[{"data":1,"prerenderedAt":1677},["ShallowReactive",2],{"article-\u002Farticles\u002Fcopilot-sensitivity-label-dlp":3,"article-series-m365-copilot":1644},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"date":10,"category":11,"series":12,"seriesNo":13,"seriesLabel":14,"author":15,"thumbnail":16,"tags":17,"faq":23,"body":36,"_type":1638,"_id":1639,"_source":1640,"_file":1641,"_stem":1642,"_extension":1643},"\u002Farticles\u002Fcopilot-sensitivity-label-dlp","articles",false,"","Microsoft 365 Copilotの秘密度ラベルとDLP｜「警告」から始める段階設計とライセンス要件","Microsoft 365 Copilotで秘密度ラベルとDLP（データ損失防止）が何をするかを整理。ラベル付きファイルの扱い、DLP for Copilot、機能ごとのライセンス要件、「止める」より「警告する」から始める段階設計を解説します。","2026-10-06","M365 Copilot導入","m365-copilot",4.5,"第4回（後編）","K.S.ロジャース株式会社","\u002Fimg\u002Fcontents\u002Fnews\u002Fthumb122.jpg",[18,19,20,21,22],"Microsoft 365 Copilot","情報セキュリティ","Microsoft Purview","AIガバナンス","AX",[24,27,30,33],{"q":25,"a":26},"秘密度ラベルを付けたファイルは、Microsoft 365 Copilotに読まれなくなりますか？","ラベルを付けただけでは読まれなくなりません。Copilotはラベルを認識して回答に表示し、新しく作る文書にラベルを引き継ぎます。暗号化するラベルでユーザーにコピー（EXTRACT）の権限を与えていない場合は、Copilotはその内容を要約せず、リンクで参照するだけになります。DLPでラベル付きファイルをCopilotの処理から除外する方法もあります。",{"q":28,"a":29},"DLP for Microsoft 365 Copilotは、どのライセンスで使えますか？","2026年9月時点のMicrosoftのサービス説明では、プロンプトに含まれる機密情報を検知してCopilotの応答を止める機能はCopilotの全ユーザーが対象です。一方、秘密度ラベル付きのファイルやメールをCopilotの処理から除外する機能は、Microsoft 365 E5などが対象で、Microsoft 365 Business PremiumやE3は対象外とされています。",{"q":31,"a":32},"Copilotの利用は監査ログにどこまで記録されますか？","誰がいつどのアプリでCopilotを使ったか、回答のために参照したファイルやメール、その秘密度ラベル、ポリシーでブロックされたかなどが記録されます。プロンプトと回答の本文は監査ログには含まれず、電子情報開示などで確認します。Audit (Standard) の保存期間は180日です。",{"q":34,"a":35},"秘密度ラベルとDLPを導入するときは、どこから始めればよいですか？","いきなりブロックから始めず、監査ログの確認とDLPのシミュレーションで現状を見える化し、区分を3〜4つに絞ったラベルを手動で使い始めます。次にポリシーヒントで警告し、誤検知や業務への影響を確かめてから、本当に困る情報だけをブロックする段階設計がおすすめです。",{"type":37,"children":38,"toc":1614},"root",[39,58,63,82,123,162,169,187,193,213,218,251,256,263,276,382,394,399,423,429,441,468,488,494,507,605,610,616,636,893,898,903,936,941,947,959,964,988,994,999,1018,1023,1029,1041,1164,1176,1182,1194,1214,1226,1232,1244,1262,1267,1273,1286,1302,1307,1330,1335,1358,1371,1377,1390,1423,1428,1433,1523,1529,1534,1547,1552,1609],{"type":40,"tag":41,"props":42,"children":43},"element","p",{},[44,47,56],{"type":45,"value":46},"text","※ Microsoft 365 Copilot は、2026年8月から「Microsoft Copilot」に名称が変わりました（Copilot Chat は「Microsoft Copilot Chat」）。移行期間中は旧名称も併用されているため、本記事では広く使われている「Microsoft 365 Copilot」の表記で統一しています（出典：",{"type":40,"tag":48,"props":49,"children":53},"a",{"href":50,"rel":51},"https:\u002F\u002Flearn.microsoft.com\u002Fja-jp\u002Fcopilot\u002Fmicrosoft-365\u002Fmicrosoft-365-copilot-privacy",[52],"nofollow",[54],{"type":45,"value":55},"Microsoft Learn「Microsoft Copilot のデータ、プライバシー、セキュリティ」",{"type":45,"value":57},"）。",{"type":40,"tag":41,"props":59,"children":60},{},[61],{"type":45,"value":62},"「SharePoint の権限は見直した。でも、同じサイトの中にも役員だけに見せたい資料はある」「取引先から、情報の区分管理を求められている」——権限の棚卸しを進めた会社のうち、業種や取引先の事情で、ファイル1つ1つの扱いまで決める必要がある会社から出てくるのがこの相談です。",{"type":40,"tag":41,"props":64,"children":65},{},[66,72,74,80],{"type":40,"tag":48,"props":67,"children":69},{"href":68},"\u002Farticles\u002Fcopilot-joho-rouei-sharepoint-kengen\u002F",[70],{"type":45,"value":71},"第3回",{"type":45,"value":73},"では、Microsoft 365 Copilot の情報漏洩リスクの中心は「社内で見えすぎる」ことであり、対策の本体は権限の棚卸しだと整理しました。",{"type":40,"tag":48,"props":75,"children":77},{"href":76},"\u002Farticles\u002Fcopilot-security-settei-chusho\u002F",[78],{"type":45,"value":79},"前編",{"type":45,"value":81},"では、一般的な中小企業の多くには秘密度ラベルと DLP までは必要なく、金融・防衛関連・医療など規制のある業種や、取引先から情報管理を求められる会社などに必要になると整理しています。",{"type":40,"tag":41,"props":83,"children":84},{},[85,87,93,95,100,102,107,109,114,116,121],{"type":45,"value":86},"本記事（後編）は、前編の判定チェックで「必要」に当てはまった会社に向けた内容です。",{"type":40,"tag":88,"props":89,"children":90},"strong",{},[91],{"type":45,"value":92},"ファイルやメール1つ1つの扱い",{"type":45,"value":94},"を決める Microsoft Purview の",{"type":40,"tag":88,"props":96,"children":97},{},[98],{"type":45,"value":99},"秘密度ラベル",{"type":45,"value":101},"と ",{"type":40,"tag":88,"props":103,"children":104},{},[105],{"type":45,"value":106},"DLP",{"type":45,"value":108},"（データ損失防止）が Copilot に対して何をするのかを整理し、「",{"type":40,"tag":88,"props":110,"children":111},{},[112],{"type":45,"value":113},"止める",{"type":45,"value":115},"」より「",{"type":40,"tag":88,"props":117,"children":118},{},[119],{"type":45,"value":120},"警告する",{"type":45,"value":122},"」から始める段階設計を解説します。この2つは設定を誤ると社員の仕事を止めてしまうため、段階を踏むことが大切です。",{"type":40,"tag":124,"props":125,"children":126},"blockquote",{},[127,135],{"type":40,"tag":41,"props":128,"children":129},{},[130],{"type":40,"tag":88,"props":131,"children":132},{},[133],{"type":45,"value":134},"この記事の要点",{"type":40,"tag":136,"props":137,"children":138},"ul",{},[139,152,157],{"type":40,"tag":140,"props":141,"children":142},"li",{},[143,145,150],{"type":45,"value":144},"秘密度ラベルと DLP は、権限（誰が場所を見られるか）の整理を終えたうえで、",{"type":40,"tag":88,"props":146,"children":147},{},[148],{"type":45,"value":149},"ファイルやメールの扱い",{"type":45,"value":151},"まで決める必要がある会社が重ねる仕組みです",{"type":40,"tag":140,"props":153,"children":154},{},[155],{"type":45,"value":156},"秘密度ラベルを付けただけでは Copilot に読まれなくなるわけではありません。Copilot から内容を外すには、コピー権限を与えない暗号化か、DLP for Copilot を使います。後者は2026年9月時点で E5 などが対象です",{"type":40,"tag":140,"props":158,"children":159},{},[160],{"type":45,"value":161},"導入するときは、見える化 → ラベルを付ける → 警告する → 止める、の順に段階を踏みます。いきなりブロックから始めると、誤検知で業務が止まり、ルールが形骸化します",{"type":40,"tag":163,"props":164,"children":166},"h2",{"id":165},"秘密度ラベルとdlpの位置づけ",[167],{"type":45,"value":168},"秘密度ラベルとDLPの位置づけ",{"type":40,"tag":41,"props":170,"children":171},{},[172,174,179,181,185],{"type":45,"value":173},"Copilot のセキュリティ設定は、",{"type":40,"tag":88,"props":175,"children":176},{},[177],{"type":45,"value":178},"権限・秘密度ラベル・DLP・監査",{"type":45,"value":180},"の4つの層で考えます（",{"type":40,"tag":48,"props":182,"children":183},{"href":76},[184],{"type":45,"value":79},{"type":45,"value":186},"の図を参照）。権限が広すぎるまま秘密度ラベルや DLP を入れても、穴の空いたバケツにふたをするようなものです。第3回の権限の棚卸しを先に進め、そのうえで「同じ場所の中でも特に扱いに注意するもの」をラベルと DLP で守る、という関係です。",{"type":40,"tag":163,"props":188,"children":190},{"id":189},"秘密度ラベルとは-ファイルやメールに扱いの区分を付ける",[191],{"type":45,"value":192},"秘密度ラベルとは ― ファイルやメールに「扱いの区分」を付ける",{"type":40,"tag":41,"props":194,"children":195},{},[196,198,203,205,212],{"type":45,"value":197},"秘密度ラベルとは、",{"type":40,"tag":88,"props":199,"children":200},{},[201],{"type":45,"value":202},"ファイルやメールに「社外秘」「極秘」といった扱いの区分を付ける仕組み",{"type":45,"value":204},"です。ラベルはファイルやメールのメタデータに保存されるため、ファイルをどこに保存し直してもラベルは付いたままになります。ラベルには、区分を表示するだけのものと、暗号化やヘッダー・透かしの表示といった保護を伴うものがあります（出典：",{"type":40,"tag":48,"props":206,"children":209},{"href":207,"rel":208},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fpurview\u002Fsensitivity-labels",[52],[210],{"type":45,"value":211},"Microsoft Learn「Learn about sensitivity labels」",{"type":45,"value":57},{"type":40,"tag":41,"props":214,"children":215},{},[216],{"type":45,"value":217},"ラベルを配布するときの設定（ラベルポリシー）では、次のことが決められます。",{"type":40,"tag":136,"props":219,"children":220},{},[221,231,241],{"type":40,"tag":140,"props":222,"children":223},{},[224,229],{"type":40,"tag":88,"props":225,"children":226},{},[227],{"type":45,"value":228},"既定のラベル",{"type":45,"value":230},"——ラベルが付いていない文書やメールに、最初から付けておくラベル",{"type":40,"tag":140,"props":232,"children":233},{},[234,239],{"type":40,"tag":88,"props":235,"children":236},{},[237],{"type":45,"value":238},"ラベルを下げるときの理由の入力",{"type":45,"value":240},"——「社外秘」を「公開」に変えるなど、ラベルを外したり優先度の低いラベルに変えたりするときに、理由の入力を求める",{"type":40,"tag":140,"props":242,"children":243},{},[244,249],{"type":40,"tag":88,"props":245,"children":246},{},[247],{"type":45,"value":248},"ラベルの必須化",{"type":45,"value":250},"——ラベルを付けないと保存や送信ができないようにする",{"type":40,"tag":41,"props":252,"children":253},{},[254],{"type":45,"value":255},"Microsoft のドキュメントでは、主要なラベルが5つを超えると実際の運用での効果が目に見えて下がると紹介されています。また、暗号化するラベルを文書の既定のラベルにすることは、社外との共有で問題が起きやすいため通常は勧められないとされています（出典：同上）。",{"type":40,"tag":257,"props":258,"children":260},"h3",{"id":259},"copilotは秘密度ラベルをどう扱うか",[261],{"type":45,"value":262},"Copilotは秘密度ラベルをどう扱うか",{"type":40,"tag":41,"props":264,"children":265},{},[266,268,275],{"type":45,"value":267},"Copilot は秘密度ラベルを認識し、次のように扱います（出典：",{"type":40,"tag":48,"props":269,"children":272},{"href":270,"rel":271},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fpurview\u002Fai-m365-copilot-considerations",[52],[273],{"type":45,"value":274},"Microsoft Learn「Considerations for Microsoft Purview to manage Microsoft 365 Copilot」",{"type":45,"value":57},{"type":40,"tag":277,"props":278,"children":279},"table",{},[280,299],{"type":40,"tag":281,"props":282,"children":283},"thead",{},[284],{"type":40,"tag":285,"props":286,"children":287},"tr",{},[288,294],{"type":40,"tag":289,"props":290,"children":291},"th",{},[292],{"type":45,"value":293},"状況",{"type":40,"tag":289,"props":295,"children":296},{},[297],{"type":45,"value":298},"Copilot の動き",{"type":40,"tag":300,"props":301,"children":302},"tbody",{},[303,317,330,343,356,369],{"type":40,"tag":285,"props":304,"children":305},{},[306,312],{"type":40,"tag":307,"props":308,"children":309},"td",{},[310],{"type":45,"value":311},"ラベル付きのファイルを参照して回答する",{"type":40,"tag":307,"props":313,"children":314},{},[315],{"type":45,"value":316},"回答にラベルが表示される。複数の資料を参照した場合は、優先度の最も高い（通常は最も厳しい）ラベルが表示される",{"type":40,"tag":285,"props":318,"children":319},{},[320,325],{"type":40,"tag":307,"props":321,"children":322},{},[323],{"type":45,"value":324},"ラベル付きの資料から新しい文書を作る",{"type":40,"tag":307,"props":326,"children":327},{},[328],{"type":45,"value":329},"優先度の最も高いラベルが、新しい文書に引き継がれる",{"type":40,"tag":285,"props":331,"children":332},{},[333,338],{"type":40,"tag":307,"props":334,"children":335},{},[336],{"type":45,"value":337},"暗号化され、本人にコピー（EXTRACT）の権限がない",{"type":40,"tag":307,"props":339,"children":340},{},[341],{"type":45,"value":342},"その内容は要約されず、リンクで参照されるだけ。アプリでそのファイルを開いているときは Copilot を使えない",{"type":40,"tag":285,"props":344,"children":345},{},[346,351],{"type":40,"tag":307,"props":347,"children":348},{},[349],{"type":45,"value":350},"二重キー暗号化（DKE）で保護されている",{"type":40,"tag":307,"props":352,"children":353},{},[354],{"type":45,"value":355},"Copilot はアクセスできない",{"type":40,"tag":285,"props":357,"children":358},{},[359,364],{"type":40,"tag":307,"props":360,"children":361},{},[362],{"type":45,"value":363},"サイトやチームに付けたラベル",{"type":40,"tag":307,"props":365,"children":366},{},[367],{"type":45,"value":368},"中のファイルには引き継がれず、Copilot の回答にも表示されない",{"type":40,"tag":285,"props":370,"children":371},{},[372,377],{"type":40,"tag":307,"props":373,"children":374},{},[375],{"type":45,"value":376},"Teams の会議やチャットに付けたラベル",{"type":40,"tag":307,"props":378,"children":379},{},[380],{"type":45,"value":381},"現時点では Copilot に認識されない",{"type":40,"tag":41,"props":383,"children":384},{},[385,387,392],{"type":45,"value":386},"ここで押さえておきたいのは、",{"type":40,"tag":88,"props":388,"children":389},{},[390],{"type":45,"value":391},"ラベルを付けただけでは、Copilot から内容が外れるわけではない",{"type":45,"value":393},"ことです。権限のある人が質問すれば、ラベル付きのファイルも回答の根拠になります。ラベルは「これは社外秘だ」と利用者に意識させ、新しく作った文書にも区分を引き継がせる仕組みです。",{"type":40,"tag":41,"props":395,"children":396},{},[397],{"type":45,"value":398},"Copilot から内容を外したい場合は、次の2つの方法があります。",{"type":40,"tag":400,"props":401,"children":402},"ol",{},[403,413],{"type":40,"tag":140,"props":404,"children":405},{},[406,411],{"type":40,"tag":88,"props":407,"children":408},{},[409],{"type":45,"value":410},"暗号化するラベルで、コピー（EXTRACT）の権限を与えない",{"type":45,"value":412},"——Microsoft Purview ポータルでは「Copy and extract content (EXTRACT)」として表示される権限です。ラベルの暗号化を設定するときに既定で選ばれる権限レベル（Editor）にはこの権限が含まれるため、Copilot から外したいラベルでは、閲覧だけを許すカスタムの権限を設計します",{"type":40,"tag":140,"props":414,"children":415},{},[416,421],{"type":40,"tag":88,"props":417,"children":418},{},[419],{"type":45,"value":420},"DLP for Microsoft 365 Copilot で、ラベル付きのファイルやメールを処理から除外する",{"type":45,"value":422},"——次の節で説明します。ライセンスの条件があります",{"type":40,"tag":163,"props":424,"children":426},{"id":425},"dlpデータ損失防止とは-条件に合う操作を検知し警告ブロックする",[427],{"type":45,"value":428},"DLP（データ損失防止）とは ― 条件に合う操作を検知し、警告・ブロックする",{"type":40,"tag":41,"props":430,"children":431},{},[432,434,439],{"type":45,"value":433},"DLP（Data Loss Prevention、データ損失防止）とは、",{"type":40,"tag":88,"props":435,"children":436},{},[437],{"type":45,"value":438},"あらかじめ決めた条件に合う情報や操作を検知し、利用者への通知、警告、ブロックといった対応を自動で行う仕組み",{"type":45,"value":440},"です。たとえば「マイナンバーを含むファイルを社外に共有しようとしたら警告する」「『極秘』ラベルのメールを社外に送ろうとしたらブロックする」といったルールを作れます。",{"type":40,"tag":41,"props":442,"children":443},{},[444,446,451,453,458,460,467],{"type":45,"value":445},"Exchange Online・SharePoint・OneDrive を対象にした DLP では、利用者に",{"type":40,"tag":88,"props":447,"children":448},{},[449],{"type":45,"value":450},"ポリシーヒント",{"type":45,"value":452},"（Outlook の作成画面や Office アプリのメッセージバーに表示される警告）を出せます。さらに、ブロックする設定にしたうえで、",{"type":40,"tag":88,"props":454,"children":455},{},[456],{"type":45,"value":457},"業務上の理由を入力すれば上書きできる",{"type":45,"value":459},"ようにしたり、誤検知を報告できるようにしたりできます。入力された理由は記録され、ルールの調整に使えます（出典：",{"type":40,"tag":48,"props":461,"children":464},{"href":462,"rel":463},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fpurview\u002Fdlp-use-notifications-and-policy-tips",[52],[465],{"type":45,"value":466},"Microsoft Learn「Send email notifications and show policy tips for DLP policies」",{"type":45,"value":57},{"type":40,"tag":41,"props":469,"children":470},{},[471,473,478,480,487],{"type":45,"value":472},"また、DLP ポリシーには",{"type":40,"tag":88,"props":474,"children":475},{},[476],{"type":45,"value":477},"シミュレーションモード",{"type":45,"value":479},"があります。実際には何も止めずに、ポリシーが有効だったらどのファイルやメールが該当したかを専用のダッシュボードで確認できる機能で、シミュレーションは最大15日間実行でき、結果は30日間保持されます（出典：",{"type":40,"tag":48,"props":481,"children":484},{"href":482,"rel":483},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fpurview\u002Fdlp-simulation-mode-learn",[52],[485],{"type":45,"value":486},"Microsoft Learn「Learn about data loss prevention simulation mode」",{"type":45,"value":57},{"type":40,"tag":257,"props":489,"children":491},{"id":490},"dlp-for-microsoft-365-copilotでできること",[492],{"type":45,"value":493},"DLP for Microsoft 365 Copilotでできること",{"type":40,"tag":41,"props":495,"children":496},{},[497,499,506],{"type":45,"value":498},"DLP には「Microsoft 365 Copilot and Copilot Chat」という専用の場所（ロケーション）があり、Copilot に対して次の制御ができます（出典：",{"type":40,"tag":48,"props":500,"children":503},{"href":501,"rel":502},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fpurview\u002Fdlp-microsoft365-copilot-location-learn-about",[52],[504],{"type":45,"value":505},"Microsoft Learn「Microsoft Purview DLP for Microsoft 365 Copilot and Copilot Chat」",{"type":45,"value":57},{"type":40,"tag":277,"props":508,"children":509},{},[510,531],{"type":40,"tag":281,"props":511,"children":512},{},[513],{"type":40,"tag":285,"props":514,"children":515},{},[516,521,526],{"type":40,"tag":289,"props":517,"children":518},{},[519],{"type":45,"value":520},"制御",{"type":40,"tag":289,"props":522,"children":523},{},[524],{"type":45,"value":525},"内容",{"type":40,"tag":289,"props":527,"children":528},{},[529],{"type":45,"value":530},"状態（2026年9月時点）",{"type":40,"tag":300,"props":532,"children":533},{},[534,552,570,588],{"type":40,"tag":285,"props":535,"children":536},{},[537,542,547],{"type":40,"tag":307,"props":538,"children":539},{},[540],{"type":45,"value":541},"ラベル付きのファイル・メールを処理しない",{"type":40,"tag":307,"props":543,"children":544},{},[545],{"type":45,"value":546},"指定した秘密度ラベルのファイルやメールの内容を、Copilot が回答に使わない。引用元としては表示されることがある",{"type":40,"tag":307,"props":548,"children":549},{},[550],{"type":45,"value":551},"提供中。メールは2025年1月1日以降に送信されたもの。予定表の招待は対象外",{"type":40,"tag":285,"props":553,"children":554},{},[555,560,565],{"type":40,"tag":307,"props":556,"children":557},{},[558],{"type":45,"value":559},"機密情報を含むプロンプトに応答しない",{"type":40,"tag":307,"props":561,"children":562},{},[563],{"type":45,"value":564},"プロンプトにクレジットカード番号などの機密情報の種類が含まれると、Copilot が応答しない",{"type":40,"tag":307,"props":566,"children":567},{},[568],{"type":45,"value":569},"プレビュー",{"type":40,"tag":285,"props":571,"children":572},{},[573,578,583],{"type":40,"tag":307,"props":574,"children":575},{},[576],{"type":45,"value":577},"機密情報を含むプロンプトで Web 検索しない",{"type":40,"tag":307,"props":579,"children":580},{},[581],{"type":45,"value":582},"機密情報を含むプロンプトでは、外部の Web 検索を使わず、社内のデータだけで回答する",{"type":40,"tag":307,"props":584,"children":585},{},[586],{"type":45,"value":587},"提供中",{"type":40,"tag":285,"props":589,"children":590},{},[591,596,601],{"type":40,"tag":307,"props":592,"children":593},{},[594],{"type":45,"value":595},"社外から届いたメールを処理しない",{"type":40,"tag":307,"props":597,"children":598},{},[599],{"type":45,"value":600},"社外のドメインから届いたメールを、Copilot の回答の根拠や要約に使わない",{"type":40,"tag":307,"props":602,"children":603},{},[604],{"type":45,"value":569},{"type":40,"tag":41,"props":606,"children":607},{},[608],{"type":45,"value":609},"注意点もあります。この場所で使える対応は「Copilot による処理を止める」だけで、Exchange や SharePoint の DLP のような「理由を入力して上書き」はありません。シミュレーションモードは使えます。ポリシーの変更が Copilot に反映されるまで最大4時間かかり、利用者がプロンプトに直接アップロードしたファイルの中身は DLP で検査されません。",{"type":40,"tag":163,"props":611,"children":613},{"id":612},"機能ごとのライセンス要件2026年9月時点",[614],{"type":45,"value":615},"機能ごとのライセンス要件（2026年9月時点）",{"type":40,"tag":41,"props":617,"children":618},{},[619,621,626,628,635],{"type":45,"value":620},"秘密度ラベルと DLP は、",{"type":40,"tag":88,"props":622,"children":623},{},[624],{"type":45,"value":625},"プランによって使える機能が大きく違います",{"type":45,"value":627},"。Microsoft Purview のサービス説明をもとに、中小企業が検討することの多いプランで整理します（出典：",{"type":40,"tag":48,"props":629,"children":632},{"href":630,"rel":631},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Foffice365\u002Fservicedescriptions\u002Fmicrosoft-365-service-descriptions\u002Fmicrosoft-365-tenantlevel-services-licensing-guidance\u002Fmicrosoft-purview-service-description",[52],[633],{"type":45,"value":634},"Microsoft Learn「Microsoft Purview service description」",{"type":45,"value":57},{"type":40,"tag":277,"props":637,"children":638},{},[639,670],{"type":40,"tag":281,"props":640,"children":641},{},[642],{"type":40,"tag":285,"props":643,"children":644},{},[645,650,655,660,665],{"type":40,"tag":289,"props":646,"children":647},{},[648],{"type":45,"value":649},"機能",{"type":40,"tag":289,"props":651,"children":652},{},[653],{"type":45,"value":654},"Business Standard",{"type":40,"tag":289,"props":656,"children":657},{},[658],{"type":45,"value":659},"Business Premium",{"type":40,"tag":289,"props":661,"children":662},{},[663],{"type":45,"value":664},"Microsoft 365 E3",{"type":40,"tag":289,"props":666,"children":667},{},[668],{"type":45,"value":669},"Microsoft 365 E5",{"type":40,"tag":300,"props":671,"children":672},{},[673,699,723,747,771,795,820,844,868],{"type":40,"tag":285,"props":674,"children":675},{},[676,681,686,691,695],{"type":40,"tag":307,"props":677,"children":678},{},[679],{"type":45,"value":680},"秘密度ラベルを手動で付ける",{"type":40,"tag":307,"props":682,"children":683},{},[684],{"type":45,"value":685},"—",{"type":40,"tag":307,"props":687,"children":688},{},[689],{"type":45,"value":690},"○",{"type":40,"tag":307,"props":692,"children":693},{},[694],{"type":45,"value":690},{"type":40,"tag":307,"props":696,"children":697},{},[698],{"type":45,"value":690},{"type":40,"tag":285,"props":700,"children":701},{},[702,707,711,715,719],{"type":40,"tag":307,"props":703,"children":704},{},[705],{"type":45,"value":706},"Copilot で作った文書へのラベルの引き継ぎ（Copilot のライセンスが必要）",{"type":40,"tag":307,"props":708,"children":709},{},[710],{"type":45,"value":685},{"type":40,"tag":307,"props":712,"children":713},{},[714],{"type":45,"value":690},{"type":40,"tag":307,"props":716,"children":717},{},[718],{"type":45,"value":690},{"type":40,"tag":307,"props":720,"children":721},{},[722],{"type":45,"value":690},{"type":40,"tag":285,"props":724,"children":725},{},[726,731,735,739,743],{"type":40,"tag":307,"props":727,"children":728},{},[729],{"type":45,"value":730},"秘密度ラベルの自動適用",{"type":40,"tag":307,"props":732,"children":733},{},[734],{"type":45,"value":685},{"type":40,"tag":307,"props":736,"children":737},{},[738],{"type":45,"value":685},{"type":40,"tag":307,"props":740,"children":741},{},[742],{"type":45,"value":685},{"type":40,"tag":307,"props":744,"children":745},{},[746],{"type":45,"value":690},{"type":40,"tag":285,"props":748,"children":749},{},[750,755,759,763,767],{"type":40,"tag":307,"props":751,"children":752},{},[753],{"type":45,"value":754},"DLP（Exchange Online・SharePoint・OneDrive）",{"type":40,"tag":307,"props":756,"children":757},{},[758],{"type":45,"value":685},{"type":40,"tag":307,"props":760,"children":761},{},[762],{"type":45,"value":690},{"type":40,"tag":307,"props":764,"children":765},{},[766],{"type":45,"value":690},{"type":40,"tag":307,"props":768,"children":769},{},[770],{"type":45,"value":690},{"type":40,"tag":285,"props":772,"children":773},{},[774,779,783,787,791],{"type":40,"tag":307,"props":775,"children":776},{},[777],{"type":45,"value":778},"DLP（Teams のチャット）",{"type":40,"tag":307,"props":780,"children":781},{},[782],{"type":45,"value":685},{"type":40,"tag":307,"props":784,"children":785},{},[786],{"type":45,"value":685},{"type":40,"tag":307,"props":788,"children":789},{},[790],{"type":45,"value":685},{"type":40,"tag":307,"props":792,"children":793},{},[794],{"type":45,"value":690},{"type":40,"tag":285,"props":796,"children":797},{},[798,803,808,812,816],{"type":40,"tag":307,"props":799,"children":800},{},[801],{"type":45,"value":802},"DLP for Copilot：ラベル付きファイル・メールを処理しない",{"type":40,"tag":307,"props":804,"children":805},{},[806],{"type":45,"value":807},"×",{"type":40,"tag":307,"props":809,"children":810},{},[811],{"type":45,"value":807},{"type":40,"tag":307,"props":813,"children":814},{},[815],{"type":45,"value":807},{"type":40,"tag":307,"props":817,"children":818},{},[819],{"type":45,"value":690},{"type":40,"tag":285,"props":821,"children":822},{},[823,828,832,836,840],{"type":40,"tag":307,"props":824,"children":825},{},[826],{"type":45,"value":827},"DLP for Copilot：機密情報を含むプロンプトを止める",{"type":40,"tag":307,"props":829,"children":830},{},[831],{"type":45,"value":690},{"type":40,"tag":307,"props":833,"children":834},{},[835],{"type":45,"value":690},{"type":40,"tag":307,"props":837,"children":838},{},[839],{"type":45,"value":690},{"type":40,"tag":307,"props":841,"children":842},{},[843],{"type":45,"value":690},{"type":40,"tag":285,"props":845,"children":846},{},[847,852,856,860,864],{"type":40,"tag":307,"props":848,"children":849},{},[850],{"type":45,"value":851},"Audit (Standard)（Copilot の利用記録を含む、保存180日）",{"type":40,"tag":307,"props":853,"children":854},{},[855],{"type":45,"value":690},{"type":40,"tag":307,"props":857,"children":858},{},[859],{"type":45,"value":690},{"type":40,"tag":307,"props":861,"children":862},{},[863],{"type":45,"value":690},{"type":40,"tag":307,"props":865,"children":866},{},[867],{"type":45,"value":690},{"type":40,"tag":285,"props":869,"children":870},{},[871,876,880,885,889],{"type":40,"tag":307,"props":872,"children":873},{},[874],{"type":45,"value":875},"Audit (Premium)（保存最長1年など）",{"type":40,"tag":307,"props":877,"children":878},{},[879],{"type":45,"value":685},{"type":40,"tag":307,"props":881,"children":882},{},[883],{"type":45,"value":884},"アドオンで対象",{"type":40,"tag":307,"props":886,"children":887},{},[888],{"type":45,"value":685},{"type":40,"tag":307,"props":890,"children":891},{},[892],{"type":45,"value":690},{"type":40,"tag":41,"props":894,"children":895},{},[896],{"type":45,"value":897},"※「×」はサービス説明で対象外と明記されているもの、「—」は対象プランとして記載されていないものです。DLP for Copilot のプロンプトの制御は、Copilot を利用するすべてのユーザーが対象とされています。Audit (Premium) は、Business Premium に Microsoft Purview Suite for Business Premium などのアドオン（合計300席まで）を追加した場合が対象として記載されています。",{"type":40,"tag":41,"props":899,"children":900},{},[901],{"type":45,"value":902},"この表から、重要な結論が3つ出てきます。",{"type":40,"tag":400,"props":904,"children":905},{},[906,916,926],{"type":40,"tag":140,"props":907,"children":908},{},[909,914],{"type":40,"tag":88,"props":910,"children":911},{},[912],{"type":45,"value":913},"Business Standard は、秘密度ラベルと DLP の対象プランとして記載されていない",{"type":45,"value":915},"——ラベルと DLP を使うなら、Business Premium 以上が現実的な出発点です",{"type":40,"tag":140,"props":917,"children":918},{},[919,924],{"type":40,"tag":88,"props":920,"children":921},{},[922],{"type":45,"value":923},"Business Premium・E3 では、ラベル付きファイルを DLP で Copilot から外すことはできない",{"type":45,"value":925},"——この場合は、暗号化するラベルでコピー権限を与えない方法か、第3回の権限の是正（見せる人を絞る）で対応します",{"type":40,"tag":140,"props":927,"children":928},{},[929,934],{"type":40,"tag":88,"props":930,"children":931},{},[932],{"type":45,"value":933},"監査ログは、どのプランでも Copilot の利用が記録される",{"type":45,"value":935},"——まず監査ログを見るところから始められます",{"type":40,"tag":41,"props":937,"children":938},{},[939],{"type":45,"value":940},"ライセンスの構成と機能の対応は変わることがあります。計画を立てる前に、必ず最新のサービス説明と、自社テナントの Microsoft Purview ポータルで利用できる機能を確認してください。",{"type":40,"tag":163,"props":942,"children":944},{"id":943},"どこから始めるか-止めるより警告するの段階設計",[945],{"type":45,"value":946},"どこから始めるか ― 「止める」より「警告する」の段階設計",{"type":40,"tag":41,"props":948,"children":949},{},[950,952,957],{"type":45,"value":951},"秘密度ラベルと DLP の導入でよくある失敗は、",{"type":40,"tag":88,"props":953,"children":954},{},[955],{"type":45,"value":956},"最初からブロックを有効にする",{"type":45,"value":958},"ことです。条件の書き方が少し広すぎるだけで、見積書や請求書のメールが送れなくなり、現場から「仕事にならない」という声が上がります。そして、例外を認めるたびにルールが骨抜きになり、最後は誰も守らなくなります。",{"type":40,"tag":41,"props":960,"children":961},{},[962],{"type":45,"value":963},"そこでおすすめするのが、次の4段階です。",{"type":40,"tag":965,"props":966,"children":967},"picture",{},[968,970,978,979],{"type":45,"value":969},"\n  ",{"type":40,"tag":971,"props":972,"children":977},"source",{"media":973,"srcSet":974,"width":975,"height":976},"(max-width: 768px)","\u002Fimg\u002Fcontents\u002Farticles\u002Fcopilot-sensitivity-label-dlp\u002Fdankai-sekkei-sp.svg",420,572,[],{"type":45,"value":969},{"type":40,"tag":980,"props":981,"children":987},"img",{"src":982,"alt":983,"width":984,"height":985,"loading":986},"\u002Fimg\u002Fcontents\u002Farticles\u002Fcopilot-sensitivity-label-dlp\u002Fdankai-sekkei.svg","秘密度ラベルとDLPの段階設計：0 見える化、1 ラベルを付ける、2 警告する、3 止める。警告で誤検知と業務影響を確かめてから止める",800,322,"lazy",[],{"type":40,"tag":257,"props":989,"children":991},{"id":990},"段階0見える化する",[992],{"type":45,"value":993},"段階0：見える化する",{"type":40,"tag":41,"props":995,"children":996},{},[997],{"type":45,"value":998},"最初の段階では、利用者への影響を一切出さずに現状を把握します。",{"type":40,"tag":136,"props":1000,"children":1001},{},[1002,1007],{"type":40,"tag":140,"props":1003,"children":1004},{},[1005],{"type":45,"value":1006},"Microsoft Purview の監査ログで、Copilot がどのファイルを参照しているかを確認する（パイロット部門から始める）",{"type":40,"tag":140,"props":1008,"children":1009},{},[1010,1012,1016],{"type":45,"value":1011},"検知したい条件（個人情報、取引先の口座情報など）で DLP ポリシーを作り、",{"type":40,"tag":88,"props":1013,"children":1014},{},[1015],{"type":45,"value":477},{"type":45,"value":1017},"で動かして、どれくらいのファイルやメールが該当するかを見る",{"type":40,"tag":41,"props":1019,"children":1020},{},[1021],{"type":45,"value":1022},"シミュレーションで該当件数が想定よりはるかに多い場合、その条件でブロックすれば業務が止まるということです。この段階で条件を調整します。",{"type":40,"tag":257,"props":1024,"children":1026},{"id":1025},"段階1ラベルを付け始める",[1027],{"type":45,"value":1028},"段階1：ラベルを付け始める",{"type":40,"tag":41,"props":1030,"children":1031},{},[1032,1034,1039],{"type":45,"value":1033},"次に、秘密度ラベルを作って配布します。ポイントは",{"type":40,"tag":88,"props":1035,"children":1036},{},[1037],{"type":45,"value":1038},"区分を絞る",{"type":45,"value":1040},"ことです。中小企業なら、次のような3〜4区分で十分です。",{"type":40,"tag":277,"props":1042,"children":1043},{},[1044,1070],{"type":40,"tag":281,"props":1045,"children":1046},{},[1047],{"type":40,"tag":285,"props":1048,"children":1049},{},[1050,1055,1060,1065],{"type":40,"tag":289,"props":1051,"children":1052},{},[1053],{"type":45,"value":1054},"ラベル",{"type":40,"tag":289,"props":1056,"children":1057},{},[1058],{"type":45,"value":1059},"対象の例",{"type":40,"tag":289,"props":1061,"children":1062},{},[1063],{"type":45,"value":1064},"保護の設定",{"type":40,"tag":289,"props":1066,"children":1067},{},[1068],{"type":45,"value":1069},"Copilot での扱い",{"type":40,"tag":300,"props":1071,"children":1072},{},[1073,1096,1118,1141],{"type":40,"tag":285,"props":1074,"children":1075},{},[1076,1081,1086,1091],{"type":40,"tag":307,"props":1077,"children":1078},{},[1079],{"type":45,"value":1080},"公開",{"type":40,"tag":307,"props":1082,"children":1083},{},[1084],{"type":45,"value":1085},"会社案内、公開済みの資料",{"type":40,"tag":307,"props":1087,"children":1088},{},[1089],{"type":45,"value":1090},"なし",{"type":40,"tag":307,"props":1092,"children":1093},{},[1094],{"type":45,"value":1095},"通常どおり参照される",{"type":40,"tag":285,"props":1097,"children":1098},{},[1099,1104,1109,1114],{"type":40,"tag":307,"props":1100,"children":1101},{},[1102],{"type":45,"value":1103},"社内",{"type":40,"tag":307,"props":1105,"children":1106},{},[1107],{"type":45,"value":1108},"社内の一般的な資料・メール",{"type":40,"tag":307,"props":1110,"children":1111},{},[1112],{"type":45,"value":1113},"なし（既定のラベルにする）",{"type":40,"tag":307,"props":1115,"children":1116},{},[1117],{"type":45,"value":1095},{"type":40,"tag":285,"props":1119,"children":1120},{},[1121,1126,1131,1136],{"type":40,"tag":307,"props":1122,"children":1123},{},[1124],{"type":45,"value":1125},"社外秘",{"type":40,"tag":307,"props":1127,"children":1128},{},[1129],{"type":45,"value":1130},"取引条件、見積の原価、顧客情報",{"type":40,"tag":307,"props":1132,"children":1133},{},[1134],{"type":45,"value":1135},"ヘッダーや透かしの表示。必要なら社外共有を DLP で警告",{"type":40,"tag":307,"props":1137,"children":1138},{},[1139],{"type":45,"value":1140},"権限のある人には参照される。回答にラベルが表示される",{"type":40,"tag":285,"props":1142,"children":1143},{},[1144,1149,1154,1159],{"type":40,"tag":307,"props":1145,"children":1146},{},[1147],{"type":45,"value":1148},"極秘",{"type":40,"tag":307,"props":1150,"children":1151},{},[1152],{"type":45,"value":1153},"人事評価、給与、役員会資料",{"type":40,"tag":307,"props":1155,"children":1156},{},[1157],{"type":45,"value":1158},"対象者を限定した暗号化（コピー権限は与えない）",{"type":40,"tag":307,"props":1160,"children":1161},{},[1162],{"type":45,"value":1163},"内容は要約されず、リンクでの参照にとどまる",{"type":40,"tag":41,"props":1165,"children":1166},{},[1167,1169,1174],{"type":45,"value":1168},"最初は、ラベルを",{"type":40,"tag":88,"props":1170,"children":1171},{},[1172],{"type":45,"value":1173},"手動で付ける運用",{"type":45,"value":1175},"から始めます。「社内」を既定のラベルにしておき、「社外秘」「極秘」に当たるものだけを利用者が付け替える形にすると、負担が小さくなります。ラベルを下げるときに理由の入力を求める設定と組み合わせると、誤って外したときにも記録が残ります。",{"type":40,"tag":257,"props":1177,"children":1179},{"id":1178},"段階2警告する",[1180],{"type":45,"value":1181},"段階2：警告する",{"type":40,"tag":41,"props":1183,"children":1184},{},[1185,1187,1192],{"type":45,"value":1186},"ラベルが使われ始めたら、DLP で",{"type":40,"tag":88,"props":1188,"children":1189},{},[1190],{"type":45,"value":1191},"警告",{"type":45,"value":1193},"を出します。Exchange・SharePoint・OneDrive の DLP で、たとえば次のようなルールを作ります。",{"type":40,"tag":136,"props":1195,"children":1196},{},[1197,1202],{"type":40,"tag":140,"props":1198,"children":1199},{},[1200],{"type":45,"value":1201},"「社外秘」ラベルのメールを社外に送ろうとしたら、ポリシーヒントで知らせる",{"type":40,"tag":140,"props":1203,"children":1204},{},[1205,1207,1212],{"type":45,"value":1206},"個人情報を含むファイルを社外に共有しようとしたら、ブロックするが、",{"type":40,"tag":88,"props":1208,"children":1209},{},[1210],{"type":45,"value":1211},"業務上の理由を入力すれば上書き",{"type":45,"value":1213},"できるようにする",{"type":40,"tag":41,"props":1215,"children":1216},{},[1217,1219,1224],{"type":45,"value":1218},"この段階の目的は、利用者に「どんな操作が危ないのか」を体験で覚えてもらうことと、",{"type":40,"tag":88,"props":1220,"children":1221},{},[1222],{"type":45,"value":1223},"誤検知と業務への影響を記録から確かめる",{"type":45,"value":1225},"ことです。上書きの理由や誤検知の報告を1〜2か月分見れば、本当にブロックすべき条件が見えてきます。",{"type":40,"tag":257,"props":1227,"children":1229},{"id":1228},"段階3止める",[1230],{"type":45,"value":1231},"段階3：止める",{"type":40,"tag":41,"props":1233,"children":1234},{},[1235,1237,1242],{"type":45,"value":1236},"最後に、",{"type":40,"tag":88,"props":1238,"children":1239},{},[1240],{"type":45,"value":1241},"例外がほとんど出ない条件だけ",{"type":45,"value":1243},"をブロックに切り替えます。",{"type":40,"tag":136,"props":1245,"children":1246},{},[1247,1252,1257],{"type":40,"tag":140,"props":1248,"children":1249},{},[1250],{"type":45,"value":1251},"「極秘」ラベルのファイルやメールの社外送信をブロックする",{"type":40,"tag":140,"props":1253,"children":1254},{},[1255],{"type":45,"value":1256},"E5 などの対象ライセンスがあれば、DLP for Copilot で「極秘」ラベルのファイル・メールを Copilot の処理から除外する",{"type":40,"tag":140,"props":1258,"children":1259},{},[1260],{"type":45,"value":1261},"機密情報を含むプロンプトへの応答を止める（Copilot のユーザーが対象）",{"type":40,"tag":41,"props":1263,"children":1264},{},[1265],{"type":45,"value":1266},"DLP for Copilot は「処理を止める」だけの制御なので、ここでも段階0と同じく、先にシミュレーションで影響範囲を確かめてから有効にします。",{"type":40,"tag":163,"props":1268,"children":1270},{"id":1269},"監査とモニタリング-copilotの利用はどこまで記録されるか",[1271],{"type":45,"value":1272},"監査とモニタリング ― Copilotの利用はどこまで記録されるか",{"type":40,"tag":41,"props":1274,"children":1275},{},[1276,1278,1285],{"type":45,"value":1277},"段階設計のどの段階でも土台になるのが、監査ログです。Copilot を利用すると、Microsoft Purview の Audit (Standard) に自動で記録が残ります。追加の設定は要りません（出典：",{"type":40,"tag":48,"props":1279,"children":1282},{"href":1280,"rel":1281},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fpurview\u002Faudit-copilot",[52],[1283],{"type":45,"value":1284},"Microsoft Learn「Audit logs for Copilot and AI applications」",{"type":45,"value":57},{"type":40,"tag":965,"props":1287,"children":1288},{},[1289,1290,1295,1296],{"type":45,"value":969},{"type":40,"tag":971,"props":1291,"children":1294},{"media":973,"srcSet":1292,"width":975,"height":1293},"\u002Fimg\u002Fcontents\u002Farticles\u002Fcopilot-sensitivity-label-dlp\u002Fkansa-log-sp.svg",560,[],{"type":45,"value":969},{"type":40,"tag":980,"props":1297,"children":1301},{"src":1298,"alt":1299,"width":984,"height":1300,"loading":986},"\u002Fimg\u002Fcontents\u002Farticles\u002Fcopilot-sensitivity-label-dlp\u002Fkansa-log.svg","Copilotの監査ログで分かること（誰がいつどのアプリで使い、どのファイルを参照したか、ラベル、ブロック、Web検索）と、監査ログでは見ないもの（プロンプト本文、利用状況の集計）",364,[],{"type":40,"tag":41,"props":1303,"children":1304},{},[1305],{"type":45,"value":1306},"Copilot の監査記録（CopilotInteraction）で分かるのは、主に次の情報です。",{"type":40,"tag":136,"props":1308,"children":1309},{},[1310,1315,1320,1325],{"type":40,"tag":140,"props":1311,"children":1312},{},[1313],{"type":45,"value":1314},"誰が、いつ、どのアプリ（Word、Teams、Copilot Chat など）で Copilot を使ったか",{"type":40,"tag":140,"props":1316,"children":1317},{},[1318],{"type":45,"value":1319},"回答を作るために参照したファイル・メールなどのリソースと、その秘密度ラベル",{"type":40,"tag":140,"props":1321,"children":1322},{},[1323],{"type":45,"value":1324},"ポリシーによって参照がブロック・制限されたか",{"type":40,"tag":140,"props":1326,"children":1327},{},[1328],{"type":45,"value":1329},"公開 Web の検索を使ったか",{"type":40,"tag":41,"props":1331,"children":1332},{},[1333],{"type":45,"value":1334},"一方で、次の2点は監査ログの役割ではありません（出典：前掲「Considerations for Microsoft Purview to manage Microsoft 365 Copilot」）。",{"type":40,"tag":136,"props":1336,"children":1337},{},[1338,1348],{"type":40,"tag":140,"props":1339,"children":1340},{},[1341,1346],{"type":40,"tag":88,"props":1342,"children":1343},{},[1344],{"type":45,"value":1345},"プロンプトと回答の本文",{"type":45,"value":1347},"——監査ログには含まれません。確認が必要な場合は、電子情報開示（eDiscovery）や、Microsoft Purview の DSPM for AI のアクティビティエクスプローラーを使います",{"type":40,"tag":140,"props":1349,"children":1350},{},[1351,1356],{"type":40,"tag":88,"props":1352,"children":1353},{},[1354],{"type":45,"value":1355},"利用状況の集計",{"type":45,"value":1357},"——監査ログは、セキュリティとコンプライアンスのための記録です。「何人が何回使ったか」を測るには、Microsoft 365 管理センターの Copilot 利用状況レポートなどを使うよう案内されています",{"type":40,"tag":41,"props":1359,"children":1360},{},[1361,1363,1370],{"type":45,"value":1362},"保存期間にも注意が必要です。Audit (Standard) の保存期間は180日で、それより長く残すには Audit (Premium) の保持ポリシー（最長1年、アドオンで10年）などが必要です（出典：",{"type":40,"tag":48,"props":1364,"children":1367},{"href":1365,"rel":1366},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fpurview\u002Faudit-solutions-overview",[52],[1368],{"type":45,"value":1369},"Microsoft Learn「Learn about auditing solutions in Microsoft Purview」",{"type":45,"value":57},{"type":40,"tag":257,"props":1372,"children":1374},{"id":1373},"監査ログを見る運用にする",[1375],{"type":45,"value":1376},"監査ログを「見る運用」にする",{"type":40,"tag":41,"props":1378,"children":1379},{},[1380,1382,1388],{"type":45,"value":1381},"監査ログは、記録されているだけでは役に立ちません。",{"type":40,"tag":48,"props":1383,"children":1385},{"href":1384},"\u002Farticles\u002Fcopilot-shanai-kitei-edp\u002F",[1386],{"type":45,"value":1387},"特別編",{"type":45,"value":1389},"でも、規程と EDP の整理が成立する条件として「監査ログを実際に見る運用」を挙げました。次のくらいの頻度から始めるのが現実的です。",{"type":40,"tag":136,"props":1391,"children":1392},{},[1393,1403,1413],{"type":40,"tag":140,"props":1394,"children":1395},{},[1396,1401],{"type":40,"tag":88,"props":1397,"children":1398},{},[1399],{"type":45,"value":1400},"パイロット期間中は週1回",{"type":45,"value":1402},"——パイロット部門の Copilot が、想定外のサイトや「極秘」ラベルのファイルを参照していないかを確認する",{"type":40,"tag":140,"props":1404,"children":1405},{},[1406,1411],{"type":40,"tag":88,"props":1407,"children":1408},{},[1409],{"type":45,"value":1410},"全社展開後は月1回",{"type":45,"value":1412},"——DLP の警告と上書き理由、ブロックの件数を確認し、ルールを調整する",{"type":40,"tag":140,"props":1414,"children":1415},{},[1416,1421],{"type":40,"tag":88,"props":1417,"children":1418},{},[1419],{"type":45,"value":1420},"四半期に1回",{"type":45,"value":1422},"——第3回の権限レポートとあわせて、権限・ラベル・DLP の全体を見直す",{"type":40,"tag":41,"props":1424,"children":1425},{},[1426],{"type":45,"value":1427},"誰が見て、何があったら誰に報告するかを、あらかじめ決めておきます。",{"type":40,"tag":163,"props":1429,"children":1431},{"id":1430},"導入前後のチェックリスト",[1432],{"type":45,"value":1430},{"type":40,"tag":136,"props":1434,"children":1437},{"className":1435},[1436],"contains-task-list",[1438,1451,1460,1469,1478,1487,1496,1505,1514],{"type":40,"tag":140,"props":1439,"children":1442},{"className":1440},[1441],"task-list-item",[1443,1449],{"type":40,"tag":1444,"props":1445,"children":1448},"input",{"disabled":1446,"type":1447},true,"checkbox",[],{"type":45,"value":1450}," 第3回の権限の棚卸しで、機微な情報が全社に見える状態を解消した",{"type":40,"tag":140,"props":1452,"children":1454},{"className":1453},[1441],[1455,1458],{"type":40,"tag":1444,"props":1456,"children":1457},{"disabled":1446,"type":1447},[],{"type":45,"value":1459}," 契約中のプランで、秘密度ラベル・DLP・DLP for Copilot・監査のどの機能が使えるかを確認した",{"type":40,"tag":140,"props":1461,"children":1463},{"className":1462},[1441],[1464,1467],{"type":40,"tag":1444,"props":1465,"children":1466},{"disabled":1446,"type":1447},[],{"type":45,"value":1468}," 秘密度ラベルの区分を3〜4つに絞り、各区分の対象と保護の設定を決めた",{"type":40,"tag":140,"props":1470,"children":1472},{"className":1471},[1441],[1473,1476],{"type":40,"tag":1444,"props":1474,"children":1475},{"disabled":1446,"type":1447},[],{"type":45,"value":1477}," 「極秘」に当たる情報を Copilot から外す方法（暗号化の権限設計、DLP for Copilot、権限の是正）を決めた",{"type":40,"tag":140,"props":1479,"children":1481},{"className":1480},[1441],[1482,1485],{"type":40,"tag":1444,"props":1483,"children":1484},{"disabled":1446,"type":1447},[],{"type":45,"value":1486}," DLP ポリシーをシミュレーションモードで動かし、該当件数を確認した",{"type":40,"tag":140,"props":1488,"children":1490},{"className":1489},[1441],[1491,1494],{"type":40,"tag":1444,"props":1492,"children":1493},{"disabled":1446,"type":1447},[],{"type":45,"value":1495}," 警告の段階で、上書きの理由と誤検知を確認する担当と期間を決めた",{"type":40,"tag":140,"props":1497,"children":1499},{"className":1498},[1441],[1500,1503],{"type":40,"tag":1444,"props":1501,"children":1502},{"disabled":1446,"type":1447},[],{"type":45,"value":1504}," ブロックに切り替える条件と、切り替える前に社員へ知らせる手順を決めた",{"type":40,"tag":140,"props":1506,"children":1508},{"className":1507},[1441],[1509,1512],{"type":40,"tag":1444,"props":1510,"children":1511},{"disabled":1446,"type":1447},[],{"type":45,"value":1513}," 監査ログを見る担当、頻度、報告の流れを決めた",{"type":40,"tag":140,"props":1515,"children":1517},{"className":1516},[1441],[1518,1521],{"type":40,"tag":1444,"props":1519,"children":1520},{"disabled":1446,"type":1447},[],{"type":45,"value":1522}," 監査ログを180日より長く残す必要があるかを、社内規程や取引先との契約から確認した",{"type":40,"tag":163,"props":1524,"children":1526},{"id":1525},"ksrogers-の支援",[1527],{"type":45,"value":1528},"K.S.Rogers の支援",{"type":40,"tag":41,"props":1530,"children":1531},{},[1532],{"type":45,"value":1533},"K.S.Rogers では、Microsoft 365 Copilot の導入に合わせた秘密度ラベルと DLP の設計を、業種や取引先からの要求、社内の体制に合わせて伴走しています。契約中のプランで使える機能の確認から、ラベルの区分づくり、DLP のシミュレーションと警告段階の運用、ブロックへの切り替え判断、監査ログを見る運用の設計までを、社内の担当者の方と一緒に進めます。",{"type":40,"tag":41,"props":1535,"children":1536},{},[1537,1539,1545],{"type":45,"value":1538},"「設定はできても、どこまで止めてよいのか判断できない」という段階からご相談いただけます。ご相談は",{"type":40,"tag":48,"props":1540,"children":1542},{"href":1541},"\u002Fcontact\u002F",[1543],{"type":45,"value":1544},"お問い合わせ",{"type":45,"value":1546},"からどうぞ。",{"type":40,"tag":163,"props":1548,"children":1550},{"id":1549},"まとめ",[1551],{"type":45,"value":1549},{"type":40,"tag":136,"props":1553,"children":1554},{},[1555,1573,1592,1597],{"type":40,"tag":140,"props":1556,"children":1557},{},[1558,1560,1565,1567,1571],{"type":45,"value":1559},"秘密度ラベルと DLP は、規制のある業種や取引先から情報管理を求められる会社などが、",{"type":40,"tag":88,"props":1561,"children":1562},{},[1563],{"type":45,"value":1564},"権限の棚卸しの上に重ねる",{"type":45,"value":1566},"仕組みです。必要かどうかは",{"type":40,"tag":48,"props":1568,"children":1569},{"href":76},[1570],{"type":45,"value":79},{"type":45,"value":1572},"の判定チェックで確認します",{"type":40,"tag":140,"props":1574,"children":1575},{},[1576,1578,1583,1585,1590],{"type":45,"value":1577},"秘密度ラベルを付けただけでは Copilot から内容は外れません。外すには",{"type":40,"tag":88,"props":1579,"children":1580},{},[1581],{"type":45,"value":1582},"コピー権限を与えない暗号化",{"type":45,"value":1584},"か、E5 などが対象の ",{"type":40,"tag":88,"props":1586,"children":1587},{},[1588],{"type":45,"value":1589},"DLP for Copilot",{"type":45,"value":1591}," を使います",{"type":40,"tag":140,"props":1593,"children":1594},{},[1595],{"type":45,"value":1596},"使える機能はプランで大きく違います。Business Standard はラベルと DLP の対象として記載がなく、Business Premium・E3 ではラベル付きファイルを DLP で Copilot から外せません",{"type":40,"tag":140,"props":1598,"children":1599},{},[1600,1602,1607],{"type":45,"value":1601},"導入するときは、",{"type":40,"tag":88,"props":1603,"children":1604},{},[1605],{"type":45,"value":1606},"見える化 → ラベルを付ける → 警告する → 止める",{"type":45,"value":1608},"の順に進め、監査ログを見る運用を土台にします",{"type":40,"tag":41,"props":1610,"children":1611},{},[1612],{"type":45,"value":1613},"次回の第5回では、生成AIの社内ルール（利用ガイドライン）の作り方を、サンプル条文付きで扱います。",{"title":7,"searchDepth":1615,"depth":1615,"links":1616},2,[1617,1618,1622,1625,1626,1632,1635,1636,1637],{"id":165,"depth":1615,"text":168},{"id":189,"depth":1615,"text":192,"children":1619},[1620],{"id":259,"depth":1621,"text":262},3,{"id":425,"depth":1615,"text":428,"children":1623},[1624],{"id":490,"depth":1621,"text":493},{"id":612,"depth":1615,"text":615},{"id":943,"depth":1615,"text":946,"children":1627},[1628,1629,1630,1631],{"id":990,"depth":1621,"text":993},{"id":1025,"depth":1621,"text":1028},{"id":1178,"depth":1621,"text":1181},{"id":1228,"depth":1621,"text":1231},{"id":1269,"depth":1615,"text":1272,"children":1633},[1634],{"id":1373,"depth":1621,"text":1376},{"id":1430,"depth":1615,"text":1430},{"id":1525,"depth":1615,"text":1528},{"id":1549,"depth":1615,"text":1549},"markdown","content:articles:copilot-sensitivity-label-dlp.md","content","articles\u002Fcopilot-sensitivity-label-dlp.md","articles\u002Fcopilot-sensitivity-label-dlp","md",[1645,1650,1654,1658,1663,1668,1671,1676],{"_path":1646,"title":1647,"seriesNo":1648,"seriesLabel":1649},"\u002Farticles\u002Fm365-copilot-donyu-roadmap","Microsoft 365 Copilot 導入ロードマップ｜非IT企業がライセンス配布前に決めること",1,"第1回",{"_path":1651,"title":1652,"seriesNo":1653,"seriesLabel":1387},"\u002Farticles\u002Fcopilot-shanai-kitei-edp","Copilotのエンタープライズデータ保護（EDP）とは｜「外部AI禁止」の社内規程でも使えるかの判断手順",1.5,{"_path":1655,"title":1656,"seriesNo":1615,"seriesLabel":1657},"\u002Farticles\u002Fcopilot-data-okiba-box-sharepoint","Copilotは社内データを学習する？｜参照できるデータの条件とSharePoint・OneDrive・Boxの使い分け","第2回（前編）",{"_path":1659,"title":1660,"seriesNo":1661,"seriesLabel":1662},"\u002Farticles\u002Fcopilot-mail-chat-ikou-checklist","Exchange Online移行の注意点とLINE WORKSからTeamsへの判断｜Microsoft 365 Copilot導入前チェックリスト",2.5,"第2回（後編）",{"_path":1664,"title":1665,"seriesNo":1666,"seriesLabel":1667},"\u002Farticles\u002Fm365-copilot-iranai-google-hikaku","Microsoft 365 Copilotはいらない？無料版との違い・料金と「Googleより高い」への答え方",2.8,"番外編",{"_path":1669,"title":1670,"seriesNo":1621,"seriesLabel":71},"\u002Farticles\u002Fcopilot-joho-rouei-sharepoint-kengen","Microsoft 365 Copilotの情報漏洩対策｜SharePoint・OneDrive・Teamsの権限を棚卸しして是正する手順",{"_path":1672,"title":1673,"seriesNo":1674,"seriesLabel":1675},"\u002Farticles\u002Fcopilot-security-settei-chusho","Microsoft 365 Copilotのセキュリティ設定｜中小企業に秘密度ラベルとDLPは必要か",4,"第4回（前編）",{"_path":4,"title":8,"seriesNo":13,"seriesLabel":14},1791213880258]