Securing Your Organisation for Microsoft 365 Copilot: Governance, Purview and DLP

Nikki Chapple, Principal Cloud Architect at CloudWay, and Microsoft MVP, and Al Eardley, Architect in the Innovation Hub at Microsoft, discuss how to secure and govern your data ahead of deploying Microsoft 365 Copilot.

• Microsoft's three-pillar deployment guide for securing Copilot: remediating oversharing, setting up guardrails and meeting regulations

• How Copilot accesses your data: it can only see what you have permission to see, making SharePoint site governance and sharing links critical

• Why metadata and information architecture outperform folder structures for Copilot search accuracy

• Using Microsoft 365 Archive to move inactive SharePoint sites out of the Copilot search index, with 75% storage cost savings

• Restricted content discovery and restricted access control in SharePoint Advanced Management to limit Copilot's reach on sensitive sites

• Managing AI risk beyond Copilot: using Defender for Cloud Apps to audit shadow AI usage and applying DLP policies to block sensitive data uploads to third-party tools

• Sensitive information types and sensitivity labels in Microsoft Purview: how to classify, detect and protect PII, legal and financial data across your tenant

• Dynamic groups in Entra for automated, role-based access that prevents permission creep