From 104d8c035d0f5f363fcea3c58e50f036601d718b Mon Sep 17 00:00:00 2001 From: Kjell Tore Guttormsen Date: Wed, 24 Jun 2026 10:44:34 +0200 Subject: [PATCH] =?UTF-8?q?docs(ms-ai-architect):=20KB-refresh=20step0=20?= =?UTF-8?q?=E2=80=94=20security.md=20verifisert=20mot=20MS=20Learn=20+=20m?= =?UTF-8?q?askinlesbar=20header=20(Hate=20and=20Fairness,=20CMK=20RBAC-pri?= =?UTF-8?q?m=C3=A6r;=20unverified=201=E2=86=920)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../references/architecture/security.md | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/skills/ms-ai-advisor/references/architecture/security.md b/skills/ms-ai-advisor/references/architecture/security.md index 17581f0..f6916d3 100644 --- a/skills/ms-ai-advisor/references/architecture/security.md +++ b/skills/ms-ai-advisor/references/architecture/security.md @@ -1,5 +1,7 @@ # Security for Microsoft AI Solutions +**Last updated:** 2026-06-24 | Verified: MCP 2026-06-24 + Omfattende guide til sikkerhet, compliance og governance for AI-løsninger i Microsoft-økosystemet. --- @@ -109,7 +111,7 @@ Tjeneste for å oppdage og filtrere skadelig innhold i AI-applikasjoner. | Kategori | Beskrivelse | Severity Threshold (Default) | |----------|-------------|------------------------------| -| Hate & Fairness | Diskriminerende språk basert på identitetsgrupper | Medium | +| Hate and Fairness | Diskriminerende språk basert på identitetsgrupper | Medium | | Violence | Fysiske handlinger som skader/dreper | Medium | | Sexual | Seksuelt eksplisitt innhold | Medium | | Self-Harm | Selvskading eller selvmord | Medium | @@ -412,11 +414,11 @@ før M365 Copilot-utrulling for å: REQUIREMENTS: 1. Soft Delete aktivert 2. Do Not Purge aktivert -3. Legacy access policies (ikke RBAC) -4. System-assigned managed identity permissions: - - Get key - - Wrap key - - Unwrap key +3. Key Vault-tillatelser (ett av to alternativer): + a. Azure RBAC (anbefalt): tildel rollen "Key Vault Crypto Service Encryption User" til managed identity + b. Vault Access Policies: gi managed identity tillatelsene Get / Wrap key / Unwrap key +4. System- eller user-assigned managed identity på Azure OpenAI-ressursen +5. Kun RSA/RSA-HSM 2048-bit nøkler ``` ### Data in Transit @@ -535,4 +537,4 @@ Adversarial Threat Landscape for AI Systems: - [PyRIT on GitHub](https://github.com/Azure/PyRIT) - [MITRE ATLAS](https://atlas.mitre.org/) -*Sist oppdatert: Januar 2026* +*Sist oppdatert: 2026-06-24 (verifisert mot Microsoft Learn).*