administration
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 1.26: Control 1.26: Agent File Upload and File Analysis Restrictions
  - File: `controls/pillar-1-security/1.26-agent-file-upload-and-file-analysis-restrictions.md`
- Control 1.8: Control 1.8: Runtime Protection and External Threat Detection
  - File: `controls/pillar-1-security/1.8-runtime-protection-and-external-threat-detection.md`
- Control 3.7: Control 3.7: PPAC Security Posture Assessment
  - File: `controls/pillar-3-reporting/3.7-ppac-security-posture-assessment.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.26/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -94,6 +89,11 @@ Preview features arenât meant for production use and might have restricted functionality. These features are subject to
 supplemental terms of use
 , and are available before an official release so that customers can get early access and provide feedback.
+Important
+Microsoft is actively working on updates to the
+Security
+area of Power Platform admin center. As part of this effort, we don't plan to invest in changes to the current preview implementation of logic or the security score calcualtion.
+Given that this functionality is in preview, behaviors may change as we continue to make changes. We recommend using the security score for evaluation purposes only at this time.
 The security score is calculated based on the security features that are turned on in your environment. It provides a measurement of your organizational security position for Microsoft Power Platform and Dynamics 365 workloads.
 Qualitative scale
 : The security score is shown on a qualitative scale that uses three assessment labels:

```

---

### 3. Database Security

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/database-security
**Section:** Power Platform Administration
**Classification:** HIGH (UI element names)

**Affected Controls:**
- Control 1.1: Control 1.1: Restrict Agent Publishing by Authorization
  - File: `controls/pillar-1-security/1.1-restrict-agent-publishing-by-authorization.md`

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -43,7 +38,7 @@ application users
 . Those security roles are installed by our services and can't be updated.
 Environments without a Dataverse database
-Environment Maker and Environment Admin are the only predefined roles for environments that have no Dataverse database. These roles are described in the following table.
+Environment Maker and Environment Admin are the only predefined roles for environments that have no Dataverse database. To learn more about what these roles, see the following table.
 Security role
 Description
 Environment Admin
@@ -62,93 +57,27 @@ Environments with a Dataverse database
 If the environment has a Dataverse database, a user must be assigned the System Administrator role instead of the Environment Admin role to have full admin privileges.
 Users who make apps that connect to the database and need to create or update entities must have the System Customizer role in addition to the Environment Maker role. The Environment Maker role doesn't have privileges on the environment's data. These security roles do not have the privileges to create or update security roles.
-The following table describes the predefined security roles in an environment that has a Dataverse database. You can't edit these roles.
-Security role
-Description
+The following list provides the predefined security roles in an environment that has a Dataverse database. You can't edit these roles.
 App Opener
-Has
-minimum privileges for common tasks
-. This role is primarily used as a template to
-create a custom security role
-for model-driven apps. It doesn't have any privileges to the core business tables, such as Account, Contact, and Activity. However, it has
-Organization
--level read access to system tables, such as
-Process
-, to support rea
```

---

### 4. Column-Level Security

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/field-level-security
**Section:** Power Platform Administration
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 1.18: Control 1.18: Application-Level Authorization and Role-Based Access Control (RBAC)
  - File: `controls/pillar-1-security/1.18-application-level-authorization-and-role-based-access-control-rbac.md`

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -238,7 +233,8 @@ Create
 and
 Update
-Purview activity logs
+activity logs in Microsoft Purview. Learn more about
+Dataverse and model-driven apps activity logging
 .
 Related information
 Enable or disable security for a column to control access

```

---

### 5. Admin Activity Logging

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/activity-logging-auditing/activity-logs-power-platform-admin
**Section:** Power Platform Administration
**Classification:** HIGH (Portal references)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -27,9 +22,9 @@ View Power Platform admin logs in Microsoft Purview
 Feedback
 Summarize this article for me
-Administration of Microsoft Power Platform products and services can affect various capabilities such as environment settings and operations, data policies, and integration-related settings. It's important to monitor these actions to:
-Help mitigate failures.
-Help contain systems of security constraints.
+When you administer Microsoft Power Platform products and services, your actions can affect various capabilities, such as environment settings and operations, data policies, and integration-related settings. It's important to monitor these actions to:
+Mitigate failures.
+Contain systems of security constraints.
 Adhere to compliance requirements.
 Act on security threats.
 This article explains how you can monitor activities in Microsoft Purview that are performed on Power Platform environments by those who have admin access across user experiences and programmable interfaces. The activities fall within these categories:
@@ -40,22 +35,25 @@ Office 365 Management Activity API schema
 . The schema defines the payload of metadata that's unique for each activity.
 Prerequisites
-To view Power Platform admin activity logs in Microsoft Purview, make sure you:
-Review and complete the
-prerequisites
-in the overview article.
-Confirm that you're assigned either the
+To view Power Platform admin activity logs in Microsoft Purview,admins with the appropriate permissions need to:
+Review licensing and manage permissions
+.
+Manage auditing in Microsoft Purview
+and
+assign
+either the
 Audit Logs
 or
 View-Only Audit Logs
-role in Microsoft Purview.
+role in Microsoft Purview to you.
+Note
+Power Platform admin activity collection is enabled b
```

---

### 6. Copilot Hub

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/copilot/copilot-hub
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 3.1: Control 3.1: Agent Inventory and Metadata Management
  - File: `controls/pillar-3-reporting/3.1-agent-inventory-and-metadata-management.md`
- Control 3.8: Control 3.8: Copilot Hub and Governance Dashboard
  - File: `controls/pillar-3-reporting/3.8-copilot-hub-and-governance-dashboard.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/3.1/verification-testing.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 7. PowerShell

**URL:** https://learn.microsoft.com/en-us/power-platform/admin/powerapps-powershell
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.8/powershell-setup.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 8. Release Plans

**URL:** https://learn.microsoft.com/en-us/power-platform/release-plan/2025wave2/
**Section:** Power Platform Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.27: Control 1.27: AI Agent Content Moderation Enforcement
  - File: `controls/pillar-1-security/1.27-ai-agent-content-moderation-enforcement.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.27/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 9. Agent Publishing

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/publication-fundamentals-publish-channels
**Section:** Copilot Studio
**Classification:** HIGH (Feature availability)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -27,18 +22,17 @@ Key concepts - Publish and deploy your agent
 Feedback
 Summarize this article for me
-With Copilot Studio, you can publish agents to engage with your customers on multiple platforms or channels. For example, live websites, mobile apps, Microsoft 365 Copilot, and messaging platforms like Teams and Facebook.
+By using Copilot Studio, you can publish agents that engage with your customers on multiple platforms or channels. For example, live websites, mobile apps, Microsoft 365 Copilot, and messaging platforms like Teams and Facebook.
 Each time you update your agent, you can publish it again from within Copilot Studio. Publishing your agent applies to all the channels associated with your agent.
-Web app
-Teams
 You need to publish your agent before your customers can engage with it. You can publish your agent on multiple platforms, or
-channels.
-After you publish your agent to at least one channel, you can connect it to more channels. Remember to publish your agent again after you make any changes to it.
-When you publish your agent, this agent updates on all connected channels. If you make changes to your agent but don't publish after doing so, your customers won't be engaging with the latest content.
-The agent comes with the
+channels
+.
+After you publish an agent to at least one channel, you can connect it to more channels. Remember to publish your agent again after you make any changes to it.
+When you publish an agent, this agent updates on all connected channels. If you make changes to your agent but don't publish after doing so, your customers won't be engaging with the latest content.
+Agents have the
 Authenticate with Microsoft
-option turned on. The agent automatically uses Microsoft Entra ID authentication for Te
```

---

### 10. Share and Manage Agents

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/admin-share-bots
**Section:** Copilot Studio
**Classification:** HIGH (Policy language)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -36,15 +31,13 @@ .
 Prerequisites
 User authentication
-for the agent must be configured to
+for the agent is configured to
 Authenticate manually
 , with
-Azure Active Directory
-or
 Microsoft Entra ID
 as the provider.
-Required user sign-in
-must be enabled to manage who can chat with the agent in your organization.
+Require users to sign-in
+is turned on, to manage who can chat with the agent in your organization.
 Share an agent for chat
 Web app
 Teams
@@ -181,13 +174,14 @@ Teams
 When you share an agent with others for
 collaborative authoring,
-you give them permission to view, edit, configure, share, and publish the agent. They can't delete the agent. You can only share agents for collaborative authoring with individual users in your organization.
+you give them permission to view, edit, configure, share, and publish the agent. They can't delete the agent. You can only share agents for collaborative authoring with individual users in your organization. These users can be in different Power Platform environments, as long as they belong to your organization.
 Important
 Sharing for collaborative authoring isn't a simple share operation: the coauthors must have the
 Environment Maker
 Dataverse security role. If a potential coauthor doesn't yet have this role, you must have the
 System Administrator
 Dataverse security role so that Copilot Studio can assign the required role to that person on your behalf. If you and your potential coauthor don't have the required security roles, ask your system administrator for assistance.
+If a user isn't already a member of the environment for the shared agent, it can take up to 10 minutes before the agent becomes available in Copilot Studio for this user.
 Open the agent you want to share in Copilot 
```

---

### 11. What's New

**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/whats-new
**Section:** Copilot Studio
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 2.10: Control 2.10: Patch Management and System Updates
  - File: `controls/pillar-2-management/2.10-patch-management-and-system-updates.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/2.7/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/2.10/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -139,7 +134,7 @@ Microsoft Entra agent identities
 for agents. When turned on, automatically apply identity management to individual agents by assigning a Microsoft Entra agent identity, helping admins secure and manage agents more effectively.
 Improved knowledge retrieval for SharePoint-grounded agents using
-tenant graph grounding
+Work IQ
 . Updated system architecture and new retrieval methods deliver more precise, context-rich responses, enhancing answer quality.
 Note
 Some queries might lead to slightly higher latency.

```

---

### 12. Planned Features (2026 Wave 1) [Preview]

**URL:** https://learn.microsoft.com/en-us/power-platform/release-plan/2026wave1/microsoft-copilot-studio/planned-features
**Section:** Copilot Studio
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 1.4: Control 1.4: Advanced Connector Policies (ACP)
  - File: `controls/pillar-1-security/1.4-advanced-connector-policies-acp.md`
- Control 3.8: Control 3.8: Copilot Hub and Governance Dashboard
  - File: `controls/pillar-3-reporting/3.8-copilot-hub-and-governance-dashboard.md`
- Control 2.25: Control 2.25: Microsoft Agent 365 — Admin Center Governance Console
  - File: `controls/pillar-2-management/2.25-agent-365-admin-center-governance-console.md`
- Control 2.17: Control 2.17: Multi-Agent Orchestration Limits
  - File: `controls/pillar-2-management/2.17-multi-agent-orchestration-limits.md`

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -50,26 +45,42 @@ Admins, makers, marketers, or analysts, automatically
 May 27, 2025
 May 2026
+Give read-only analytics access to users
+Admins, makers, marketers, or analysts, automatically
+-
+Apr 2026
 Configure triggers with end-user credentials
 Admins, makers, marketers, or analysts, automatically
 Apr 2026
-Jun 2026
+Jul 2026
 Use code interpreter on SharePoint sources in agent conversations
 Admins, makers, marketers, or analysts, automatically
 Mar 2026
 May 2026
 Define custom metrics for analytics
 Admins, makers, marketers, or analysts, automatically
-Apr 2026
-May 2026
+Apr 15, 2026
+Jun 2026
+Analyze quality of responses that use generative AI
+Admins, makers, marketers, or analysts, automatically
+Jun 17, 2025
+Apr 13, 2026
 Create agents optimized for Microsoft 365 and Microsoft 365 Copilot users
 Admins, makers, marketers, or analysts, automatically
 Jun 2026
 -
+Analyze user sentiment from agent conversations
+Admins, makers, marketers, or analysts, automatically
+Jan 15, 2026
+May 2026
+Evaluate the entirety of multi-turn conversations
+Admins, makers, marketers, or analysts, automatically
+Mar 31, 2026
+Jun 2026
 Get Microsoft 365 Copilot agent suggestions based on your work in Copilot Studio
 Users, automatically
 -
-May 2026
+Jun 2026
 Evaluate agents for Microsoft 365 Copilot in Copilot Studio
 Admins, makers, marketers, or analysts, automatically
 Jul 2026
@@ -90,15 +101,19 @@ Jun 2026
 Enforce safe sharing by detecting credential oversharing
 Admins, makers, marketers, or analysts, automatically
-Apr 2026
-Jun 2026
+Jul 2026
+Sep 2026
+Block the use of maker-provided credentials for authentication
+Admins, makers, marketers, or analysts, automatically
+Sep 3, 2025
+Aug 2026
 Group files with instructions to guide agen
```

---

### 13. M365 Copilot Overview

**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-overview
**Section:** Microsoft 365 Copilot
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 3.8: Control 3.8: Copilot Hub and Governance Dashboard
  - File: `controls/pillar-3-reporting/3.8-copilot-hub-and-governance-dashboard.md`

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -181,6 +176,19 @@ Forms
 Draft
 âUse prompts to draft questions and suggestions that help you create surveys, polls, and other forms.
+Note
+Copilot experiences in Word, Excel, PowerPoint, and OneNote may vary depending on your organization's licensing and tenant configuration.
+In-product labels are displayed in Microsoft 365 apps like Word, Excel, PowerPoint, and OneNote, and in the Microsoft 365 Copilot app, to help users identify their Copilot experience.
+M365 Copilot (Premium)
+indicates that a user has a Microsoft 365 Copilot add-on license and the full experience and
+priority access
+for Copilot chat in Word, Excel, PowerPoint, and OneNote.
+M365 Copilot (Basic)
+indicates that a user does not have the Microsoft 365 Copilot add-on license but will have
+standardâ¯access
+to Copilot in those apps toâ¯ensure a reliable experience.
+Copilot chat (Basic)
+indicates that a user does not have the Microsoft 365 Copilot add-on license and does not have access to Copilot chat in Word, Excel, PowerPoint and OneNote.
 Microsoft 365 services that help support Copilot
 Your Microsoft 365 license includes services and features that help you get your data and organization ready for Copilot.
 SharePoint Advanced Management (SAM)

```

---

### 14. DLP Policy Reference

**URL:** https://learn.microsoft.com/en-us/purview/dlp-policy-reference
**Section:** Microsoft Purview
**Classification:** HIGH (Feature availability)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -1742,6 +1737,11 @@ File size is greater than
 File type is
 Insider risk level for Adaptive Protection is
+URL contains text (preview)
+(Preview)
+The
+URL contains text
+condition detects when the URL of the unmanaged cloud app contains specified text strings. You can use it as a condition to scope DLP rules to specific URLs, or as an exception to exclude specific URLs from policy enforcement. For example, you can create a rule that blocks uploading sensitive data to any GitHub URL that doesn't contain your organization's name while allowing uploads to your organization's GitHub repositories. This condition is supported for browser and network detection and doesn't require devices to be onboarded to endpoint DLP.
 Important
 Encrypted files can't be inspected for sensitive info types or trainable classifiers.
 Conditions supported for Endpoints
@@ -2592,7 +2592,24 @@ Managed cloud apps
 - Not supported
 Unmanaged cloud apps
-- Not supported
+- (Preview) Supported for email notifications. See
+Inline email notifications for browser and network
+.
+Email notifications for browser and network (preview)
+When a DLP rule is configured for unmanaged cloud apps (browser and network), you can enable email notifications to notify end users via email when their activity is blocked. This is different from the inline pop-up notifications that appear directly in the browser, such as in Microsoft Edge for Business. Email notifications are particularly useful for integrations that don't support pop-up notifications, such as the Android Global Secure Access integration.
+You can configure email notifications for:
+The person who performed the blocked activity.
+Additional recipients, such as admins or compliance officers.
+Email notification batching
+Email
```

---

### 15. Audit Copilot Activities

**URL:** https://learn.microsoft.com/en-us/purview/audit-copilot
**Section:** Microsoft Purview
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.14: Control 1.14: Data Minimization and Agent Scope Control
  - File: `controls/pillar-1-security/1.14-data-minimization-and-agent-scope-control.md`
- Control 1.7: Control 1.7: Comprehensive Audit Logging and Compliance
  - File: `controls/pillar-1-security/1.7-comprehensive-audit-logging-and-compliance.md`
- Control 1.6: Control 1.6: Microsoft Purview DSPM for AI
  - File: `controls/pillar-1-security/1.6-microsoft-purview-dspm-for-ai.md`
- Control 1.19: Control 1.19: eDiscovery for Agent Interactions
  - File: `controls/pillar-1-security/1.19-ediscovery-for-agent-interactions.md`
- Control 1.21: Control 1.21: Adversarial Input Logging
  - File: `controls/pillar-1-security/1.21-adversarial-input-logging.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.8/powershell-setup.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.7/powershell-setup.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.7/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -253,13 +248,13 @@ Details of the AI model used in the interaction.
 -
 ModelProviderName
-is the publisher of the model used.
+is the publisher of the model used. All Microsoft 365 Copilot scenarios include a ModelProviderName.
 -
 ModelName
-is the name of the model used. This might not be available for all scenarios.
+is the name of the model used. Not available in Microsoft 365 Copilot scenarios.
 -
 ModelVersion
-is the version of the model used. This might not be available for all scenarios.
+is the version of the model used. Not available in Microsoft 365 Copilot scenarios.
 Operation
 Specifies the name of the activity that was audited.
 For user interactions with Copilot, this property uses values like
@@ -449,8 +444,8 @@ Similar to the M365AdminCenter scenario, this indicated a Copilot scenario in the Teams Admin Portal. An admin might use Copilot to configure Teams settings or generate reports.
 Microsoft 365 Copilot
 VivaEngage
-Copilot in Viva Engage (Yammer).
-The user is interaction with Copilot within Viva Engage. For example, drafting a post or summarizing conversation threads in a Yammer community. This scenario covers any AI assistance inside Viva Engage, such as helping craft announcements or answers.
+Copilot in Viva Engage (Viva Engage).
+The user is interaction with Copilot within Viva Engage. For example, drafting a post or summarizing conversation threads in a Viva Engage community. This scenario covers any AI assistance inside Viva Engage, such as helping craft announcements or answers.
 Microsoft 365 Copilot
 VivaGoals
 Copilot in Viva Goals.
@@ -558,6 +553,13 @@ value or set of values, first search and export all relevant Copilot audit logs by filtering by operation name. From the exported search results, apply a fi
```

---

### 16. Search the Audit Log

**URL:** https://learn.microsoft.com/en-us/purview/audit-search
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/3.1/verification-testing.md` (HIGH)
- ℹ️ `playbooks/control-implementations/2.23/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -82,7 +77,7 @@ The default retention period for Audit (Standard) changed from 90 days to 180 days. Audit (Standard) logs generated before October 17, 2023 are retained for 90 days. Audit (Standard) logs generated on or after October 17, 2023 follow the new default retention of 180 days.
 Note
 Even when mailbox auditing on by default is turned on, you might notice that mailbox audit events for some users aren't found in audit log searches in the Microsoft Purview portal or via the Office 365 Management Activity API. For more information, see
-More information about mailbox audit logging
+Mailbox audit logging
 .
 To turn off audit log search for your organization, run the following command in Exchange Online PowerShell:
 Set-AdminAuditLogConfig -UnifiedAuditLogIngestionEnabled $false
@@ -176,7 +171,7 @@ .
 Enter
 SPOIBIsEnabled,SPOIBIsDisabled
-in operation search field. We recommend copying and pasting the operation names directly from the article to the operation search field to ensure that they're entered correctly and without typos.
+in operation search field. Copy and paste the operation names directly from the article to the operation search field to ensure that they're entered correctly and without typos.
 Record types
 : Select the drop-down list to display the record types for audited activities that you can search for. You can select one or more record types to search for. To search for a record type in the list, use the search box over the list.
 Specific
@@ -193,7 +188,7 @@ Search name
 : Enter in a custom name for your search job. This name is used to identify your search job in the search job history. If you don't enter a name, the search job is automatically named using a combination of the date and time defined for the search a
```

---

### 17. DSPM for AI

**URL:** https://learn.microsoft.com/en-us/purview/ai-microsoft-purview
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.5: Control 1.5: Data Loss Prevention (DLP) and Sensitivity Labels
  - File: `controls/pillar-1-security/1.5-data-loss-prevention-dlp-and-sensitivity-labels.md`
- Control 1.6: Control 1.6: Microsoft Purview DSPM for AI
  - File: `controls/pillar-1-security/1.6-microsoft-purview-dspm-for-ai.md`
- Control 1.16: Control 1.16: Information Rights Management (IRM) for Documents
  - File: `controls/pillar-1-security/1.16-information-rights-management-irm-for-documents.md`
- Control 4.7: Control 4.7: Microsoft 365 Copilot Data Governance
  - File: `controls/pillar-4-sharepoint/4.7-microsoft-365-copilot-data-governance.md`
- Control 4.8: Control 4.8: Item-Level Permission Scanning for Agent Knowledge Sources
  - File: `controls/pillar-4-sharepoint/4.8-item-level-permission-scanning-agent-knowledge-sources.md`
- Control 2.6: Control 2.6: Model Risk Management (OCC 2011-12/SR 11-7)
  - File: `controls/pillar-2-management/2.6-model-risk-management-sr-26-2.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.14/verification-testing.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 18. Sensitive Information Types

**URL:** https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-learn-about
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.13: Control 1.13: Sensitive Information Types (SITs) and Pattern Recognition
  - File: `controls/pillar-1-security/1.13-sensitive-information-types-sits-and-pattern-recognition.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.13/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 19. Custom SITs

**URL:** https://learn.microsoft.com/en-us/purview/sit-create-a-custom-sensitive-information-type
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.13: Control 1.13: Sensitive Information Types (SITs) and Pattern Recognition
  - File: `controls/pillar-1-security/1.13-sensitive-information-types-sits-and-pattern-recognition.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.13/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 20. Exact Data Match

**URL:** https://learn.microsoft.com/en-us/purview/sit-learn-about-exact-data-match-based-sits
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.13: Control 1.13: Sensitive Information Types (SITs) and Pattern Recognition
  - File: `controls/pillar-1-security/1.13-sensitive-information-types-sits-and-pattern-recognition.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.13/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 21. Trainable Classifiers

**URL:** https://learn.microsoft.com/en-us/purview/trainable-classifiers-learn-about
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.13: Control 1.13: Sensitive Information Types (SITs) and Pattern Recognition
  - File: `controls/pillar-1-security/1.13-sensitive-information-types-sits-and-pattern-recognition.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.13/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 22. Retention for SharePoint

**URL:** https://learn.microsoft.com/en-us/purview/retention-policies-sharepoint
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 4.3: Control 4.3: Site and Document Retention Management
  - File: `controls/pillar-4-sharepoint/4.3-site-and-document-retention-management.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 23. Disposition

**URL:** https://learn.microsoft.com/en-us/purview/disposition
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.9: Control 1.9: Data Retention and Deletion Policies
  - File: `controls/pillar-1-security/1.9-data-retention-and-deletion-policies.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 24. SEC 17a-4 / Preservation Lock

**URL:** https://learn.microsoft.com/en-us/purview/retention-regulatory-requirements
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.9: Control 1.9: Data Retention and Deletion Policies
  - File: `controls/pillar-1-security/1.9-data-retention-and-deletion-policies.md`
- Control 4.3: Control 4.3: Site and Document Retention Management
  - File: `controls/pillar-4-sharepoint/4.3-site-and-document-retention-management.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.9/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 25. Records Management

**URL:** https://learn.microsoft.com/en-us/purview/records-management
**Section:** Microsoft Purview
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.9: Control 1.9: Data Retention and Deletion Policies
  - File: `controls/pillar-1-security/1.9-data-retention-and-deletion-policies.md`
- Control 3.3: Control 3.3: Compliance and Regulatory Reporting
  - File: `controls/pillar-3-reporting/3.3-compliance-and-regulatory-reporting.md`
- Control 2.13: Control 2.13: Documentation and Record Keeping
  - File: `controls/pillar-2-management/2.13-documentation-and-record-keeping.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)
- ℹ️ `playbooks/control-implementations/1.2/sponsorship-lifecycle-workflows.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 26. eDiscovery Holds

**URL:** https://learn.microsoft.com/en-us/purview/ediscovery-create-holds
**Section:** Microsoft Purview
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.9: Control 1.9: Data Retention and Deletion Policies
  - File: `controls/pillar-1-security/1.9-data-retention-and-deletion-policies.md`
- Control 1.19: Control 1.19: eDiscovery for Agent Interactions
  - File: `controls/pillar-1-security/1.19-ediscovery-for-agent-interactions.md`

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -259,7 +254,7 @@ DelayHoldApplied:
 This property applies to email-related content (generated by people using Outlook and Outlook on the web) that's stored in a user's mailbox.
 DelayReleaseHoldApplied:
-This property applies to cloud-based content (generated by non-Outlook apps such as Microsoft Teams, Microsoft Forms, and Microsoft Yammer) that's stored in a user's mailbox. Cloud data generated by a Microsoft app is typically stored in a hidden folder in a user's mailbox.
+This property applies to cloud-based content (generated by non-Outlook apps such as Microsoft Teams, Microsoft Forms, and Microsoft Viva Engage) that's stored in a user's mailbox. Cloud data generated by a Microsoft app is typically stored in a hidden folder in a user's mailbox.
 When a delay hold is placed on the mailbox (when either of the previous properties is set to
 True
 ), the mailbox is still considered to be on hold for an unlimited hold duration, as if the mailbox was on Litigation Hold. After 30 days, the delay hold expires, and Microsoft 365 will automatically attempt to remove the delay hold (by setting the DelayHoldApplied or DelayReleaseHoldApplied property to

```

---

### 27. Endpoint DLP

**URL:** https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about
**Section:** Microsoft Purview
**Classification:** HIGH (Compliance features)

**Affected Controls:**
- Control 1.17: Control 1.17: Endpoint Data Loss Prevention (Endpoint DLP)
  - File: `controls/pillar-1-security/1.17-endpoint-data-loss-prevention-endpoint-dlp.md`

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -305,6 +300,8 @@ copy and paste are allowed
 Note
 When a DLP rule that blocks copying is applied to an open file, copying from any other file within the same application (even files with no DLP rules applied) is restricted while the DLP blocked file is open.
+Endpoint DLP and Unsaved Files
+If data is never saved to a file on the local device, Endpoint DLP cannot scan or classify it. For example, if a user opens a document in Word and saves it directly to a USB device without first storing it locally, Endpoint DLP cannot inspect or block that action.
 Best practice for endpoint DLP policies
 Say you want to block all items that contain credit card numbers from leaving endpoints of Finance department users. We recommend:
 Create a policy and scope it to endpoints and to that group of users.

```

---

### 28. Information Rights Management

**URL:** https://learn.microsoft.com/en-us/purview/encryption-sensitivity-labels
**Section:** Microsoft Purview
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.16: Control 1.16: Information Rights Management (IRM) for Documents
  - File: `controls/pillar-1-security/1.16-information-rights-management-irm-for-documents.md`

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -423,13 +418,13 @@ Word, PowerPoint, and Excel permissions
 In Word, PowerPoint, and Excel, when a user applies a sensitivity label that lets them assign permissions to a document, the user is prompted to specify their choice of users and permissions for the encryption. For this configuration, the user and not the administrator controls both who can access the document, and what permissions they have.
 Support for organization-wide custom permissions
-For built-in labeling in Windows, users can additionally specify a domain name when they're prompted to specify their choice of users and permissions. When a domain name is entered, the permissions will apply to all users in an organization that owns the domain and it is in Microsoft Entra ID. To identify the minimum versions that support this setting, use the
+For labeling in Windows and using Office for the web, users can additionally specify a domain name when they're prompted to specify their choice of users and permissions. When a domain name is entered, the permissions will apply to all users in an organization that owns the domain and it is in Microsoft Entra ID. To identify the minimum versions that support this setting, use the
 capabilities table
 and the row
 Let users assign permissions:- Prompt users for custom permissions (users, groups, and organizations)
 .
 Note
-The displayed dialog box is updated in the latest versions of Office apps, but the support for organization-wide custom permissions remains when a domain name is entered. Information about this support is included in the popup information box.
+The displayed dialog box is updated in the latest versions of Microsoft 365 for Windows apps, but the support for organization-wide custom permissions remains when a domain name i
```

---

### 29. Conditional Access

**URL:** https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview
**Section:** Microsoft Entra ID
**Classification:** HIGH (Portal references)

**Affected Controls:**
- Control 1.11: Control 1.11: Conditional Access and Phishing-Resistant MFA
  - File: `controls/pillar-1-security/1.11-conditional-access-and-phishing-resistant-mfa.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.11/powershell-setup.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -119,7 +114,12 @@ Customers with
 Microsoft 365 Business Premium licenses
 can also use Conditional Access features.
-Other products and features that interact with Conditional Access policies require appropriate licensing for those products and features, including Microsoft Entra Workload ID, Microsoft Entra ID Protection, and Microsoft Purview.
+Risk-based Conditional Access policies (sign-in risk and user risk) require
+Microsoft Entra ID Protection
+, which is a Microsoft Entra ID P2 feature. For details, see
+Microsoft Entra licensing
+.
+Other products and features that interact with Conditional Access policies require appropriate licensing for those products and features, including Microsoft Entra Workload ID, Microsoft Entra ID Protection, Microsoft Intune, and Microsoft Purview.
 When the licenses required for Conditional Access expire, policies aren't automatically disabled or deleted. This graceful state lets customers migrate away from Conditional Access policies without a sudden change in their security posture. You can view and delete remaining policies, but you can't update them.
 Security defaults
 help protect against identity-related attacks and are available for all customers.

```

---

### 30. Authentication Contexts

**URL:** https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-cloud-apps#authentication-context
**Section:** Microsoft Entra ID
**Classification:** HIGH (Feature availability)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -267,6 +262,9 @@ New Conditional Access behavior when an ALL resources policy has a resource exclusion
 The scopes listed in the previous section are now evaluated as directory access and mapped to Azure AD Graph (resource: Windows Azure Active Directory, ID: 00000002-0000-0000-c000-000000000000) for Conditional Access evaluation purposes.
 Conditional Access policies that target All resources with one or more resource exclusions, or policies that explicitly target Azure AD Graph, are enforced in user sign-in flows where the client application requests only these scopes. There is no change in behavior when an application requests any additional scope beyond those listed above.
+For guidance on assessing impact, identifying affected applications, and retaining legacy behavior, see
+Improved enforcement for policies with resource exclusions
+.
 Note
 The
 Azure AD Graph retirement

```

---

### 31. Phishing-Resistant MFA

**URL:** https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-strengths
**Section:** Microsoft Entra ID
**Classification:** MEDIUM (General content update)

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.11/powershell-setup.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 32. FIDO2 Security Keys

**URL:** https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-authentication-passkeys-fido2
**Section:** Microsoft Entra ID
**Classification:** HIGH (Policy language)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -36,7 +31,10 @@ Support for FIDO2 authentication with Microsoft Entra ID
 .
 Note
-Microsoft Entra ID currently supports synced passkeys and device-bound passkeys stored on FIDO2 security keys and in Microsoft Authenticator. Passkeys (FIDO2) are available in all Microsoft Entra ID editions, including Microsoft Entra ID Free. No extra licenses are required. For more information, see
+Microsoft Entra ID currently supports:
+synced passkeys
+device-bound passkeys stored on FIDO2 security keys and in Microsoft Authenticator
+Passkeys (FIDO2) are available in all Microsoft Entra ID editions, including Microsoft Entra ID Free. No extra licenses are required. For more information, see
 Passkeys (FIDO2) authentication method in Microsoft Entra ID
 .
 Get started

```

---

### 33. Governing Agent Identities

**URL:** https://learn.microsoft.com/en-us/entra/id-governance/agent-id-governance-overview
**Section:** Microsoft Entra Agent ID
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.11: Control 1.11: Conditional Access and Phishing-Resistant MFA
  - File: `controls/pillar-1-security/1.11-conditional-access-and-phishing-resistant-mfa.md`
- Control 3.6: Control 3.6: Orphaned Agent Detection and Remediation
  - File: `controls/pillar-3-reporting/3.6-orphaned-agent-detection-and-remediation.md`
- Control 2.26: Control 2.26: Entra Agent ID — Identity Governance for Agents
  - File: `controls/pillar-2-management/2.26-entra-agent-id-identity-governance.md`

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -139,6 +134,12 @@ Agent identity sponsor tasks in Lifecycle Workflows (Preview)
 .
 Related content
+Manage agent identities in your organization
+- Overview of agent identity management across the full lifecycle.
+Agent identity sponsor tasks in Lifecycle Workflows
+- Automate sponsor change notifications using Lifecycle Workflows.
+Manage agents in end user experience
+- Sponsors can manage their agents from the My Account portal.
 What is entitlement management?
 What is Microsoft Entra ID Governance?
 Feedback

```

---

### 34. Sharing Permissions

**URL:** https://learn.microsoft.com/en-us/sharepoint/modern-experience-sharing-permissions
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.14: Control 1.14: Data Minimization and Agent Scope Control
  - File: `controls/pillar-1-security/1.14-data-minimization-and-agent-scope-control.md`
- Control 4.8: Control 4.8: Item-Level Permission Scanning for Agent Knowledge Sources
  - File: `controls/pillar-4-sharepoint/4.8-item-level-permission-scanning-agent-knowledge-sources.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.8/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 35. External Sharing

**URL:** https://learn.microsoft.com/en-us/sharepoint/external-sharing-overview
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 4.4: Control 4.4: Guest and External User Access Controls
  - File: `controls/pillar-4-sharepoint/4.4-guest-and-external-user-access-controls.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.4/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 36. Manage Sharing Settings

**URL:** https://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`
- Control 4.4: Control 4.4: Guest and External User Access Controls
  - File: `controls/pillar-4-sharepoint/4.4-guest-and-external-user-access-controls.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.4/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 37. Restricted Content Discovery

**URL:** https://learn.microsoft.com/en-us/sharepoint/restricted-content-discovery
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.14: Control 1.14: Data Minimization and Agent Scope Control
  - File: `controls/pillar-1-security/1.14-data-minimization-and-agent-scope-control.md`
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`
- Control 4.1: Control 4.1: SharePoint Information Access Governance (IAG) / Restricted Content Discovery
  - File: `controls/pillar-4-sharepoint/4.1-sharepoint-information-access-governance-iag-restricted-content-discovery.md`
- Control 4.7: Control 4.7: Microsoft 365 Copilot Data Governance
  - File: `controls/pillar-4-sharepoint/4.7-microsoft-365-copilot-data-governance.md`
- Control 4.6: Control 4.6: Grounding Scope Governance
  - File: `controls/pillar-4-sharepoint/4.6-grounding-scope-governance.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.14/verification-testing.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -45,7 +40,7 @@ Active sites
 tab to first compile a selective list of targeted sites.
 What you need to restrict a specific SharePoint access?
-What are the license requirements?
+License requirements
 Your organization needs to have the right
 licenses
 and meet certain administrative permissions or roles to use the feature described in this article.

```

---

### 38. Restricted SharePoint Search

**URL:** https://learn.microsoft.com/en-us/sharepoint/restricted-sharepoint-search
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 1.14: Control 1.14: Data Minimization and Agent Scope Control
  - File: `controls/pillar-1-security/1.14-data-minimization-and-agent-scope-control.md`
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`
- Control 4.1: Control 4.1: SharePoint Information Access Governance (IAG) / Restricted Content Discovery
  - File: `controls/pillar-4-sharepoint/4.1-sharepoint-information-access-governance-iag-restricted-content-discovery.md`
- Control 4.7: Control 4.7: Microsoft 365 Copilot Data Governance
  - File: `controls/pillar-4-sharepoint/4.7-microsoft-365-copilot-data-governance.md`
- Control 4.6: Control 4.6: Grounding Scope Governance
  - File: `controls/pillar-4-sharepoint/4.6-grounding-scope-governance.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/1.14/verification-testing.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 39. Advanced Management

**URL:** https://learn.microsoft.com/en-us/sharepoint/advanced-management
**Section:** SharePoint Administration
**Classification:** HIGH (Feature availability)

**Affected Controls:**
- Control 1.3: Control 1.3: SharePoint Content Governance and Permissions
  - File: `controls/pillar-1-security/1.3-sharepoint-content-governance-and-permissions.md`
- Control 4.1: Control 4.1: SharePoint Information Access Governance (IAG) / Restricted Content Discovery
  - File: `controls/pillar-4-sharepoint/4.1-sharepoint-information-access-governance-iag-restricted-content-discovery.md`
- Control 4.5: Control 4.5: SharePoint Security and Compliance Monitoring
  - File: `controls/pillar-4-sharepoint/4.5-sharepoint-security-and-compliance-monitoring.md`
- Control 4.2: Control 4.2: Site Access Reviews and Certification
  - File: `controls/pillar-4-sharepoint/4.2-site-access-reviews-and-certification.md`
- Control 4.6: Control 4.6: Grounding Scope Governance
  - File: `controls/pillar-4-sharepoint/4.6-grounding-scope-governance.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.5/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -27,186 +22,116 @@ What is SharePoint Advanced Management?
 Feedback
 Summarize this article for me
-SharePoint Advanced Management (SAM) is a comprehensive governance solution for SharePoint and OneDrive. With SAM, you can efficiently manage content growth, secure access, and monitor changes across your organization. These capabilities help you maintain control over your digital workspace and prepare your environment for Microsoft 365 Copilot.
-In this article, you learn how SAM enables you to:
-Prevent content sprawl
-with automated policies and insights
+SharePoint Advanced Management (SAM) provides administrative governance controls for SharePoint and OneDrive that help organizations:
+Manage content sprawl
+;
 Manage the content lifecycle
-through reporting and compliance tools
-Streamline permissions and access management
-for SharePoint and OneDrive sites
-Explore each of the following sections to discover how SAM supports your content governance needs and enhances collaboration in Microsoft 365.
-What you need to get started
-Before you get started, make sure SharePoint Advanced Management (SAM) features are available to your organizations through one of the following two licensing options:
-If your organization has a Copilot license and at least one user is assigned a Copilot license, SharePoint administrators automatically gain access to the SharePoint Advanced Management features required for Copilot deployment. The only SAM feature not included with Copilot is
-Restricted Site Creation
+;
+Prevent oversharing
+; and
+Manage permissions and access
 .
-Organizations without a Copilot license can access SharePoint Advanced Management features by
-purchasing a standalone SharePoint Advanced Management license
+SAM capabilities are help
```

---

### 40. Site Lifecycle Management

**URL:** https://learn.microsoft.com/en-us/sharepoint/site-lifecycle-management
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 4.3: Control 4.3: Site and Document Retention Management
  - File: `controls/pillar-4-sharepoint/4.3-site-and-document-retention-management.md`
- Control 4.2: Control 4.2: Site Access Reviews and Certification
  - File: `controls/pillar-4-sharepoint/4.2-site-access-reviews-and-certification.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.3/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -33,7 +28,7 @@ SharePoint admin center
 . Inactive site policies, part of SharePoint's site lifecycle management features, help you automate this process. You can set up an inactive site policy to automatically detect inactive sites and notify site owners by email. Owners can then confirm if the site is still active.
 What do you need to create an inactive site policy?
-What are the license requirements?
+License requirements
 Your organization needs to have the right
 licenses
 and meet certain administrative permissions or roles to use the feature described in this article.

```

---

### 41. Information Barriers

**URL:** https://learn.microsoft.com/en-us/purview/information-barriers-sharepoint
**Section:** SharePoint Administration
**Classification:** HIGH (Feature availability)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -141,7 +136,7 @@ Allow apps running in app-only mode to access IB sites
 Many organizations use applications running in an app-only context in their organization. To allow these apps running in app-only mode to access IB protected sites, SharePoint admins can enable the opt-in capability.
 Important
-Information Barriers policies might impact the applications accessing sites in app-only mode. We recommend that you enable the policy and then test the experience for the apps used in your organization.
+Information Barriers policies might impact the applications accessing sites in app-only mode. Enable the policy and then test the experience for the apps used in your organization.
 To enable applications running in app-only mode to access IB sites, run the following command:
 Set-SPOTenant -AppBypassInformationBarriers $true
 If you enable Teams Meeting Recording or EDU Assignment application in your organization, run the following command to allow these applications to interact with IB protected sites:
@@ -179,7 +174,7 @@ .
 Connect to SharePoint Online as a Global Administrator or
 SharePoint Administrator
-in Microsoft 365. To learn how, see
+in Microsoft 365. For more information, see
 Getting started with SharePoint Online Management Shell
 .
 Run the following command to enable Information Barriers in SharePoint and OneDrive:
@@ -257,7 +252,7 @@ .
 Connect to SharePoint Online as a
 Global Administrator or SharePoint Administrator
-in Microsoft 365. To learn how, see
+in Microsoft 365. For more information, see
 Getting started with SharePoint Online Management Shell
 .
 Run the following command:
@@ -458,12 +453,15 @@ Open
 mode sites, run the following command:
 Set-SPOTenant -ShowPeoplePickerGroupSuggestionsForIB $true
-Resources
-Learn 
```

---

### 42. Agent Insights

**URL:** https://learn.microsoft.com/en-us/sharepoint/insights-on-sharepoint-agents
**Section:** SharePoint Administration
**Classification:** MEDIUM (General content update)

**Affected Controls:**
- Control 4.5: Control 4.5: SharePoint Security and Compliance Monitoring
  - File: `controls/pillar-4-sharepoint/4.5-sharepoint-security-and-compliance-monitoring.md`

**Affected Playbooks:**
- ℹ️ `playbooks/control-implementations/4.5/troubleshooting.md` (HIGH)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note

```

---

### 43. Key Vault Private Endpoints

**URL:** https://learn.microsoft.com/en-us/azure/key-vault/general/private-link-service
**Section:** Azure Services
**Classification:** HIGH (Policy language)

**Affected Controls:**
- Control 1.20: Control 1.20: Network Isolation and Private Connectivity
  - File: `controls/pillar-1-security/1.20-network-isolation-private-connectivity.md`

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -108,53 +103,53 @@ If there are any private endpoint connections you want to reject, whether it's a pending request or existing connection, select the connection and select the "Reject" button.
 Establish a private link connection to Key Vault using CLI (Initial Setup)
 az login # Login to Azure CLI
-az account set --subscription {SUBSCRIPTION ID} # Select your Azure Subscription
-az group create -n {RESOURCE GROUP} -l {REGION} # Create a new Resource Group
+az account set --subscription <subscription-id> # Select your Azure Subscription
+az group create -n <resource-group> -l <location> # Create a new Resource Group
 az provider register -n Microsoft.KeyVault # Register KeyVault as a provider
-az keyvault create -n {VAULT NAME} -g {RG} -l {REGION} --enable-rbac-authorization true --enable-purge-protection true # Create a Key Vault
-az keyvault update -n {VAULT NAME} -g {RG} --default-action deny # Turn on Key Vault Firewall
-az network vnet create -g {RG} -n {vNet NAME} -location {REGION} # Create a Virtual Network
+az keyvault create -n <vault-name> -g <resource-group> -l <location> --enable-rbac-authorization true --enable-purge-protection true # Create a Key Vault
+az keyvault update -n <vault-name> -g <resource-group> --default-action deny # Turn on Key Vault Firewall
+az network vnet create -g <resource-group> -n <vnet-name> -location <location> # Create a Virtual Network
 
  # Create a Subnet
-az network vnet subnet create -g {RG} --vnet-name {vNet NAME} --name {subnet NAME} --address-prefixes {addressPrefix}
+az network vnet subnet create -g <resource-group> --vnet-name <vnet-name> --name <subnet-name> --address-prefixes <address-prefix>
 
  # Disable Virtual Network Policies
-az network vnet subnet update --name {subnet NAME} --resour
```

---

### 44. Information Barriers in Teams

**URL:** https://learn.microsoft.com/en-us/purview/information-barriers-teams
**Section:** Microsoft Teams
**Classification:** HIGH (Feature availability)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -105,7 +100,7 @@ Guests in Teams
 : IB policies apply to guests in Teams, too. If guests need to be discoverable in your organization's global address list, see
 Manage guest access in Microsoft 365 Groups
-. Once guests are discoverable, you can
+. After guests are discoverable, you can
 define IB policies
 .
 How policy changes impact existing chats
@@ -219,18 +214,18 @@ Teams Town hall
 for a smoother experience.
 Users can't join channel meetings
-: If you enable IB policies, users can't join channel meetings if they're not a member of the team. The root cause is that IB checks rely on whether users can be added to a meeting chat roster, and only when they can be added to the roster are they allowed to join the meeting. The chat thread in a channel meeting is available to Team/Channel members only, and non-members can't see or access the chat thread. If you enable IB for the organization and a non-team member attempts to join a channel meeting, that user isn't allowed to join the meeting. However, if you don't enable IB for the organization and a nonteam member attempts to join a channel meeting, the user is allowed to join the meeting but they won't see the chat option in the meeting.
+: If you enable IB policies, users can't join channel meetings if they're not a member of the team. The root cause is that IB checks rely on whether users can be added to a meeting chat roster, and only when they can be added to the roster are they allowed to join the meeting. The chat thread in a channel meeting is available to Team/Channel members only, and non-members can't see or access the chat thread. If you enable IB for the organization and a non-team member attempts to join a channel meeting, that user isn't allowed to join the meeting. However, if
```

---

### 45. Application Resources

**URL:** https://learn.microsoft.com/en-us/graph/api/resources/application
**Section:** Microsoft Graph API
**Classification:** HIGH (Policy language)

**Affected Controls:**
- Control 1.2: Control 1.2: Agent Registry and Integrated Apps Management
  - File: `controls/pillar-1-security/1.2-agent-registry-and-integrated-apps-management.md`

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -380,6 +375,13 @@ logo
 Stream
 The main logo for the application. Not nullable.
+managerApplications
+Guid collection
+A collection of application IDs for Microsoft first-party applications designated as managers. Manager applications can create service principals, agent identities, and agent users for managed agent blueprints. Limited to a maximum of 10 entries. Not nullable. Only supported on
+agentIdentityBlueprint
+objects; attempts to set this property on non-agent-blueprint applications return an error. Not returned by default; must be explicitly requested via
+$select
+.
 nativeAuthenticationApisEnabled
 nativeAuthenticationApisEnabled
 Specifies whether the Native Authentication APIs are enabled for the application. The possible values are:
@@ -698,6 +700,7 @@  "isFallbackPublicClient": false,
  "keyCredentials": [{"@odata.type": "microsoft.graph.keyCredential"}],
  "logo": "Stream",
+ "managerApplications": ["Guid"],
  "nativeAuthenticationApisEnabled": "String",
  "notes": "String",
  "oauth2RequiredPostResponse": false,

```

---

### 46. Purview What's New

**URL:** https://learn.microsoft.com/en-us/purview/whats-new
**Section:** Release Plans and Roadmaps
**Classification:** HIGH (Feature availability)

**What Changed:**
```diff
--- +++ @@ -2,17 +2,12 @@ Exit editor mode
 Ask Learn
 Ask Learn
-Focus mode
+Reading mode
 Table of contents
 Read in English
 Add
 Add to plan
 Edit
-Share via
-Facebook
-x.com
-LinkedIn
-Email
 Copy Markdown
 Print
 Note
@@ -43,6 +38,11 @@ Roadmap
 for data security and risk and compliance solutions.
 April 2026
+Collection Policies
+Preview
+: Collection policies support
+sensitivity labels as a condition
+for scoping detection to items with specific sensitivity labels applied. This condition is supported with browser and network cloud apps detection.
 Data Governance
 General availability (GA)
 : Now rolling out, the
@@ -54,15 +54,73 @@ : Updates to facilitate editing and managing glossary terms in Unified Catalog:
 Edit glossary terms in bulk
 Move multiple terms at once from one governance domain into another domain
+In preview
+: Data quality provides
+on-premises support for Oracle and SQL server
+. On-premises databases are scanned in on-premises infrastructure to ensure that data doesn't move beyond organizations' premises. You need to set up a
+Kubernetes cluster to host the runtime
+that scans these databases.
+In preview
+:
+Data quality thresholds
+help stakeholders and data consumers know when data quality scores fall below standards. You can
+configure alerts
+for a rule level threshold and a data asset level threshold.
 Data Loss Prevention
 Updated
 : Restructured the
 just-in-time (JIT) protection
-documentation. A new conceptual article,
-Learn about just-in-time protection
-, now covers JIT concepts, terms, supported activities, device compatibility, and includes a detailed JIT workflow diagram. The
+documentation. The
 Get started with just-in-time protection
 article now focuses on deployment and configuration steps.
+New
+: A new conceptual article,
+Learn about just-in-time protection
+, now covers JIT concepts, terms, supported activities, device compatibility, and includes a detailed JIT workflow diagram.
+Preview
+: DLP policies for unma
```

---

## MEDIUM: Minor Changes (Review Optional)

### 1. Managed Environments
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-overview
**Classification:** MEDIUM (General content update)

---

### 2. Enable Managed Environments
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-enable
**Classification:** MEDIUM (General content update)

---

### 3. Managed Environment Sharing Limits
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-sharing-limits
**Classification:** MEDIUM (General content update)

---

### 4. Solution Checker Enforcement
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-solution-checker
**Classification:** MEDIUM (General content update)

---

### 5. Usage Insights
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/managed-environment-usage-insights
**Classification:** MEDIUM (General content update)

---

### 6. Environment Groups
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/environment-groups
**Classification:** MEDIUM (General content update)

---

### 7. Environment Group Rules
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/environment-groups-rules
**Classification:** MEDIUM (General content update)

---

### 8. Environment Routing
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/default-environment-routing
**Classification:** MEDIUM (General content update)

---

### 9. Developer Environments
**URL:** https://learn.microsoft.com/en-us/power-platform/developer/create-developer-environment
**Classification:** MEDIUM (General content update)

---

### 10. Third-Party Connectors
**URL:** https://learn.microsoft.com/en-us/power-apps/maker/canvas-apps/connections-list
**Classification:** MEDIUM (General content update)

---

### 11. Custom Connectors
**URL:** https://learn.microsoft.com/en-us/connectors/custom-connectors/
**Classification:** MEDIUM (General content update)

---

### 12. Security Roles
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/security-roles-privileges
**Classification:** MEDIUM (General content update)

---

### 13. Create Security Roles
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/create-edit-security-role
**Classification:** MEDIUM (General content update)

---

### 14. High-Privileged Admin Roles
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/manage-high-privileged-admin-roles
**Classification:** MEDIUM (General content update)

---

### 15. IP Firewall
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/ip-firewall
**Classification:** MEDIUM (General content update)

---

### 16. Cross-Tenant Restrictions
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/cross-tenant-restrictions
**Classification:** MEDIUM (General content update)

---

### 17. Encryption
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/manage-encryption-key
**Classification:** MEDIUM (General content update)

---

### 18. Analytics
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/analytics-common-data-service
**Classification:** MEDIUM (General content update)

---

### 19. Export Analytics to Azure
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/self-service-analytics
**Classification:** MEDIUM (General content update)

---

### 20. Power Platform Inventory
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/power-platform-inventory
**Classification:** MEDIUM (General content update)

---

### 21. Monitor Copilot Studio
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/monitoring/monitor-copilot-studio
**Classification:** MEDIUM (General content update)

---

### 22. Monitoring Hub
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/monitoring/monitoring-overview
**Classification:** MEDIUM (General content update)

---

### 23. Monitor Alerts
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/monitoring/alerts
**Classification:** MEDIUM (General content update)

---

### 24. Copilot Hub
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/copilot/copilot-hub
**Classification:** MEDIUM (General content update)

---

### 25. Maker Onboarding (Welcome Content)
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/welcome-content
**Classification:** MEDIUM (General content update)

---

### 26. Agent Access Points
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/security/identity-access-management#agent-access-points-preview
**Classification:** MEDIUM (General content update)

---

### 27. Copilot Studio Message Capacity
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/manage-copilot-studio-messages-capacity
**Classification:** MEDIUM (General content update)

---

### 28. Business Continuity
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/business-continuity-disaster-recovery
**Classification:** MEDIUM (General content update)

---

### 29. Backup and Restore
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/backup-restore-environments
**Classification:** MEDIUM (General content update)

---

### 30. Regions Overview
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/regions-overview
**Classification:** MEDIUM (General content update)

---

### 31. Capacity Storage
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/capacity-storage
**Classification:** MEDIUM (General content update)

---

### 32. PowerShell
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/powerapps-powershell
**Classification:** MEDIUM (General content update)

---

### 33. PowerShell Getting Started
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/powershell-getting-started
**Classification:** MEDIUM (General content update)

---

### 34. Power Platform Governance
**URL:** https://learn.microsoft.com/en-us/power-platform/guidance/adoption/dlp-strategy
**Classification:** MEDIUM (General content update)

---

### 35. Environment Strategy
**URL:** https://learn.microsoft.com/en-us/power-platform/guidance/adoption/environment-strategy
**Classification:** MEDIUM (General content update)

---

### 36. CoE Power BI Monitor
**URL:** https://learn.microsoft.com/en-us/power-platform/guidance/coe/power-bi-monitor
**Classification:** MEDIUM (General content update)

---

### 37. Release Plans
**URL:** https://learn.microsoft.com/en-us/power-platform/release-plan/2025wave2/
**Classification:** MEDIUM (General content update)

---

### 38. Release Plans (2026 Wave 1)
**URL:** https://learn.microsoft.com/en-us/power-platform/release-plan/2026wave1/
**Classification:** MEDIUM (General content update)

---

### 39. Enhanced Admin Controls [Preview]
**URL:** https://learn.microsoft.com/en-us/power-platform/release-plan/2026wave1/power-platform-governance-administration/manage-copilot-security-enhanced-admin-controls
**Classification:** MEDIUM (General content update)

---

### 40. Pipelines Overview
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/pipelines
**Classification:** MEDIUM (General content update)

---

### 41. Set Up Pipelines
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/set-up-pipelines
**Classification:** MEDIUM (General content update)

---

### 42. Run Pipelines
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/run-pipeline
**Classification:** MEDIUM (General content update)

---

### 43. Default Deployment Pipeline
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/default-deployment-pipeline-rule-for-environment-groups
**Classification:** MEDIUM (General content update)

---

### 44. Solution Concepts
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/solution-concepts-alm
**Classification:** MEDIUM (General content update)

---

### 45. Admin Deployment Hub
**URL:** https://learn.microsoft.com/en-us/power-platform/alm/admin-deployment-hub
**Classification:** MEDIUM (General content update)

---

### 46. Copilot Studio Overview
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/fundamentals-what-is-copilot-studio
**Classification:** MEDIUM (General content update)

---

### 47. Security and Governance
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/security-and-governance
**Classification:** MEDIUM (General content update)

---

### 48. Sensitivity Labels in Copilot Studio
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/sensitivity-label-copilot-studio
**Classification:** MEDIUM (General content update)

---

### 49. Analytics
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/analytics-overview
**Classification:** MEDIUM (General content update)

---

### 50. Connectors
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/advanced-connectors
**Classification:** MEDIUM (General content update)

---

### 51. Knowledge Sources
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/knowledge-copilot-studio
**Classification:** MEDIUM (General content update)

---

### 52. Quickstart: Create and deploy an agent
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/nlu-gpt-overview
**Classification:** MEDIUM (General content update)

---

### 53. Agent Orchestration
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/add-tools-custom-agent
**Classification:** MEDIUM (General content update)

---

### 54. External Threat Detection
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/external-security-provider
**Classification:** MEDIUM (General content update)

---

### 55. Human Agent Handoff
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/advanced-hand-off
**Classification:** MEDIUM (General content update)

---

### 56. VNet Support
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/admin-network-isolation-vnet
**Classification:** MEDIUM (General content update)

---

### 57. What's New
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/whats-new
**Classification:** MEDIUM (General content update)

---

### 58. Governance Guidance
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/guidance/sec-gov-intro
**Classification:** MEDIUM (General content update)

---

### 59. Architecting Agent Solutions
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/guidance/architecture/
**Classification:** MEDIUM (General content update)

---

### 60. Create Custom MCP Server
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/mcp-create-new-server
**Classification:** MEDIUM (General content update)

---

### 61. Safe Sharing / Credential Oversharing [Preview]
**URL:** https://learn.microsoft.com/en-us/power-platform/release-plan/2026wave1/microsoft-copilot-studio/enforce-safe-sharing-detecting-credential-oversharing
**Classification:** MEDIUM (General content update)

---

### 62. Copilot Studio Kit — Compliance Hub
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/guidance/whats-new
**Classification:** MEDIUM (General content update)

---

### 63. Data, Privacy, and Security
**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-privacy
**Classification:** MEDIUM (General content update)

---

### 64. Manage Copilot
**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-enable-users
**Classification:** MEDIUM (General content update)

---

### 65. Manage Agents
**URL:** https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps
**Classification:** MEDIUM (General content update)

---

### 66. Copilot Usage Reports
**URL:** https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/microsoft-365-copilot-usage
**Classification:** MEDIUM (General content update)

---

### 67. Copilot Control System Overview
**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/copilot-control-system/overview
**Classification:** MEDIUM (General content update)

---

### 68. Copilot Control System - Security and Governance
**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/copilot-control-system/security-governance
**Classification:** MEDIUM (General content update)

---

### 69. Copilot Control System - Management Controls
**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/copilot-control-system/management-controls
**Classification:** MEDIUM (General content update)

---

### 70. Agent Management Essentials Hub
**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/agent-essentials/agent-essentials-overview
**Classification:** MEDIUM (General content update)

---

### 71. Agent Prerequisites
**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/agent-essentials/agent-prerequisites
**Classification:** MEDIUM (General content update)

---

### 72. Visual Governance Guide
**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/agent-essentials/m365-agents-visual-map
**Classification:** MEDIUM (General content update)

---

### 73. Deployment Checklist
**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/agent-essentials/m365-agents-checklist
**Classification:** MEDIUM (General content update)

---

### 74. Deployment Blueprint
**URL:** https://learn.microsoft.com/en-us/microsoft-365/copilot/agent-essentials/m365-agents-blueprint
**Classification:** MEDIUM (General content update)

---

### 75. Agent 365 SDK and CLI
**URL:** https://learn.microsoft.com/en-us/microsoft-agent-365/developer/
**Classification:** MEDIUM (General content update)

---

### 76. Agent 365 Overview Page (M365 Admin)
**URL:** https://learn.microsoft.com/en-us/microsoft-365/admin/manage/agent-365-overview
**Classification:** MEDIUM (General content update)

---

### 77. Agent 365 Security Overview
**URL:** https://learn.microsoft.com/en-us/security/security-for-ai/agent-365-security
**Classification:** MEDIUM (General content update)

---

### 78. Human-in-the-Loop Workflows
**URL:** https://learn.microsoft.com/en-us/agent-framework/workflows/human-in-the-loop
**Classification:** MEDIUM (General content update)

---

### 79. Create DLP Policies
**URL:** https://learn.microsoft.com/en-us/purview/dlp-create-deploy-policy
**Classification:** MEDIUM (General content update)

---

### 80. Sensitivity Labels for Sites
**URL:** https://learn.microsoft.com/en-us/purview/sensitivity-labels-teams-groups-sites
**Classification:** MEDIUM (General content update)

---

### 81. DSPM for AI
**URL:** https://learn.microsoft.com/en-us/purview/ai-microsoft-purview
**Classification:** MEDIUM (General content update)

---

### 82. DSPM Considerations
**URL:** https://learn.microsoft.com/en-us/purview/dspm-for-ai-considerations
**Classification:** MEDIUM (General content update)

---

### 83. Communication Compliance
**URL:** https://learn.microsoft.com/en-us/purview/communication-compliance
**Classification:** MEDIUM (General content update)

---

### 84. Create Policies
**URL:** https://learn.microsoft.com/en-us/purview/communication-compliance-policies
**Classification:** MEDIUM (General content update)

---

### 85. Investigate Alerts
**URL:** https://learn.microsoft.com/en-us/purview/communication-compliance-investigate-remediate
**Classification:** MEDIUM (General content update)

---

### 86. Insider Risk Management
**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management
**Classification:** MEDIUM (General content update)

---

### 87. Create Insider Risk Policies
**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management-policies
**Classification:** MEDIUM (General content update)

---

### 88. Insider Risk Indicators
**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management-settings-policy-indicators
**Classification:** MEDIUM (General content update)

---

### 89. Investigate Alerts
**URL:** https://learn.microsoft.com/en-us/purview/insider-risk-management-activities
**Classification:** MEDIUM (General content update)

---

### 90. Sensitive Information Types
**URL:** https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-learn-about
**Classification:** MEDIUM (General content update)

---

### 91. Custom SITs
**URL:** https://learn.microsoft.com/en-us/purview/sit-create-a-custom-sensitive-information-type
**Classification:** MEDIUM (General content update)

---

### 92. Keyword Dictionaries
**URL:** https://learn.microsoft.com/en-us/purview/sit-create-a-keyword-dictionary
**Classification:** MEDIUM (General content update)

---

### 93. Exact Data Match
**URL:** https://learn.microsoft.com/en-us/purview/sit-learn-about-exact-data-match-based-sits
**Classification:** MEDIUM (General content update)

---

### 94. Trainable Classifiers
**URL:** https://learn.microsoft.com/en-us/purview/trainable-classifiers-learn-about
**Classification:** MEDIUM (General content update)

---

### 95. Data Retention
**URL:** https://learn.microsoft.com/en-us/purview/retention
**Classification:** MEDIUM (General content update)

---

### 96. Retention Policies
**URL:** https://learn.microsoft.com/en-us/purview/create-retention-policies
**Classification:** MEDIUM (General content update)

---

### 97. Retention Labels
**URL:** https://learn.microsoft.com/en-us/purview/create-retention-labels-data-lifecycle-management
**Classification:** MEDIUM (General content update)

---

### 98. Retention for SharePoint
**URL:** https://learn.microsoft.com/en-us/purview/retention-policies-sharepoint
**Classification:** MEDIUM (General content update)

---

### 99. Disposition
**URL:** https://learn.microsoft.com/en-us/purview/disposition
**Classification:** MEDIUM (General content update)

---

### 100. SEC 17a-4 / Preservation Lock
**URL:** https://learn.microsoft.com/en-us/purview/retention-regulatory-requirements
**Classification:** MEDIUM (General content update)

---

### 101. Records Management
**URL:** https://learn.microsoft.com/en-us/purview/records-management
**Classification:** MEDIUM (General content update)

---

### 102. Data Lifecycle Management
**URL:** https://learn.microsoft.com/en-us/purview/data-lifecycle-management
**Classification:** MEDIUM (General content update)

---

### 103. eDiscovery
**URL:** https://learn.microsoft.com/en-us/purview/ediscovery
**Classification:** MEDIUM (General content update)

---

### 104. Create Cases
**URL:** https://learn.microsoft.com/en-us/purview/ediscovery-create-and-manage-cases
**Classification:** MEDIUM (General content update)

---

### 105. KeyQL Reference
**URL:** https://learn.microsoft.com/en-us/purview/ediscovery-keyword-queries-and-search-conditions
**Classification:** MEDIUM (General content update)

---

### 106. Onboard Devices
**URL:** https://learn.microsoft.com/en-us/purview/endpoint-dlp-getting-started
**Classification:** MEDIUM (General content update)

---

### 107. Configure Settings
**URL:** https://learn.microsoft.com/en-us/purview/dlp-configure-endpoint-settings
**Classification:** MEDIUM (General content update)

---

### 108. Encryption
**URL:** https://learn.microsoft.com/en-us/purview/encryption
**Classification:** MEDIUM (General content update)

---

### 109. Activity Explorer
**URL:** https://learn.microsoft.com/en-us/purview/data-classification-activity-explorer
**Classification:** MEDIUM (General content update)

---

### 110. Compliance Manager
**URL:** https://learn.microsoft.com/en-us/purview/compliance-manager
**Classification:** MEDIUM (General content update)

---

### 111. Assessments
**URL:** https://learn.microsoft.com/en-us/purview/compliance-manager-assessments
**Classification:** MEDIUM (General content update)

---

### 112. Conditional Access Policies
**URL:** https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-policies
**Classification:** MEDIUM (General content update)

---

### 113. Session Controls
**URL:** https://learn.microsoft.com/en-us/entra/identity/conditional-access/howto-conditional-access-session-lifetime
**Classification:** MEDIUM (General content update)

---

### 114. Phishing-Resistant MFA
**URL:** https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-strengths
**Classification:** MEDIUM (General content update)

---

### 115. Authentication Methods
**URL:** https://learn.microsoft.com/en-us/entra/identity/authentication/overview-authentication
**Classification:** MEDIUM (General content update)

---

### 116. Role-Based Access Control
**URL:** https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-overview
**Classification:** MEDIUM (General content update)

---

### 117. Admin Roles
**URL:** https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference
**Classification:** MEDIUM (General content update)

---

### 118. Access Reviews
**URL:** https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview
**Classification:** MEDIUM (General content update)

---

### 119. Create Access Review
**URL:** https://learn.microsoft.com/en-us/entra/id-governance/create-access-review
**Classification:** MEDIUM (General content update)

---

### 120. Privileged Identity Management
**URL:** https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure
**Classification:** MEDIUM (General content update)

---

### 121. User Management
**URL:** https://learn.microsoft.com/en-us/entra/identity/users/
**Classification:** MEDIUM (General content update)

---

### 122. Agent Identities for AI Agents
**URL:** https://learn.microsoft.com/en-us/entra/agent-id/identity-professional/microsoft-entra-agent-identities-for-ai-agents
**Classification:** MEDIUM (General content update)

---

### 123. SharePoint Admin Center
**URL:** https://learn.microsoft.com/en-us/sharepoint/sharepoint-admin-role
**Classification:** MEDIUM (General content update)

---

### 124. Sharing Permissions
**URL:** https://learn.microsoft.com/en-us/sharepoint/modern-experience-sharing-permissions
**Classification:** MEDIUM (General content update)

---

### 125. External Sharing
**URL:** https://learn.microsoft.com/en-us/sharepoint/external-sharing-overview
**Classification:** MEDIUM (General content update)

---

### 126. Manage Sharing Settings
**URL:** https://learn.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off
**Classification:** MEDIUM (General content update)

---

### 127. Restricted Access Control
**URL:** https://learn.microsoft.com/en-us/sharepoint/restricted-access-control
**Classification:** MEDIUM (General content update)

---

### 128. Restricted Content Discovery
**URL:** https://learn.microsoft.com/en-us/sharepoint/restricted-content-discovery
**Classification:** MEDIUM (General content update)

---

### 129. Restricted SharePoint Search
**URL:** https://learn.microsoft.com/en-us/sharepoint/restricted-sharepoint-search
**Classification:** MEDIUM (General content update)

---

### 130. Data Access Governance Reports
**URL:** https://learn.microsoft.com/en-us/sharepoint/data-access-governance-reports
**Classification:** MEDIUM (General content update)

---

### 131. Site Lifecycle Management
**URL:** https://learn.microsoft.com/en-us/sharepoint/site-lifecycle-management
**Classification:** MEDIUM (General content update)

---

### 132. Site Attestation
**URL:** https://learn.microsoft.com/en-us/sharepoint/request-site-attestations
**Classification:** MEDIUM (General content update)

---

### 133. Agent Insights
**URL:** https://learn.microsoft.com/en-us/sharepoint/insights-on-sharepoint-agents
**Classification:** MEDIUM (General content update)

---

### 134. List Management
**URL:** https://learn.microsoft.com/en-us/sharepoint/control-lists
**Classification:** MEDIUM (General content update)

---

### 135. Training Sites
**URL:** https://learn.microsoft.com/en-us/sharepoint/create-training-site
**Classification:** MEDIUM (General content update)

---

### 136. Versioning
**URL:** https://learn.microsoft.com/en-us/sharepoint/governance/versioning-content-approval-and-check-out-planning
**Classification:** MEDIUM (General content update)

---

### 137. Retention for SharePoint
**URL:** https://learn.microsoft.com/en-us/purview/create-retention-policies#retaining-content-thats-in-sharepoint-sites
**Classification:** MEDIUM (General content update)

---

### 138. Integrated Apps
**URL:** https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-addins-in-the-admin-center
**Classification:** MEDIUM (General content update)

---

### 139. Service Health
**URL:** https://learn.microsoft.com/en-us/microsoft-365/enterprise/view-service-health
**Classification:** MEDIUM (General content update)

---

### 140. Message Center
**URL:** https://learn.microsoft.com/en-us/microsoft-365/admin/manage/message-center
**Classification:** CRITICAL (Deprecation notice)

---

### 141. Microsoft Sentinel
**URL:** https://learn.microsoft.com/en-us/azure/sentinel/overview
**Classification:** MEDIUM (General content update)

---

### 142. Data Connectors
**URL:** https://learn.microsoft.com/en-us/azure/sentinel/connect-data-sources
**Classification:** MEDIUM (General content update)

---

### 143. Custom Analytics Rules
**URL:** https://learn.microsoft.com/en-us/azure/sentinel/create-analytics-rules
**Classification:** MEDIUM (General content update)

---

### 144. Built-in Analytics
**URL:** https://learn.microsoft.com/en-us/azure/sentinel/threat-detection
**Classification:** MEDIUM (General content update)

---

### 145. Workbooks
**URL:** https://learn.microsoft.com/en-us/azure/sentinel/monitor-your-data
**Classification:** MEDIUM (General content update)

---

### 146. Automation Rules
**URL:** https://learn.microsoft.com/en-us/azure/sentinel/automate-incident-handling-with-automation-rules
**Classification:** MEDIUM (General content update)

---

### 147. Investigate Incidents
**URL:** https://learn.microsoft.com/en-us/azure/sentinel/investigate-cases
**Classification:** MEDIUM (General content update)

---

### 148. Azure Key Vault
**URL:** https://learn.microsoft.com/en-us/azure/key-vault/general/overview
**Classification:** MEDIUM (General content update)

---

### 149. Azure Private Link
**URL:** https://learn.microsoft.com/en-us/azure/private-link/private-link-overview
**Classification:** MEDIUM (General content update)

---

### 150. Immutable Blob Storage
**URL:** https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-storage-overview
**Classification:** MEDIUM (General content update)

---

### 151. Azure Monitor Alerts
**URL:** https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-overview
**Classification:** MEDIUM (General content update)

---

### 152. Azure Service Health
**URL:** https://learn.microsoft.com/en-us/azure/service-health/overview
**Classification:** MEDIUM (General content update)

---

### 153. Azure Information Protection
**URL:** https://learn.microsoft.com/en-us/azure/information-protection/what-is-information-protection
**Classification:** MEDIUM (General content update)

---

### 154. Track and Revoke Documents
**URL:** https://learn.microsoft.com/en-us/purview/track-and-revoke-admin
**Classification:** MEDIUM (General content update)

---

### 155. Apply IRM to SharePoint
**URL:** https://learn.microsoft.com/en-us/purview/apply-irm-to-a-list-or-library
**Classification:** MEDIUM (General content update)

---

### 156. Responsible AI
**URL:** https://learn.microsoft.com/en-us/azure/machine-learning/concept-responsible-ai
**Classification:** MEDIUM (General content update)

---

### 157. AI Content Safety
**URL:** https://learn.microsoft.com/en-us/azure/ai-services/content-safety/overview
**Classification:** MEDIUM (General content update)

---

### 158. Cost Management
**URL:** https://learn.microsoft.com/en-us/azure/cost-management-billing/costs/overview-cost-management
**Classification:** MEDIUM (General content update)

---

### 159. Azure Budgets
**URL:** https://learn.microsoft.com/en-us/azure/cost-management-billing/costs/tutorial-acm-create-budgets
**Classification:** MEDIUM (General content update)

---

### 160. Azure DevOps Test Plans
**URL:** https://learn.microsoft.com/en-us/azure/devops/test/overview
**Classification:** MEDIUM (General content update)

---

### 161. Device Control
**URL:** https://learn.microsoft.com/en-us/defender-endpoint/device-control-overview
**Classification:** MEDIUM (General content update)

---

### 162. Approval Workflows
**URL:** https://learn.microsoft.com/en-us/power-automate/get-started-approvals
**Classification:** MEDIUM (General content update)

---

### 163. Scheduled Flows
**URL:** https://learn.microsoft.com/en-us/power-automate/run-scheduled-tasks
**Classification:** MEDIUM (General content update)

---

### 164. Solution Checker
**URL:** https://learn.microsoft.com/en-us/power-apps/maker/data-platform/use-powerapps-checker
**Classification:** MEDIUM (General content update)

---

### 165. Testing Guidance
**URL:** https://learn.microsoft.com/en-us/power-apps/maker/plan-designer/plan-designer
**Classification:** MEDIUM (General content update)

---

### 166. Access Reviews API
**URL:** https://learn.microsoft.com/en-us/graph/api/resources/accessreviewsv2-overview
**Classification:** MEDIUM (General content update)

---

### 167. Governance Adoption
**URL:** https://learn.microsoft.com/en-us/power-bi/guidance/fabric-adoption-roadmap-governance
**Classification:** MEDIUM (General content update)

---

### 168. Viva Learning Overview
**URL:** https://learn.microsoft.com/en-us/viva/learning/overview-viva-learning
**Classification:** MEDIUM (General content update)

---

### 169. Incident Response Planning
**URL:** https://learn.microsoft.com/en-us/security/operations/incident-response-planning
**Classification:** MEDIUM (General content update)

---

### 170. AI Red Team
**URL:** https://learn.microsoft.com/en-us/security/ai-red-team/
**Classification:** MEDIUM (General content update)

---

### 171. DLP Cmdlets
**URL:** https://learn.microsoft.com/en-us/powershell/module/exchange/new-dlpcompliancepolicy
**Classification:** CRITICAL (Deprecation notice)

---

### 172. Management Activity API
**URL:** https://learn.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-reference
**Classification:** MEDIUM (General content update)

---

### 173. Power Platform Licensing
**URL:** https://learn.microsoft.com/en-us/power-platform/admin/pricing-billing-skus
**Classification:** MEDIUM (General content update)

---

### 174. Microsoft 365 Licensing
**URL:** https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-overview
**Classification:** MEDIUM (General content update)

---

### 175. M365 Licensing Guidance
**URL:** https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance
**Classification:** MEDIUM (General content update)

---

### 176. Purview Licensing
**URL:** https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-purview-service-description
**Classification:** MEDIUM (General content update)

---

### 177. Copilot Studio Licensing
**URL:** https://learn.microsoft.com/en-us/microsoft-copilot-studio/requirements-licensing-subscriptions
**Classification:** MEDIUM (General content update)

---

## URL Redirects Detected

Consider updating microsoft-learn-urls.md:

| Original URL | Redirects To |
|--------------|--------------|
| https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps | https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps?view=o365-worldwide |
| https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/microsoft-365-copilot-usage | https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/microsoft-365-copilot-usage?view=o365-worldwide |
| https://learn.microsoft.com/en-us/microsoft-365/admin/manage/agent-365-overview | https://learn.microsoft.com/en-us/microsoft-365/admin/manage/agent-365-overview?view=o365-worldwide |
| https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps | https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-copilot-agents-integrated-apps?view=o365-worldwide |
| https://learn.microsoft.com/en-us/entra/agent-id/identity-professional/microsoft-entra-agent-identities-for-ai-agents | https://learn.microsoft.com/en-us/entra/agent-id/what-is-microsoft-entra-agent-id |
| https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-addins-in-the-admin-center | https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-addins-in-the-admin-center?view=o365-worldwide |
| https://learn.microsoft.com/en-us/microsoft-365/enterprise/view-service-health | https://learn.microsoft.com/en-us/microsoft-365/enterprise/view-service-health?view=o365-worldwide |
| https://learn.microsoft.com/en-us/microsoft-365/admin/manage/message-center | https://learn.microsoft.com/en-us/microsoft-365/admin/manage/message-center?view=o365-worldwide |
| https://learn.microsoft.com/en-us/azure/machine-learning/concept-responsible-ai | https://learn.microsoft.com/en-us/azure/machine-learning/concept-responsible-ai?view=azureml-api-2 |
| https://learn.microsoft.com/en-us/azure/devops/test/overview | https://learn.microsoft.com/en-us/azure/devops/test/overview?view=azure-devops |
| https://learn.microsoft.com/en-us/graph/api/resources/application | https://learn.microsoft.com/en-us/graph/api/resources/application?view=graph-rest-1.0 |
| https://learn.microsoft.com/en-us/graph/api/resources/accessreviewsv2-overview | https://learn.microsoft.com/en-us/graph/api/resources/accessreviewsv2-overview?view=graph-rest-1.0 |
| https://learn.microsoft.com/en-us/powershell/module/exchange/new-dlpcompliancepolicy | https://learn.microsoft.com/en-us/powershell/module/exchangepowershell/new-dlpcompliancepolicy?view=exchange-ps |
| https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-overview | https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-overview?view=o365-worldwide |

---

## Errors

No errors detected.

---

*Generated by `scripts/learn_monitor.py` (unified monitoring framework)*