Starting with the release of ChatGPT in late 2022, generative AI tools have enjoyed a remarkable surge in popularity and adoption, both in the business world and outside it. These tools, powered by massive neural networks, are already beginning to transform how organisations operate, offering new efficiencies and insights. Among these, Microsoft Copilot for Office 365 is quickly gaining traction thanks to easy access through Microsoft licensing and its close integration with existing Office applications and workflows. AI solutions like Copilot are designed to operate within a company’s virtual boundaries, adhering to its access controls and privacy measures to ensure a tailored and secure AI experience. However, even these AI tools come with their own risks, which businesses must understand and mitigate to maintain a robust cybersecurity posture.