Migrating to Microsoft Purview sensitivity label groups: what I learned
Sensitivity label groups are replacing parent and child labels in Microsoft Purview. This post covers what changes, how the migration works, what Microsoft documents, what I have seen in testing and production, and why I would be careful before migrating widely adopted labels in a live environment.
10 minutes ago7 min read
AI governance overview: stop panicking and fix the basics
A practical AI governance overview for organisations that are either rushing into AI or panicking over every new feature. This post explains why strong fundamentals, identity, device security, permissions and data protection matter more than chasing every shiny AI setting.
May 56 min read
Blocking Bring Your Own Copilot (BYOC) on work documents
Blocking bring your own Copilot on work documents is something more organisations should be looking at. Microsoft allows multiple account access by default unless you explicitly block it, which means employees may be able to use personal Copilot entitlements on work files in supported Microsoft 365 apps. This post explains what BYOC is, why it matters, what Microsoft allows by default, what the risks look like, and how to block it if it does not fit your governance model.
Apr 287 min read
Microsoft Purview Endpoint DLP Always-On Diagnostics
Learn how to enable Microsoft Purview Endpoint DLP Always-On Diagnostics and simplify troubleshooting by collecting logs directly from Windows devices without user involvement. This guide covers setup, permissions, prerequisites, and how to request diagnostic logs to speed up investigations and resolve issues faster.
Apr 214 min read
