How do you secure Microsoft 365 Copilot without blockingproductivity?

In Episode 6 of the AI Governance & Data Security Show, Nikki Chapple and Ryan John Murphy are joined by Johnny Sheehan, Microsoft MVP and AI security specialist, to explore how Microsoft Purview, Sensitivity Labels and Data Loss Prevention (DLP) can help organisations secure Copilot while enabling safe and productive AI adoption.

Do you really need to label every file before you can trustMicrosoft 365 Copilot?

The answer is more nuanced.

In this episode, we explore how Copilot uses permissions andsensitivity labels, why encryption and extract rights matter, where DLP fits into the picture, and how organisations can take a practical, risk-based approach to AI governance without falling into "analysis paralysis".

We also discuss Microsoft Purview's evolving capabilities,including Label Groups, SharePoint labelling, DSPM for AI, Adaptive Scopes and Block Content Analysis Service, and how these controls can help organisations build the trusted data foundation needed for Copilot andagent-based AI.

In This Episode

✅ How Microsoft 365 Copilot uses permissions and sensitivity labels

✅ Do you really need to label everything before deploying Copilot?

✅ Why encryption settings and extract rights matter

✅ How Sensitivity Labels and DLP work together

✅ Common mistakes when designing sensitivity label taxonomies

✅ How to avoid "analysis paralysis" when preparing for AI

✅ Label Groups vs Sub Labels explained

✅ SharePoint and auto-labelling strategies

✅ Using DSPM for AI to discover and manage AI-related risks

✅ Practical guidance for securing Copilot and agent-based AI

✅ Why AI governance should accelerate adoption, not slow it down

Key Takeaway

AI governance isn't about blocking users or labellingeverything.

It's about implementing the right combination of visibility,governance and evidence to create trusted data that enables secure AI adoption.

Guest: Johnny Sheehan

🎙️ Johnny Sheehan
Dual Microsoft MVP | Founder & Principal Consultant, SecureAi
AI Security Specialist

LinkedIn: https://www.linkedin.com/in/johnny-sheehan-68331819/

SecureAi: https://secureai.ie/

Resources

Microsoft Purview: Manage data security and compliancefor Microsoft 365 Copilot and Microsoft 365 Copilot Chathttps://learn.microsoft.com/en-us/purview/ai-m365-copilot

Microsoft Purview: Data security and complianceprotections for generative AI appshttps://learn.microsoft.com/en-us/purview/ai-microsoft-purview

About the AI Governance & Data Security Show

The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information and reduce risk across Microsoft 365.

Hosted by:

🎙️ Nikki ChapplePrincipal Cloud Architect | Microsoft MVPLinkedIn: https://www.linkedin.com/in/nikkichapple/

🎙️ Ryan John MurphyData Security Specialist | MicrosoftLinkedIn: https://www.linkedin.com/in/ryanjmurphym365consultant/

Subscribe for practical discussions about:

🔐 Microsoft Purview🤖 Microsoft 365 Copilot
✅ AI Governance
🛡️Data Security🚨 Insider Risk Management📋Data Loss Prevention🏷️ Information Protection📊 Compliance & Risk Management🤝Agent Governance

👍 If you found this episode useful, like, subscribe and share it with colleagues who are preparing for Microsoft 365 Copilot or agent-based AI.

💬 What approach is your organisation taking to Sensitivity Labels and Copilot? Leave your thoughts or questions in the comments.

#MicrosoftPurview #Microsoft365Copilot #AIGovernance#DataSecurity #DLP #SensitivityLabels #DSPM #TrustedData

In this episode of the AI Governance & Data Security Show, hosts Nikki Chapple and Ryan John Murphy are joined by Maxime Bombardier, Principal Product Manager on Microsoft Engineering, to discuss Microsoft Purview Referential Architecture Diagrams and why they matter for real-world data security deployments.

Purview is powerful, but many deployments stall because teams understand the individual workloads without seeing how the full system fits together. In this episode, Maxime explains how the referential architecture diagrams were created from field pressure, customer questions, and the need to help teams move from scattered documentation to a shared visual model.

Nikki and Ryan bring the practitioner and field perspective, exploring why these diagrams have resonated with customers, partners, MVPs, and security teams. The conversation covers classification, sensitivity labels, endpoint DLP, SharePoint, browser DLP, Insider Risk, and Copilot, with a strong focus on what architects and admins need to understand before deploying at scale.

Whether you are responsible for Microsoft Purview, Microsoft 365 Copilot, AI Governance, Data Security, Compliance, Risk Management, or Information Protection, this episode provides practical insights and real-world guidance.

In This Episode

✅ Why classification is the foundation for almost everything else in Microsoft Purview

✅ How sensitivity labels act as a control plane, training mechanism, and security layer

✅ Why default labelling and service-side labelling are becoming critical for Copilot readiness

✅ How endpoint DLP testing, policy sync, and JIT are commonly misunderstood

✅ How SharePoint, browser DLP, Insider Risk, and Copilot connect across the data security ecosystem

✅ Why prompt-level protection and label-based Copilot controls behave differently

✅ How referential architecture diagrams help teams train, troubleshoot, and deploy faster

✅ Why visibility, governance, and evidence are essential for trusted data in the AI era

Key Takeaway

The key message from this episode is that Purview deployment success depends on understanding the system, not just configuring individual features. Classification helps organisations know their data, labels provide a consistent control plane, and DLP, Insider Risk, SharePoint, endpoint, browser, and Copilot controls all build on that foundation. The referential architecture diagrams give teams a practical map for making better design decisions and accelerating secure deployment

Guests

Maxime Bombardier Principal Product Manager, Microsoft Engineering

Resources

🔗 Microsoft Purview ReferentialArchitecture Diagrams | Microsoft Community Hub

About the AI Governance & Data Security Show

The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information, and reduce risk across Microsoft 365.

Hosted by:

🎙️ Nikki Chapple | Principal Cloud Architect, CloudWay | Microsoft MVP

🎙️ Ryan John Murphy | Data Security Specialist, Microsoft

Subscribe for discussions on:🔐 Microsoft Purview

🤖 Microsoft 365 Copilot·       

✅ AI Governance·       

🛡️ Data Security

🚨 Insider Risk Management

📋 Data Loss Prevention(DLP)

🏷️ InformationProtection  

📊 Compliance & RiskManagement

👍 If you found this episode useful, please like, subscribe and share it with your colleagues.

💬 Have questions or feedback? Leave a comment below.

In this episode of the AI Governance & Data Security Show, hosts Nikki Chapple and Ryan John Murphy are joined by Anders Olsson, Data Security Specialist at Onevinn, to explore Microsoft Purview Data Security Posture Management (DSPM) and how organisations can gain greater visibility into their data risks.

As organisations adopt Microsoft 365 Copilot and other AI technologies, understanding where sensitive data exists, who can access it, how it is being used, and where the greatest risks lie has never been more important.

Microsoft Purview DSPM brings together insights from Microsoft 365, AI applications, endpoints, user activity, data classification, and security controls to help organisations identify, prioritise, and reduce risk.

In this conversation, we discuss how DSPM supports data security, compliance, and AI governance initiatives by providing visibility into oversharing, risky user activity, sensitive data exposure, Shadow AI usage, and information protection effectiveness.

We also explore how DSPM works alongside Endpoint DLP, Activity Explorer, Defender for Cloud Apps, sensitivity labels, collection policies, and Microsoft Purview reporting to deliver actionable insights that support better security and governance decisions.

Whether you're responsible for Microsoft Purview, Microsoft 365 Copilot, AI Governance, Data Security, Compliance, Risk Management, or Information Protection, this episode provides practical guidance for improving your organisation's data security posture.

In This Episode

✅ What Microsoft Purview Data Security Posture Management (DSPM) is

✅ Why DSPM is about more than AI observability

✅ How to identify sensitive data risks across Microsoft 365

✅ Reducing oversharing and improving data security posture

✅ Why classification, sensitivity labels, and sensitive information types still matter

✅ Improving data discovery through collection policies

✅ Monitoring Shadow AI and third-party AI applications with Endpoint DLP

✅ Using Activity Explorer to investigate risky data activity

✅ Prioritising remediation based on business risk

✅ Enabling better conversations between security teams and business owners

Key TakeawayYou cannot protect what you cannot see.Microsoft Purview DSPM helps organisations understand and prioritise data risks by combining signals from sensitive data discovery, user activity, Data Loss Prevention (DLP), Insider Risk Management, AI usage, Endpoint DLP, and security recommendations. The real value comes from using that visibility to identify high-risk data, reduce oversharing, improve classification, engage business stakeholders, and take meaningful action to better protect sensitive information.

Guest

Anders Olsson - Data Security Specialist, Onevinn

🔗 LinkedIn: https://www.linkedin.com/in/mranders/

Resources

🔗 Learn about Microsoft Purview Data Security Posture Management (DSPM) | Microsoft Learn

🔗 Get started with endpoint data loss prevention | Microsoft Learn

About the AI Governance & Data Security Show

The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information, and reduce risk across Microsoft 365.

Hosted by:

🎙️ Nikki Chapple Principal Cloud Architect | Microsoft MVP 🔗 LinkedIn: Nikki Chapple | LinkedIn

🎙️ Ryan John Murphy Data Security Specialist | Microsoft

🔗 LinkedIn: Ryan John Murphy | LinkedIn

Subscribe for discussions on:

🔐 Microsoft Purview

🤖 Microsoft 365 Copilot

✅ AI Governance

🛡️ Data Security

🚨 Insider Risk Management

📋 Data Loss Prevention (DLP)

🏷️ Information Protection

📊 Compliance & Risk Management

👍 If you found this episode useful, please like, subscribe and share it with your colleagues.

💬 Have questions, experiences, or feedback about Microsoft Purview DSPM? Leave a comment below

.#MicrosoftPurview #DSPM #DataSecurity #AIGovernance #Microsoft365 #MicrosoftCopilot #InformationProtection #DataProtection #CyberSecurity #Compliance

Microsoft Purview Data Security Investigations (DSI) is changing the way organisations investigate data security incidents.

In this episode of the AI Governance & Data Security Show, Nikki Chapple and Ryan John Murphy are joined by Microsoft Product Manager Christophe Fiessinger to explore Microsoft Purview Data Security Investigations (DSI), a new AI-powered capability designed to help security teams investigate insider risk, data exfiltration, compromised accounts, and sensitive data exposure across Microsoft 365.

Christophe explains how DSI complements existing Microsoft Purview capabilities including Insider Risk Management, Data Loss Prevention (DLP), Microsoft Defender, Unified Audit Log, and eDiscovery. The discussion covers both reactive investigations and proactive risk hunting, helping organisations identify and mitigate data security risks before they become incidents.

In this episode, we discuss:

• What Microsoft Purview Data Security Investigations (DSI) is
• How AI-powered investigations differ from traditional content searches
• Insider risk and data exfiltration scenarios
• Investigating Microsoft 365 data at scale
• Unified Audit Log integration
• DSI versus eDiscovery
• Credential and sensitive data detection
• AI-powered semantic analysis and multilingual investigations
• Data remediation and purge capabilities
• The future roadmap for Data Security Investigations

Key Takeaway

Traditional investigations often require analysts to manually review large volumes of emails, chats, documents, and files. Data Security Investigations uses AI, embeddings, and large language models to help organisations rapidly identify risk, understand the impact of incidents, and take action across Exchange Online, SharePoint, OneDrive, Teams, and Copilot data.

Guest

Christophe Fiessinger
Product Manager, Microsoft Purview

Follow Christophe on LinkedIn:
Christophe Fiessinger

About the Show

The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information, and reduce risk across Microsoft 365.

Hosted by:

• Nikki Chapple Principal Cloud Architect at CloudWay & Microsoft MVP
• Ryan John Murphy Data Security Specialist at Microsoft

Topics include:

• Microsoft Purview
• AI Governance
• Data Security
• Microsoft 365 Copilot
• Insider Risk Management
• Data Loss Prevention (DLP)
• Information Protection
• Compliance and Risk Management

In this episode of the AI Governance & Data Security Show, Nikki Chapple and Ryan John Murphy sit down with Microsoft Purview leaders Maithili Dandige and Talhah Mir to go behind the scenes of Microsoft Purview Data Security Posture Management (DSPM).

The conversation explores how DSPM combines data classification, data loss prevention, insider risk management, and AI-driven insights to help organisations understand and secure their data estate.

You'll learn why data classification is becoming the foundation for AI readiness, how Microsoft is using AI to improve classification accuracy, and what upcoming innovations in posture management, triage agents, contextual classification, and personalised security experiences could mean for security and compliance teams.

Key topics include:

• Microsoft Purview DSPM• AI-powered data classification• Oversharing and exposure risks• Dark data discovery• Trainable classifiers and synthetic data• DLP and Insider Risk Management• Microsoft 365 Copilot readiness• AI governance and responsible AI

If you're working with Microsoft Purview, data security, compliance, governance, or AI adoption, this episode offers practical insights into the future of securing data in the AI era.

Trusted AI starts with trusted data.

Subscribe for more episodes covering Microsoft Purview, AI governance, Microsoft 365 security, compliance, and responsible AI adoption.

Links:

https://learn.microsoft.com/en-us/purview/data-security-posture-management-learn-aboutMaithili Dandige | LinkedInTalhah Mir | LinkedIn

#AIGovernance #MicrosoftPurview #DSPM #DataSecurity #Microsoft365Copilot #InformationProtection #Compliance #CyberSecurity

In today’s digital landscape, the rise of Shadow AI poses new challenges for companies. Many are excited about the productivity gains AI tools can offer, but with that comes the responsibility of ensuring data is secure.The key? You need a solid data governance strategy that includes everything from classification to labeling and monitoring data movement. Microsoft Purview has built-in solutions that help manage these risks and provide a holistic view of your data security posture.It’s essential to understand how to protect your sensitive data, especially as AI technology evolves. 🛡️ What’s your experience with data security in the age of AI? Let’s discuss!#DataSecurity #MicrosoftPurview #AI #CyberSecurity #DataGovernance

Practical insights on securing AI, governing data, and managing Gen AI risk in Microsoft 365 and beyond.

If you are working with Copilot, Microsoft Purview, or navigating AI adoption in your organisation, this show is for you.

Subscribe for real-world guidance on:

• AI governance
• Data security
• Microsoft 365 compliance
• GenAI risk management

#AIGovernance #DataSecurity #Microsoft365 #GenAI #CyberSecurity

Title: Purview Data Retention with Susan Lamb | All Things M365 Compliance

Description:

What happens when data governance meets real-world complexity? In this episode of All Things M365 Compliance, @Nikki and I sit down with Susan Lamb to unpack the considerations and configurations of Microsoft Purview Data Retention.

From unstructured data chaos to building a business case for compliance, Susan shares her leadership insights on how organisations can unlock Purview’s full potential, especially when the tech is in place but underutilised. Expect candid reflections, practical use cases, and a deep dive into how retention policies can support blended experiences, data quality, and governance at scale.

Topics Covered:

Why Purview matters for unstructured data

Building a business case for retention

Governance challenges in hybrid environments

Aligning tech capabilities with real-world needs

Lessons from the field: what works, what doesn’t

Whether you're a compliance pro, data strategist, or just curious about what Purview can really do, this episode delivers clarity, direction, and a few shared truths.

Tune in and reset your understanding of data retention—because good governance starts with knowing what to keep.

#MicrosoftPurview #DataRetention #M365Compliance #AllThingsM365Compliance #RyanJohnMurphy #NikkiChapple #InformationGovernance #CompliancePodcast #Microsoft365 #DataGovernance #RetentionPolicies #UnstructuredData #HybridWork #TechLeadership #PodcastUK

🎙️ All Things M365 Compliance Podcast 🎙️

Episode Title: Unlocking the Full Potential of Purview for Teams Private Channels in Microsoft Teams.

In this episode, Nikki and Ryan explore the latest enhancements to private channels in Microsoft Teams, as detailed in https://techcommunity.microsoft.com/t5/microsoft-teams-blog/new-enhancements-in-private-channels-in-microsoft-teams-unlock/ba-p/4438767, and what they mean for Microsoft Purview customers.

🔍 Key Highlights:

Private channels now support up to 1,000 channels per team and 5,000 members per channel

Meeting scheduling is now available within private channels

Group-based mailbox storage simplifies compliance and governance

These updates enable more consistent policy enforcement for retention, legal hold, DLP, and eDiscovery

💡 Whether you're a compliance lead, IT admin, eDiscovery Investigator, or solution engineer, this episode breaks down how these changes impact data governance, risk management, and Microsoft Purview strategy for Teams Private Channels.

📌 Don’t forget to like, subscribe, and share with your network to stay ahead of the curve in M365

Purview.#MicrosoftTeams #Purview #Compliance #PrivateChannels #M365 #DataGovernance #AllThingsM365Compliance #MicrosofteDiscovery #DataDiscovery #DataSecurity #RyanJohnMurphy #NikkiChapple

Title:Common Mistakes in Data Loss Prevention – What You Might Be Getting Wrong! Guest: Ewelina PaczkowskaDescription:Are your Data Loss Prevention (DLP) policies truly protecting your organisation’s sensitive data? In this episode, I dive into the most frequent mistakes professionals make when implementing DLP strategies—based on insights from Ewelina Paczkowska's must-read blog post on Welka’s World. We’ll explore:✅ Why planning ahead is critical for DLP success✅ The dangers of poor data classification✅ How alert fatigue can cripple your security team✅ Tips to make your DLP policies both secure and user-friendlyWhether you're a security engineer, IT manager, or just curious about Microsoft Purview’s DLP capabilities, this episode is packed with real-world advice and practical takeaways.🔗 Read the original blog: https://www.welkasworld.com/post/common-mistakes-you-may-be-making-with-data-loss-prevention📌 Subscribe for more episodes on cybersecurity, compliance, and tech strategy.#DataLossPrevention #MicrosoftPurview #CyberSecurity #DLP #EwelinaPaczkowska #TechPodcast #SecurityTips #AlertFatigue #ITStrategy #M365 #Purview