Information security guidelines steering staff to an institutionally controlled tool
Information security guidelines issued in December 2023 direct users to work primarily with Microsoft Copilot on a university device while logged in with university credentials. The instrument governs data exposure by prescribing where the interaction takes place rather than by listing prohibited content.
Record
- Level
- Meso
- Domain
- Data Protection, Privacy and Security
- Institution
- University of Jyväskylä
- Country
- Finland
- Context
- Higher education
- Maturity
- Established
- Scalability
- Embedded
- Transferability
- Established
- Source report
- D3.1
Source trail
The source on which this record rests, the place in the document and the sentence found there. Quotations are searched for mechanically in the source file and the page on which they were located is recorded.
- 01D3.1 · Report on trends in policies and practices on the use of LLM and generative AI in the partnership: Report 1ADMIT (Erasmus+, EADTU)p. 33Quotation located in the source
Primarily use Microsoft's Copilot's AI-based conversation on a university device and while logged in to the Edge browser with university credentials!
The instruction names device, browser and credentials, which is the concrete control mechanism the classification rests on.
Evidence
The reported evidence on the effect of the practice. Evidentiary strength varies between practices; it is reproduced here as the source reports it.
The guideline prescribes the device, the account and the tool, which is a stronger and more checkable control than a general instruction not to share sensitive data.