Microsoft 365 Governance Blog | Security & Copilot

Governing AI Shadow IT with the Microsoft Purview Browser Extension

Posted on 20 August 2025Updated on 16 May 2026by Nikki Chapple

AI tools like ChatGPT, Bard, and Claude are transforming the workplace. From customer service to content creation, employees are increasingly turning to them as productivity boosters. But with this innovation comes a challenge:

⚠️ How do you protect sensitive company data from being unintentionally exposed, while still enabling the benefits of AI?

The answer: the Microsoft Purview Browser Extension — a lightweight, privacy-first tool that gives organizations visibility and control over browser activity without becoming intrusive. When combined with Endpoint DLP, Insider Risk Management (IRM), and Data Security Posture Management (DSPM) for AI, it provides a powerful way to govern risky behavior, including shadow AI.

A four‑step guide to using DSPM for AI to monitor and manage risky behaviour — without compromising privacy
What the Purview Browser Extension is and why it matters
How it works alongside Endpoint DLP and Insider Risk Management (IRM)

Enhance Your Data Security Strategies – IRMS Conference 2025

Posted on 31 May 2025Updated on 31 May 2025by Nikki Chapple

I’m deeply honoured to have delivered the closing keynote with Ryan John Murphy from Microsoft at the IRMS Conference 2025 – The Peaky Path to Progress | 18th – 20th May 2025 | Birmingham, UK an event that continues to be the beating heart of the information management community. With over 400 professionals from across sectors, this year’s theme, “The Peaky Path to Progress,” couldn’t have been more fitting.

As we navigate an era where data is both an asset and a liability, my session—“Protecting Your Sensitive Data with Microsoft Purview: Practical Information Protection and DLP Strategies”—focused on equipping organizations with the tools and mindset to climb their own digital mountains.

Measuring Copilot and Gen AI Success and Risks with Viva Insights and Purview – ECS 2025

Posted on 30 May 2025Updated on 31 May 2025by Nikki Chapple

Measure Copilot and Gen AI Success and Risks Using Viva Insights, Microsoft Purview, and the Microsoft 365 Admin Center reports

Earlier this month, I had the pleasure of speaking at the European Collaboration Summit 2025 in Düsseldorf, Germany. It was an incredible opportunity to connect with fellow Microsoft 365 professionals and explore a timely, strategic question:

How do we measure the success—and manage the risks—of Microsoft Copilot and Generative AI?

In my session, “Measuring Copilot and Gen AI Success and Risks with Viva Insights and Purview,” I shared practical, real-world strategies for going beyond basic usage statistics to understand the full picture: adoption, impact, sentiment, and security posture.

Guide to the New SC-401 Information Security Administrator Associate

Posted on 26 March 2025Updated on 30 May 2025by Nikki Chapple

🚨 Big News for IT, Data Security, Compliance and Purview Professionals! 🚨

Microsoft has announced the retirement of the SC-400: Microsoft Information Protection Administrator certification, effective May 31, 2025. This change impacts both current SC-400 certification holders and those preparing for the exam. As the IT landscape evolves, Microsoft is shifting its focus towards more comprehensive security administration, leading to the introduction of the new SC-401 certification. 🔒

Wondering how this change will affect your certification journey? This transition may seem daunting, but with the right information and preparation, you can navigate it effectively and continue to advance your career in information security. ✨ The new SC-401 certification offers a more robust focus on security administration, aligning with the latest industry trends. 🌟

In this post and the associate All Things M365 Compliance podcast episode , we’ll cover everything you need to know about the retirement of the SC-400 certification, the introduction of the SC-401 certification, and how to make the most of this change. 🌟

Microsoft 365 Offboarding: Secure OneDrive & Mailbox Data

Posted on 2 March 2025Updated on 16 May 2026by Nikki Chapple

When an employee leaves, proper Microsoft 365 offboarding is crucial to protect data. Failure to follow the correct procedure may result in the loss or exposure of OneDrive and mailbox data. This manual outlines the best ways to limit access, enforce retention policies, transfer files, and supervise mailboxes and OneDrive accounts to ensure compliance and continuous functionality.

How to Investigate Microsoft 365 Copilot Interactions

Posted on 2 March 2025Updated on 2 March 2025by Nikki Chapple

Ever wondered how to investigate Microsoft 365 Copilot Interactions? You’re in the right place! This blog post will guide you through the process of using Microsoft 365 tools, specifically the unified audit log eDiscovery and Communications Compliance, to uncover specific Microsoft 365 Copilot interactions.

Mastering Microsoft Purview Exact Data Match: All Things M365 Compliance Podcast

Posted on 22 February 2025Updated on 14 March 2025by Nikki Chapple

What are the benefits of Microsoft Purview’s Exact Data Match (EDM)? This question is explored in the latest episode of the All Things M365 Compliance Podcast: Mastering Microsoft Purview Exact Data Match. In today’s world, where data breaches are becoming increasingly common, protecting your organization’s sensitive information is critical. However, traditional data classification methods often rely on patterns and keywords, which can lead to false positives and inefficiencies, complicating efforts to protect data. The advantage of EDM is that it provides a precise solution, enabling you to classify and secure your data using exact values from your structured sources, such as an employee list.

In this latest episode of the All Things M365 Compliance Podcast/Vodcast, Ewelina Paczkowska joins hosts Nikki Chapple and Ryan John Murphy to explore mastering Microsoft Purview’s Exact Data Match and discuss its benefits and practical functionality.

All Things M365 Compliance Podcast Ep 23: MPARR – Microsoft 365 Reporting

Posted on 10 December 2024Updated on 16 May 2026by Nikki Chapple

In Episode 23 of the All Things M365 Compliance Podcast, hosts Ryan John Murphy and Nikki Chapple explore the innovative Microsoft Purview Advanced Rich Reports (MPARR) with Sebastián Zamorano. MPARR takes Microsoft Purview’s standard reporting capabilities to the next level by using APIs to collect data on over 680 activities. The result? Users can create customized and detailed PowerBI reports that offer a comprehensive overview of your Microsoft 365 data landscape, providing a reassuringly thorough understanding of your data. This enhances your ability to manage and protect sensitive information and provides a clear understanding of your compliance posture.

You can read on to learn more about Microsoft Purview Advanced Rich Reports (MPARR) and watch or listen to the podcast.

SharePoint Version History Limits Can Help You Optimize SharePoint Storage

Posted on 1 September 2024Updated on 24 February 2025by Nikki Chapple

In my recent blog post, Hidden Connection Between SharePoint File Versioning and Storage, I delved into the mechanics of file versioning in SharePoint. Each version is a full copy of the file, meaning that large files can rapidly consume storage space. For instance, a 200MB PowerPoint file with 10 versions will use up 2GB of storage. If you have 500 such files, that’s a whopping 1TB of storage consumed. This versioning system can lead to SharePoint becoming cluttered with outdated and often irrelevant file versions. However, it’s not all bad news. Microsoft has recently introduced SharePoint Version History Limits, which offers better control over file versions at both the organization and site levels. With these new limits, you can optimize SharePoint storage by deleting excessive versions, thereby freeing up and making better use of your valuable storage space.

Let’s explore how to use Version History Limits to optimize SharePoint storage and enhance your document management efficiency.

The Hidden Connection Between SharePoint File Versioning and Storage Management

Posted on 18 August 2024Updated on 24 February 2025by Nikki Chapple

Today, effective document management is crucial in the digital workplace. SharePoint offers strong file versioning capabilities that ensure every edit and update is recorded, creating a comprehensive version history. This feature not only facilitates seamless collaboration but also acts as a safeguard against accidental deletions or alterations. By maintaining a detailed version history, SharePoint upholds document integrity and ensures compliance with regulatory standards.

Many organizations are approaching their SharePoint storage limits and are asking the question: “Do I really need to buy more SharePoint storage, or is there a better way?”

So how does SharePoint File Versioning impact your storage management? In this post, we’ll explore the relationship between SharePoint file versioning and storage and provide tips to optimize your SharePoint environment.