DOE · DOE-441 · record R3319

Microsoft Copilot for Security

Department of Energy · PNNL - Pacific Northwest National Laboratory (SC43 OIM)

Find similar use cases DOE profile

Overview

Development stage: DeployedSource: c) Deployed – The use case is being actively authorized or utilized to support the functions or mission of an agency.
High-impact designation: Not high-impactSource: c) Not high-impact
Impact justification: Does not meet any requiremnts for high Impact use case
Start date: 2024-10-01 (day precision)Source: 2024-10-01T00:00:00
Withheld from public reporting: NoSource: a) No

Mission

Topic area: Cybersecurity
Operational functions: Software development assistance, Cyber threat detection Derived by keyword rules; see methodology

Problem the AI is intended to solve

Strengthen cybersecurity with AI-driven threat detection, response, and vulnerability management.

Expected benefits

Proactively identify, mitigate, and respond to threats. Copilot assists in real-time monitoring, threat detection, incident response automation, and vulnerability management.

System outputs

The intended outputs of using Microsoft Copilot for Security at PNNL include real-time threat detection, automated incident response, enhanced data protection, compliance reports, security insights, reduced cyber risk, and sustained operational continuity

Technology

AI classification: Generative AISource: Generative AI: AI that generates new or synthetic content (e.g., images, videos, audio, text, code).
System name(s): R&D User
Custom-developed code: No
Public source code: Not reported

Sourcing

How it was built: Contract and in-houseSource: c) Developed with both contracting and in-house resources
Vendor (as reported): Microsoft
Vendors (standardized): Microsoft

A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.

Data and privacy

Involves PII: No
Privacy Impact Assessment: Not reported
Authorization to Operate: Yes
Demographic features: k) None of the above
Training and evaluation data: No
Federal Data Catalog: No

Governance

0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.

Pre-deployment testingNo answer reported

AI impact assessmentNo answer reported

Independent reviewNo answer reported

Ongoing monitoringNo answer reported

Operator trainingNo answer reported

Fail-safeNo answer reported

Appeal processNo answer reported

User and public consultationNo answer reported

Potential impacts and how they were identified

Not reported