Posts tagged How-to
-
How tenant sprawl slows Microsoft 365 governance, and how to reverse it
Tenant sprawl turns governance into search and cleanup. Measure what it costs, then stop it at creation with owners, expiry and reviews.
-
How to control shadow AI
Find the AI tools nobody approved, assess what they can reach, and bring the useful ones under the same inventory, owners and reviews as the rest.
-
How to control Microsoft Teams sprawl
A repeatable routine for Teams sprawl: inventory every team, find inactive and ownerless ones, set owners and expiry, review, then archive with a trail.
-
How to detect and fix SharePoint oversharing
Find SharePoint content that more people can reach than intended, fix the most sensitive first, repair the causes and re-check on a cycle.
-
How to produce DORA audit evidence in Microsoft 365
DORA counts the agents, flows and workspaces in your tenant as ICT assets. Inventory them, assign owners, review access and export the evidence.
-
How to build EU AI Act evidence across your AI tools
The EU AI Act applies to every AI system you use, whoever made it. Keep a record per system: purpose, data, owner, risk class and last review.
-
How to govern AI tools beyond Microsoft Copilot
Apply one governance model to every AI tool your teams use: an owner, a risk rating, an access review and one report, joined to your Entra ID.
-
How to govern AI coding assistants
Coding assistants read source code and internal context. Inventory them, map their access, give each an owner and review it like any AI tool.
-
How to govern Microsoft Copilot agents
Keep every Copilot Studio and SharePoint agent inventoried, owned and risk-ranked, so agent creation does not turn into sprawl and data exposure.
-
How to govern the Power Platform
Govern Power Apps, Power Automate and Power BI as one low-code estate: inventory it, give every asset an owner, watch connectors and review access.
-
How to inventory the AI tools in use across your organization
Build an inventory of the AI assistants and agents in use, with an owner, data reach and risk for each, starting in Microsoft 365 and extending out.
-
How to monitor data loss prevention across Microsoft 365
DLP policies stop known patterns. Watch the conditions around them too: external sharing, mail redirect rules and connector use, ranked and fixed.
-
How to prepare Microsoft 365 for NIS2
NIS2 asks you to prove control, not assert it. Map the duties to Microsoft 365, set a baseline, keep owners and reviews current and package evidence.
-
How to prepare Microsoft 365 for a Copilot rollout
Copilot answers with each user's permissions. Measure exposure, close oversharing, label sensitive sites, retire stale content, then pilot.
-
How to reclaim unused Microsoft 365 Copilot licences
Copilot seats stay assigned until someone removes them. Define what used means, find idle seats by owner and department, notify, then reclaim.
-
How to run recurring access reviews across Microsoft 365
Owner-led access reviews on a fixed cycle, across Microsoft 365 workspaces, so access stays in line and the proof is kept.
















