ChatGPT

1. 01
   ChatGPT trains on data unless a business tier or opt-out is used. Verify which tier these users are on.

   Entra consentSource codePurview DLPSIEMVendor accountEmailNetworkEndpointIdentity
2. 02
   Adoption is broad enough that outright blocking will disrupt work. Prefer a sanctioned alternative plus Conditional Access.

   Entra consentNetworkIdentity
3. 03
   ChatGPT has tenant-wide admin consent. Confirm a documented approval exists, or revoke the grant and require per-user consent.

   Entra consent
4. 04
   Scopes expose directory, email, files. Evaluate the vendor's retention and training terms before allowing continued use.

   Entra consent
5. 05
   4 people signed in during the last 30 days under the tenant-wide consent. Start the conversation with them.

   Entra consent
6. 06
   2 keys for ChatGPT are in source control, including a public repository. Rotate them now, move to a secret manager, and turn on push protection so it cannot happen again.

   Source code
7. 07
   ChatGPT SDKs appear in 4 repositories. Decide whether this vendor is approved for engineering, and route calls through one gateway or an Azure OpenAI deployment so keys, logging, and data terms are managed centrally.

   Source code
8. 08
   Direct HTTP calls to api.openai.com bypass any SDK-level controls. Add the hosts to egress policy and prefer the sanctioned client library.

   Source code
9. 09
   4 of 5 matches were not blocked (All Full Names, U.S. Social Security Number (SSN), Credit Card Number). Review which rules still run in audit mode and align them with the blocking rules.

   Purview DLP
10. 10
    1 person overrode the DLP warning. Read the business justifications in Activity explorer; repeated overrides for the same data type mean the policy is wrong or the training is.

    Purview DLP
11. 11
    High-impact information types were involved (All Full Names, U.S. Social Security Number (SSN), Credit Card Number). Treat this as a data incident: confirm with the user what was pasted, and check the vendor's retention terms for the accounts involved.

    Purview DLP
12. 12
    505 MB left for ChatGPT through Splunk (demo) in 30 days. Check the proxy or firewall for file uploads and pair this with a DLP rule for AI destinations.

    SIEM
13. 13
    Splunk (demo) confirms what Microsoft 365 signals show for ChatGPT. Use the source list here to find the exact devices and network segments involved.

    SIEM
14. 14
    ChatGPT via Power Platform trains on data unless a business tier or opt-out is used. Verify which tier these users are on.

    Azure & Power Platform
15. 15
    OpenAI (Independent Publisher) sends flow and app data to a third-party AI API. Classify the connector as Blocked or Business in a Power Platform DLP policy so it cannot be combined with SharePoint, Dataverse, or Outlook connectors.

    Azure & Power Platform
16. 16
    Connections exist in the Default environment, where every licensed user is a maker. Move sanctioned AI work to a managed environment and apply a DLP policy to Default.

    Azure & Power Platform
17. 17
    2 seats belong to addresses outside the company in the OpenAI organization. Remove them or move the account to SSO with domain verification so only directory identities can hold a seat.

    Vendor account
18. 18
    2 API keys have not been used in 90 days or never at all. Revoke them; a key that is not used is only a liability.

    Vendor account
19. 19
    5 of 11 members are owners or admins. Keep admin to two or three named people and use workspace roles for everyone else.

    Vendor account
20. 20
    Spend grew 51% to 4,360 USD in 30 days. Set a monthly budget alert on the vendor side and per-workspace limits where the vendor supports them.

    Vendor account
21. 21
    1 key is held by service accounts. Confirm each maps to a production system with an owner, and rotate on a schedule.

    Vendor account
22. 22
    With 11 members, manage seats through SCIM or the directory rather than by hand, and mirror the member list against leavers monthly.

    Vendor account
23. 23
    3 signup emails show people creating ChatGPT accounts with their work address. Those accounts live outside Entra, so leaving the company does not close them. Move users to the enterprise tier with SSO, or add a mail flow rule that flags vendor signups to the security team.

    Email
24. 24
    2 billing emails mean someone is paying for ChatGPT personally and expensing or absorbing it. Consolidate onto a company license where data terms are negotiated.

    Email
25. 25
    50 MB uploaded to ChatGPT in 30 days from 11 people. Check what data is leaving with Defender's file and session policies.

    Network
26. 26
    ChatGPT is corroborated by an Entra consent grant. Review both findings together; the consent finding shows what data the app can read.

    Network
27. 27
    ChatGPT is installed as a desktop app on 2 devices. If it is not approved, block it with App Control for Business or an attack surface reduction rule, and deploy the sanctioned alternative through Intune.

    Endpoint
28. 28
    Device telemetry names the exact machines and accounts reaching chatgpt.com, api.openai.com. Use it to target coaching rather than blanket blocks.

    Endpoint
29. 29
    ChatGPT is assigned through Okta, so it already has an owner. Confirm the assignment group is deliberate and mark the app sanctioned here if it is.

    Identity
30. 30
    ChatGPT holds low-scope OAuth grants from 5 people (sign-in only). Low exposure, but decide whether "Sign in with Google" to AI apps is allowed at all.

    Identity
31. 31
    ChatGPT was connected by users, not assigned by an admin. If it is approved, add it to the Workspace app catalog so access is managed and can be revoked at offboarding.

    Identity
32. 32
    Nobody signed into ChatGPT through Google in 90 days. Unassign or revoke to reduce standing access.

    Identity

Trains on data

Configurable

Enterprise tier

Available

Org policy

None set

Consumer and Plus train by default with opt-out; Team, Enterprise, and API do not.

• Entra consent▲Critical85
• Source code · GitHub (demo)▲Critical81
• Purview DLP◆High70
• SIEM · Splunk (demo)◆High66
• Azure & Power Platform◆High60
• Vendor account · OpenAI (demo)◆High59
• Email◆High58
• Network◆High51
• Endpoint●Medium48
• Identity · Okta (demo)●Medium38
• Identity · Google Workspace (demo)●Medium30

Each lane scores its own evidence. The combined score takes the strongest lane and adds five points per additional lane, capped at 100.