Risk · 09
Security Copilot is a different room
Security Copilot is Microsoft's product for security and IT investigations across Defender, Sentinel, Entra and Purview. Microsoft's 25 September 2026 announcement of Home, Code and Autopilot did not fold that product into the worker's Home screen. Mixing the two is how a new programme scares the security team, or worse, asks the wrong people to run an investigation in a chat pane.
Who it is for
Microsoft Learn's licence table places Security Copilot with E5 and E7, not with E3. The described jobs are secure agent workflows, posture, investigation, policy and stakeholder reports. Those are security operations jobs. A finance coordinator testing Cowork is not the audience, and should not be given the impression that Home now answers incident questions.
What still belongs to the worker's Copilot
The worker's risk is different: files they can open, drafts that look finished, agents that act with their permissions. Those are the Home, Cowork and Autopilot questions. Security Copilot does not answer them for you, and the worker's Copilot does not replace a hunt in Defender.
Do not invent a joint operating picture
Nothing in the September notes says a company new to AI must deploy both at once. FrontierOrg, a fictional method, keeps finance, security and independent risk review distinct so that challenge survives. That separation is a design choice in a story.
Monday
In the next internal note about Copilot, add one line that says Security Copilot is a different product and is not part of Home. If the line is false in your tenant, correct the note, not the product.
Which team is allowed to ask Security Copilot a question, and which team is explicitly not?
Sources: Microsoft Learn, E3, E5 and E7 licence features (opens in a new tab). Microsoft, Security Copilot (opens in a new tab). Microsoft blog, 25 September 2026, Introducing the new Copilot (opens in a new tab).
Where this note mentions FrontierOrg, that is a fictional method for rehearsing a decision. It is not a company, not a client, and not a case study.