AI Governance and Data Security Show

How do you secure Microsoft 365 Copilot without blockingproductivity? In Episode 6 of the AI Governance & Data Security Show , Nikki Chapple and Ryan John Murphy are joined by Johnny Sheehan, Microsoft MVP and AI security specialist , to explore how Microsoft Purview, Sensitivity Labels and Data Loss Prevention (DLP) can help organisations secure Copilot while enabling safe and productive AI adoption. Do you really need to label every file before you can trustMicrosoft 365 Copilot? The answer is more nuanced. In this episode, we explore how Copilot uses permissions andsensitivity labels, why encryption and extract rights matter, where DLP fits into the picture, and how organisations can take a practical, risk-based approach to AI governance without falling into "analysis paralysis". We also discuss Microsoft Purview's evolving capabilities,including Label Groups, SharePoint labelling, DSPM for AI, Adaptive Scopes and Block Content Analysis Service , and how these controls can help organisations build the trusted data foundation needed for Copilot andagent-based AI. In This Episode ✅ How Microsoft 365 Copilot uses permissions and sensitivity labels ✅ Do you really need to label everything before deploying Copilot? ✅ Why encryption settings and extract rights matter ✅ How Sensitivity Labels and DLP work together ✅ Common mistakes when designing sensitivity label taxonomies ✅ How to avoid "analysis paralysis" when preparing for AI ✅ Label Groups vs Sub Labels explained ✅ SharePoint and auto-labelling strategies ✅ Using DSPM for AI to discover and manage AI-related risks ✅ Practical guidance for securing Copilot and agent-based AI ✅ Why AI governance should accelerate adoption, not slow it down Key Takeaway AI governance isn't about blocking users or labellingeverything. It's about implementing the right combination of visibility,governance and evidence to create trusted data that enables secure AI adoption. Guest: Johnny Sheehan 🎙️ Johnny Sheehan Dual Microsoft MVP | Founder & Principal Consultant, SecureAi AI Security Specialist LinkedIn: https://www.linkedin.com/in/johnny-sheehan-68331819/ SecureAi: https://secureai.ie/ Resources Microsoft Purview: Manage data security and compliancefor Microsoft 365 Copilot and Microsoft 365 Copilot Chat https://learn.microsoft.com/en-us/purview/ai-m365-copilot Microsoft Purview: Data security and complianceprotections for generative AI apps https://learn.microsoft.com/en-us/purview/ai-microsoft-purview About the AI Governance & Data Security Show The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information and reduce risk across Microsoft 365. Hosted by: 🎙️ Nikki Chapple Principal Cloud Architect | Microsoft MVPLinkedIn: https://www.linkedin.com/in/nikkichapple/ 🎙️ Ryan John Murphy Data Security Specialist | MicrosoftLinkedIn: https://www.linkedin.com/in/ryanjmurphym365consultant/ Subscribe for practical discussions about: 🔐 Microsoft Purview🤖 Microsoft 365 Copilot ✅ AI Governance 🛡️Data Security🚨 Insider Risk Management📋Data Loss Prevention🏷️ Information Protection📊 Compliance & Risk Management🤝Agent Governance 👍 If you found this episode useful, like, subscribe and share it with colleagues who are preparing for Microsoft 365 Copilot or agent-based AI. 💬 What approach is your organisation taking to Sensitivity Labels and Copilot? Leave your thoughts or questions in the comments. #MicrosoftPurview #Microsoft365Copilot #AIGovernance#DataSecurity #DLP #SensitivityLabels #DSPM #TrustedData

In this episode of the AI Governance & Data Security Show, hosts Nikki Chapple and Ryan John Murphy are joined by Maxime Bombardier, Principal Product Manager on Microsoft Engineering, to discuss Microsoft Purview Referential Architecture Diagrams and why they matter for real-world data security deployments. Purview is powerful, but many deployments stall because teams understand the individual workloads without seeing how the full system fits together. In this episode, Maxime explains how the referential architecture diagrams were created from field pressure, customer questions, and the need to help teams move from scattered documentation to a shared visual model. Nikki and Ryan bring the practitioner and field perspective, exploring why these diagrams have resonated with customers, partners, MVPs, and security teams. The conversation covers classification, sensitivity labels, endpoint DLP, SharePoint, browser DLP, Insider Risk, and Copilot, with a strong focus on what architects and admins need to understand before deploying at scale. Whether you are responsible for Microsoft Purview, Microsoft 365 Copilot, AI Governance, Data Security, Compliance, Risk Management, or Information Protection, this episode provides practical insights and real-world guidance. In This Episode ✅ Why classification is the foundation for almost everything else in Microsoft Purview ✅ How sensitivity labels act as a control plane, training mechanism, and security layer ✅ Why default labelling and service-side labelling are becoming critical for Copilot readiness ✅ How endpoint DLP testing, policy sync, and JIT are commonly misunderstood ✅ How SharePoint, browser DLP, Insider Risk, and Copilot connect across the data security ecosystem ✅ Why prompt-level protection and label-based Copilot controls behave differently ✅ How referential architecture diagrams help teams train, troubleshoot, and deploy faster ✅ Why visibility, governance, and evidence are essential for trusted data in the AI era Key Takeaway The key message from this episode is that Purview deployment success depends on understanding the system, not just configuring individual features. Classification helps organisations know their data, labels provide a consistent control plane, and DLP, Insider Risk, SharePoint, endpoint, browser, and Copilot controls all build on that foundation. The referential architecture diagrams give teams a practical map for making better design decisions and accelerating secure deployment Guests Maxime Bombardier Principal Product Manager, Microsoft Engineering Resources 🔗 Microsoft Purview ReferentialArchitecture Diagrams | Microsoft Community Hub About the AI Governance & Data Security Show The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information, and reduce risk across Microsoft 365. Hosted by: 🎙️ Nikki Chapple | Principal Cloud Architect, CloudWay | Microsoft MVP 🎙️ Ryan John Murphy | Data Security Specialist, Microsoft Subscribe for discussions on:🔐 Microsoft Purview 🤖 Microsoft 365 Copilot· ✅ AI Governance· 🛡️ Data Security 🚨 Insider Risk Management 📋 Data Loss Prevention(DLP) 🏷️ InformationProtection 📊 Compliance & RiskManagement 👍 If you found this episode useful, please like, subscribe and share it with your colleagues. 💬 Have questions or feedback? Leave a comment below.

In this episode of the AI Governance & Data Security Show, hosts Nikki Chapple and Ryan John Murphy are joined by Anders Olsson , Data Security Specialist at Onevinn, to explore Microsoft Purview Data Security Posture Management (DSPM) and how organisations can gain greater visibility into their data risks. As organisations adopt Microsoft 365 Copilot and other AI technologies, understanding where sensitive data exists, who can access it, how it is being used, and where the greatest risks lie has never been more important. Microsoft Purview DSPM brings together insights from Microsoft 365, AI applications, endpoints, user activity, data classification, and security controls to help organisations identify, prioritise, and reduce risk. In this conversation, we discuss how DSPM supports data security, compliance, and AI governance initiatives by providing visibility into oversharing, risky user activity, sensitive data exposure, Shadow AI usage, and information protection effectiveness. We also explore how DSPM works alongside Endpoint DLP, Activity Explorer, Defender for Cloud Apps, sensitivity labels, collection policies, and Microsoft Purview reporting to deliver actionable insights that support better security and governance decisions. Whether you're responsible for Microsoft Purview, Microsoft 365 Copilot, AI Governance, Data Security, Compliance, Risk Management, or Information Protection, this episode provides practical guidance for improving your organisation's data security posture. In This Episode ✅ What Microsoft Purview Data Security Posture Management (DSPM) is ✅ Why DSPM is about more than AI observability ✅ How to identify sensitive data risks across Microsoft 365 ✅ Reducing oversharing and improving data security posture ✅ Why classification, sensitivity labels, and sensitive information types still matter ✅ Improving data discovery through collection policies ✅ Monitoring Shadow AI and third-party AI applications with Endpoint DLP ✅ Using Activity Explorer to investigate risky data activity ✅ Prioritising remediation based on business risk ✅ Enabling better conversations between security teams and business owners Key Takeaway You cannot protect what you cannot see.Microsoft Purview DSPM helps organisations understand and prioritise data risks by combining signals from sensitive data discovery, user activity, Data Loss Prevention (DLP), Insider Risk Management, AI usage, Endpoint DLP, and security recommendations. The real value comes from using that visibility to identify high-risk data, reduce oversharing, improve classification, engage business stakeholders, and take meaningful action to better protect sensitive information. Guest Anders Olsson - Data Security Specialist, Onevinn 🔗 LinkedIn: https://www.linkedin.com/in/mranders/ Resources 🔗 Learn about Microsoft Purview Data Security Posture Management (DSPM) | Microsoft Learn 🔗 Get started with endpoint data loss prevention | Microsoft Learn About the AI Governance & Data Security Show The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information, and reduce risk across Microsoft 365. Hosted by: 🎙️ Nikki Chapple Principal Cloud Architect | Microsoft MVP 🔗 LinkedIn: Nikki Chapple | LinkedIn 🎙️ Ryan John Murphy Data Security Specialist | Microsoft 🔗 LinkedIn: Ryan John Murphy | LinkedIn Subscribe for discussions on: 🔐 Microsoft Purview 🤖 Microsoft 365 Copilot ✅ AI Governance 🛡️ Data Security 🚨 Insider Risk Management 📋 Data Loss Prevention (DLP) 🏷️ Information Protection 📊 Compliance & Risk Management 👍 If you found this episode useful, please like, subscribe and share it with your colleagues. 💬 Have questions, experiences, or feedback about Microsoft Purview DSPM? Leave a comment below .#MicrosoftPurview #DSPM #DataSecurity #AIGovernance #Microsoft365 #MicrosoftCopilot #InformationProtection #DataProtection #CyberSecurity #Compliance

Microsoft Purview Data Security Investigations (DSI) is changing the way organisations investigate data security incidents. In this episode of the AI Governance & Data Security Show , Nikki Chapple and Ryan John Murphy are joined by Microsoft Product Manager Christophe Fiessinger to explore Microsoft Purview Data Security Investigations (DSI) , a new AI-powered capability designed to help security teams investigate insider risk, data exfiltration, compromised accounts, and sensitive data exposure across Microsoft 365. Christophe explains how DSI complements existing Microsoft Purview capabilities including Insider Risk Management, Data Loss Prevention (DLP), Microsoft Defender, Unified Audit Log, and eDiscovery . The discussion covers both reactive investigations and proactive risk hunting, helping organisations identify and mitigate data security risks before they become incidents. In this episode, we discuss: • What Microsoft Purview Data Security Investigations (DSI) is • How AI-powered investigations differ from traditional content searches • Insider risk and data exfiltration scenarios • Investigating Microsoft 365 data at scale • Unified Audit Log integration • DSI versus eDiscovery • Credential and sensitive data detection • AI-powered semantic analysis and multilingual investigations • Data remediation and purge capabilities • The future roadmap for Data Security Investigations Key Takeaway Traditional investigations often require analysts to manually review large volumes of emails, chats, documents, and files. Data Security Investigations uses AI, embeddings, and large language models to help organisations rapidly identify risk, understand the impact of incidents, and take action across Exchange Online, SharePoint, OneDrive, Teams, and Copilot data. Guest Christophe Fiessinger Product Manager, Microsoft Purview Follow Christophe on LinkedIn: Christophe Fiessinger About the Show The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information, and reduce risk across Microsoft 365. Hosted by: Nikki Chapple Principal Cloud Architect at CloudWay & Microsoft MVP Ryan John Murphy Data Security Specialist at Microsoft Topics include: Microsoft Purview AI Governance Data Security Microsoft 365 Copilot Insider Risk Management Data Loss Prevention (DLP) Information Protection Compliance and Risk Management

In this episode of the AI Governance & Data Security Show , Nikki Chapple and Ryan John Murphy sit down with Microsoft Purview leaders Maithili Dandige and Talhah Mir to go behind the scenes of Microsoft Purview Data Security Posture Management (DSPM) . The conversation explores how DSPM combines data classification, data loss prevention, insider risk management, and AI-driven insights to help organisations understand and secure their data estate. You'll learn why data classification is becoming the foundation for AI readiness, how Microsoft is using AI to improve classification accuracy, and what upcoming innovations in posture management, triage agents, contextual classification, and personalised security experiences could mean for security and compliance teams. Key topics include: • Microsoft Purview DSPM• AI-powered data classification• Oversharing and exposure risks• Dark data discovery• Trainable classifiers and synthetic data• DLP and Insider Risk Management• Microsoft 365 Copilot readiness• AI governance and responsible AI If you're working with Microsoft Purview, data security, compliance, governance, or AI adoption, this episode offers practical insights into the future of securing data in the AI era. Trusted AI starts with trusted data. Subscribe for more episodes covering Microsoft Purview, AI governance, Microsoft 365 security, compliance, and responsible AI adoption. Links: https://learn.microsoft.com/en-us/purview/data-security-posture-management-learn-about Maithili Dandige | LinkedIn Talhah Mir | LinkedIn #AIGovernance #MicrosoftPurview #DSPM #DataSecurity #Microsoft365Copilot #InformationProtection #Compliance #CyberSecurity

In today’s digital landscape, the rise of Shadow AI poses new challenges for companies. Many are excited about the productivity gains AI tools can offer, but with that comes the responsibility of ensuring data is secure.The key? You need a solid data governance strategy that includes everything from classification to labeling and monitoring data movement. Microsoft Purview has built-in solutions that help manage these risks and provide a holistic view of your data security posture.It’s essential to understand how to protect your sensitive data, especially as AI technology evolves. 🛡️ What’s your experience with data security in the age of AI? Let’s discuss!#DataSecurity #MicrosoftPurview #AI #CyberSecurity #DataGovernance

Practical insights on securing AI, governing data, and managing Gen AI risk in Microsoft 365 and beyond. If you are working with Copilot, Microsoft Purview, or navigating AI adoption in your organisation, this show is for you. Subscribe for real-world guidance on: AI governance Data security Microsoft 365 compliance GenAI risk management #AIGovernance #DataSecurity #Microsoft365 #GenAI #CyberSecurity

Title: Purview Data Retention with Susan Lamb | All Things M365 Compliance Description: What happens when data governance meets real-world complexity? In this episode of All Things M365 Compliance, @Nikki and I sit down with Susan Lamb to unpack the considerations and configurations of Microsoft Purview Data Retention. From unstructured data chaos to building a business case for compliance, Susan shares her leadership insights on how organisations can unlock Purview’s full potential, especially when the tech is in place but underutilised. Expect candid reflections, practical use cases, and a deep dive into how retention policies can support blended experiences, data quality, and governance at scale. Topics Covered: Why Purview matters for unstructured data Building a business case for retention Governance challenges in hybrid environments Aligning tech capabilities with real-world needs Lessons from the field: what works, what doesn’t Whether you're a compliance pro, data strategist, or just curious about what Purview can really do, this episode delivers clarity, direction, and a few shared truths. Tune in and reset your understanding of data retention—because good governance starts with knowing what to keep. #MicrosoftPurview #DataRetention #M365Compliance #AllThingsM365Compliance #RyanJohnMurphy #NikkiChapple #InformationGovernance #CompliancePodcast #Microsoft365 #DataGovernance #RetentionPolicies #UnstructuredData #HybridWork #TechLeadership #PodcastUK

🎙️ All Things M365 Compliance Podcast 🎙️ Episode Title: Unlocking the Full Potential of Purview for Teams Private Channels in Microsoft Teams. In this episode, Nikki and Ryan explore the latest enhancements to private channels in Microsoft Teams, as detailed in https://techcommunity.microsoft.com/t5/microsoft-teams-blog/new-enhancements-in-private-channels-in-microsoft-teams-unlock/ba-p/4438767, and what they mean for Microsoft Purview customers. 🔍 Key Highlights: Private channels now support up to 1,000 channels per team and 5,000 members per channel Meeting scheduling is now available within private channels Group-based mailbox storage simplifies compliance and governance These updates enable more consistent policy enforcement for retention, legal hold, DLP, and eDiscovery 💡 Whether you're a compliance lead, IT admin, eDiscovery Investigator, or solution engineer, this episode breaks down how these changes impact data governance, risk management, and Microsoft Purview strategy for Teams Private Channels. 📌 Don’t forget to like, subscribe, and share with your network to stay ahead of the curve in M365 Purview.#MicrosoftTeams #Purview #Compliance #PrivateChannels #M365 #DataGovernance #AllThingsM365Compliance #MicrosofteDiscovery #DataDiscovery #DataSecurity #RyanJohnMurphy #NikkiChapple

Title:Common Mistakes in Data Loss Prevention – What You Might Be Getting Wrong! Guest: Ewelina PaczkowskaDescription:Are your Data Loss Prevention (DLP) policies truly protecting your organisation’s sensitive data? In this episode, I dive into the most frequent mistakes professionals make when implementing DLP strategies—based on insights from Ewelina Paczkowska's must-read blog post on Welka’s World. We’ll explore:✅ Why planning ahead is critical for DLP success✅ The dangers of poor data classification✅ How alert fatigue can cripple your security team✅ Tips to make your DLP policies both secure and user-friendlyWhether you're a security engineer, IT manager, or just curious about Microsoft Purview’s DLP capabilities, this episode is packed with real-world advice and practical takeaways.🔗 Read the original blog: https://www.welkasworld.com/post/common-mistakes-you-may-be-making-with-data-loss-prevention📌 Subscribe for more episodes on cybersecurity, compliance, and tech strategy.#DataLossPrevention #MicrosoftPurview #CyberSecurity #DLP #EwelinaPaczkowska #TechPodcast #SecurityTips #AlertFatigue #ITStrategy #M365 #Purview

Title: Shadow AI, Culture Change, and Compliance: Securing the Future with Rafah Knight Description: Shadow AI is already here! Are you ready for it? In this episode of All Things M365 Compliance, Nikki Chapple and Ryan John Murphy are joined by Rafah Knight, founder of Secure AI, to explore how organisations can securely adopt AI while maintaining compliance with key regulations like the EU AI Act and NIST AI RMF. We uncover the real risks behind shadow AI, why Copilot doesn’t create vulnerabilities, it reveals them! Plus, why successful AI adoption is less about technology and more about driving a cultural change within your organisation. Key takeaways: Why shadow AI is your biggest unseen risk How Microsoft 365 Copilot fits into a secure AI strategy The critical role of data governance and compliance tools like Microsoft Purview Why regulatory compliance should enable, not stifle, AI innovation How to build AI adoption personas and invest in organisational change Aligning AI use with frameworks like NIST, OECD, and the EU AI Act If you’re serious about securing your Microsoft 365 environment and preparing for the AI-driven future, this is an episode you can’t afford to miss. Call to Action: Subscribe for more expert insights on Microsoft 365 security, governance, and compliance! Keywords : Shadow AI, Microsoft 365 Copilot, AI Compliance, Microsoft Purview, EU AI Act, NIST AI RMF, Data Security, Risk Management, AI Governance, Cultural Change in AI Adoption

🚀 New Episode Alert! 🚀 Description: Hello everyone! In this episode, we take an in-depth look at the updates for the Microsoft SC-401 Certified Information Protection and Compliance Administrator Associate exam. Whether you're preparing for the exam or just curious about the changes, this episode is packed with valuable insights. Key Points: What's New: Discover the latest additions to the SC-401 exam, including new topics and areas of focus. What's Removed: Learn about the topics that have been removed from the exam, so you can streamline your study efforts. What's Changed: Understand the modifications and updates to existing topics, ensuring you're up-to-date with the latest information.S tudy Guide: Stay tuned for our upcoming SC-401 video study guide, designed to help you ace the exam with confidence. Call to Action: Don't miss out on this essential update! Watch the episode now and get ahead in your certification journey. Also, check out our blog for more details and next steps: https://nikkichapple.com/sc-400-certification-retirement-next-steps/.#Microsoft #SC401 #Compliance #Certification #M365 #AllThingsM365Compliance #ExamPrep #StudyGuide #YouTube #TechUpdates #CyberSecurity #InformationProtection #MicrosoftPurview #MicrosoftCompliance #400Exam 401Exam #401Certification #M365Compliance #M365Purview

Title: Microsoft Information Protection - In the Centre of It All! Description: Welcome to the latest episode of Microsoft Information Protection, In the Centre of It All! In this episode: we dive deep into how Microsoft Information Protection (MIP) is the main focus of a comprehensive security strategy. We explore the various components that make up MIP and how they work together to ensure a full and detailed design and deployment that meets a defence-in-depth approach. What You'll Learn: Core Concepts: Understand the fundamental principles of Microsoft Information Protection. Moving Parts: Discover the key elements that make up MIP and how they integrate to provide robust security. Design & Deployment: Learn about best practices for designing and deploying MIP to achieve maximum protection. Defence-in-Depth: Explore how MIP contributes to a layered security strategy, ensuring comprehensive protection. Don't forget to like, comment, and subscribe to stay updated with our latest episodes. Hit the notification bell so you never miss an update! Read Victor's Blog here: https://victorwingsing.com/in-the-center-of-it-all/ Thank you for tuning in, and we hope you enjoy the show! #MicrosoftInformationProtection #MIP #DataSecurity #InfoSec #CyberSecurity #DataProtection #Compliance #MicrosoftPurview #M365 #Sentinel #KQL #eDiscovery #TechPodcast #SecuritySolutions #DefenceInDepth

Title: Mastering Purview Exact Data Match with Ewelina Paczkowska - All Things M365 Compliance Description: Welcome to "All Things M365 Compliance"! In this episode, we explore the intricacies of Microsoft Purview's Exact Data Match (EDM) with our special guest, Ewelina Paczkowska. Discover how EDM enhances data security and compliance by providing precise data matching capabilities. Call to Action: Like, comment, and subscribe for more updates on M365 compliance and security. Follow us on social media for the latest news and insights. Tags: #MicrosoftPurview #ExactDataMatch #M365Compliance #DataSecurity #EDM #Compliance #DataProtection #SensitiveInformation #SITS #DataClassification #AllThingsM365Compliance

Your One-Stop-Shop for All Things Purview at Ignite. Ryan and Nikki take a look at the newly announced Purview, roles, features and solutions! Announcement Blogs:- aka.ms/DSPMblog aka.ms/DLPblog aka.ms/SecurityforAIIgnitenews aka.ms/CC/Ignite aka.ms/DLM/Ignite aka.ms/MIPblog aka.ms/CopilotinPurviewIgniteNews aka.ms/IRMIgniteNews

We talk to Sebastian Zamorano regarding the rich reports you can pull from Purview. There is a number of amazing reports that you can pull through from labelling, to admin access. This is a must for anyone wanting additional reporting from Purview. There's even a set up guide in the GitHub Link below. In addition here are the links to the content and his LinkedIn profile: https://www.linkedin.com/in/profesorkaz/ Here's all the good stuff: https://github.com/ProfKaz/PowerShell-Functions/blob/main/README.md

We talk Microsoft Prod Group Engineer, Max Bombardier on Microsoft's new direction on default approach to oversharing. In addition here are the links to the content and his LinkedIn profile Notes from engineering - Purview deployment models | https://learn.microsoft.com/en-us/purview/deploymentmodels/depmod-overview Secure by default with Microsoft Purview and protect against oversharing | https://learn.microsoft.com/en-us/purview/deploymentmodels/depmod-securebydefault-intro Maxime Bombardier | LinkedIn = https://www.linkedin.com/in/maximebombardier/

We talk to Bram about data protection and of course, Copilot. We all share our insights to date on how to manage data in M365, especially when wanting to adopt Copilot. Plus, we share some tips and tricks on SITs and Labelling.

We talk to Tatu about his considerations and thoughts of AI Hub!

We talk to Anders about Labelleing and the importance of encryption.