Compliance Track
Tuesday 9:00 AM - 5:00 PM · Room 432
Data Protection, Collaboration, and User Engagement: Assisting Your Organization in Doing it All
With the ever-changing cloud landscape, organizations struggle to help their employees collaborate and be effective in their day-to-day responsibilities. Adding data protection and security could raise the difficulty even more, as the business needs to balance the ability to collaborate while keeping its information and users safe. Ensuring user engagement and adoption is fundamental to success.
In this workshop, David and Sarah will cover the design and implementation of Microsoft 365's collaboration tools, such as SharePoint, Teams, Viva Engage, and more, while ensuring the solution is safe, secure, and fully collaborative. They'll help you understand how you can work together to protect your organization's information and employees in a manner that encourages endorsement from those using the tools.
Wednesday 10:20 AM - 11:30 AM · Room 442
I've Got Microsoft Purview!... Now What?
When Microsoft Purview is discussed with organizations, it is usually in the context of Information Protection or Records Management. Sometimes, both are known as being part of Purview. But in reality, Microsoft Purview is so much more than just either of these features. Purview is a suite within the Microsoft 365 platform and provides several services to organizations that understand the power of the toolset.
Join David as he highlights, defines, and describes the many features of Microsoft Purview. You'll come away with a working knowledge of Purview and it's many parts. He'll explain the intended use of each feature and provide you with the knowledge you need to answer the question, now what?
Wednesday 11:40 AM - 12:50 PM · Room 442
Managing Insider Risk with Microsoft Purview
Learn how Microsoft Purview Insider Risk Management and Adaptive Protection can effectively manage insider risk by dynamically adjusting security controls based on users' behavior and their data-related activity. I'll showcase the Purview features that work together to safeguard sensitive information and mitigate potential threats from risky users within an organization. To demonstrate, I'll walk thru the practical use-case of a departing employee, the potential data-related risks that are often associated with that, and how Insider Risk Management can help.
In the words of one security leader, ‘If any company thinks they don’t have an insider risk problem, they aren’t paying attention.’
Wednesday 2:00 PM - 3:10 PM · Room 443-444
Transforming Public Sector with Microsoft 365 and Power Platform: Lessons from the City of Seattle
Public sector organizations face unique challenges when modernizing IT services, from navigating complex governance requirements to ensuring scalability for diverse teams. In this session, explore how the City of Seattle leveraged Microsoft 365 and Power Platform to transform collaboration, streamline processes, and enhance operations for a workforce of over 10,000 employees.
Whether you work directly in the public sector or support public sector clients, this session will provide practical strategies and actionable tools to drive meaningful change. Learn how to address public sector-specific obstacles—such as compliance, governance, and accessibility—while achieving scalability, user adoption, and operational excellence.
In this presentation, you will learn:
- How the City of Seattle modernized collaboration and automation services using Microsoft 365 and Power Platform to enhance efficiency and service delivery.
- Strategies to tackle unique public sector transformation challenges, including governance, compliance, and accessibility.
- Scalable best practices for driving user adoption and operational success with Microsoft 365 and Power Platform in government and large organizations.
Thursday 11:40 AM - 12:50 PM · Room 442
You Have Sensitive Information. Now Let's Protect It.
Every organization has data considered sensitive to its business, employees, or even the industry it exists within. As a result, protecting its data has become a priority for many organizations worldwide. Microsoft provides several tools for identifying sensitive information within the organization and protecting it from being provided to sources that should not have it.
In this session, we'll cover features and processes such as Microsoft Purview Information Protection (MPIP), Data Loss Prevention (DLP), and more to help you protect your organization's sensitive information from leaving your control and falling into the hands of those who should not have it.
Thursday 1:20 PM - 1:40 PM · Collab Studio
Securing Microsoft 365 Data: Effective Strategies to Reduce Risk
Microsoft 365 contains intellectual property critical to business function and innovation. This data is at risk for loss and corruption due to many factors, including accidental deletion and malicious actors. To effectively mitigate risk to this data, you need a layered approach with both native and integrated tools that also meet business objectives. This session will explore the different tools and help answer the most frequently asked questions.
Thursday 4:00 PM - 5:10 PM · Room 421-422
IT Pro meets Microsoft Purview Data Lifecycle and Records Management
This session will explain Data Lifecycle and Records Management in Microsoft Purview from an IT-Pro's perspective. With compliance concerns on the rise in the modern workplace, Compliance teams are reaching out to their IT-Pro partners for assistance. This is unfamiliar territory for many IT-Pros, so this session is designed to help clear the path forward. It covers topics like: • Recommendations for mapping a retention schedule into a "software-friendly" Purview File Plan • Using automation to apply retention labels to your content • Using scopes to scale and meet complex retention requirements • SharePoint and Teams architecture impacts • Understanding what configurations can't (easily) be changed after-the-fact
To reinforce the topics, Joanne will discuss the skills IT-Pros should bring to the table when working with their Compliance team partners.
Thursday 4:00 PM - 5:10 PM · Room 442
Real-World Implementation Experiences of Microsoft Purview
Organizations have invested heavily in recent years in moving to Microsoft 365 to improve productivity and collaboration. With this transition comes incredible opportunities to increase business efficiencies. However, it also brings increased risks as users collaborate more with internal coworkers as well as with external partners and customers. In addition, the continually changing regulatory compliance landscape makes this an ever evolving challenge. Microsoft has provided a robust set of capabilities for mitigating risks and meeting compliance obligations with Microsoft Purview, such as information protection, data loss prevention, records management and eDiscovery. In this session, we'll share real-world experiences implementing Microsoft Purview across different types of organizations. We'll deep dive into many the features of Purview, share real examples and provide actionable guidance to help you leverage Microsoft Purview to mitigate risks and comply with regulations in your organization.
Friday 10:20 AM - 11:30 AM · Room 421-422
Microsoft Purview Compliance – Tales from the Trenches
As more and more of an organization's data is stored within the cloud, controlling the amount of data can be daunting. Administrators and compliance professionals are being called on to support content management to ensure it is protected and maintained throughout its data lifecycle.
Joanne and David have assisted organizations for years and helped many enterprises design and build compliance solutions using Microsoft Purview from the ground up. In this session, they'll discuss critical topics organizations should consider when implementing Records Management and Information Protection controls. They will also cover common pitfalls affecting the organization on its compliance journey.
Friday 10:20 AM - 11:30 AM · Room 432
Teams First Information Architecture and Governance
When planning out or updating a Microsoft 365 implementation, SharePoint is still important, but it really needs to start with Teams, and then the underlying SharePoint structure for a big part flows out of that. It's not just answering planning questions, but also ensuring that everyone understands that Teams is much more than a meeting and chat platform.
Topics we'll cover in this session include:
Introducing a maturity model on how organizations leverage Teams, SharePoint, Email, and OneDrive Level setting on how they work together Understanding the differences between Standard, Private, and Shared Channels, and the underlying SharePoint site collections Where do standalone Communication and Team Sites fit into the Teams and SharePoint structure Guests versus B2B Direct Connect in Teams, and external sharing in SharePoint Open source scripts and Power BI dashboards to inventory and analyze your file shares, SharePoint on-premises, and SharePoint Online Answering the question - what does a Team and a Channel represent in my organization MindJet as a tool for planning your IA Commercial and open-source solutions for implementing your IA Real-world scenarios and case studies
Friday 10:20 AM - 11:30 AM · Room 442
Protecting users from themselves: How to engage your employees and drive effective data protection
Many organizations feel they must choose between protecting their data or enabling strong collaboration. David and Sarah ask: “Why not do both?”
Sarah Haase (renowned user adoption specialist) and David Drever (data protection expert) join forces to demonstrate you can collaborate, share files, and protect your data at the same time! Join them as they demonstrate how to configure your Microsoft 365 environment to collaborate internally and externally while ensuring your data is protected. Sarah and David will outline methods for planning your security, configuring Microsoft Purview, and driving effective employee engagement and adoption. By the end of the session, you’ll understand how to build a highly collaborative environment that lets your users share and protect your data.
Friday 12:30 PM - 1:40 PM · Room 421-422
Establish a Data Protection Strategy with Microsoft Purview
Data Protection is top of mind for all organizations that work with sensitive information. As those organizations move into the Microsoft Cloud and adopt Cloud services faster and faster, establishing a strong data protection strategy is critical to protecting the information that your business runs on and preventing threats from both external attackers and insiders. Whether you're concerned about unstructured or structured data, risks from accidental or malicious data leaks, external threats, ransomware, external sharing, or any combination of these, having a Data Protection Strategy that protects your data no matter where it lives is a critical part of that strategy. Microsoft Purview provides robust capabilities for protecting that data, both in the cloud, on-premises or shared externally and understanding those capabilities is an important part of rolling out controls to protect your information. Join Antonio as he shares important considerations for establishing a Data Protection strategy for your organization and learn how you can use the extensive features of Microsoft Purview to protect your critical business information.
Friday 12:30 PM - 1:40 PM · Room 445-446
How to Avoid AI Disasters: Copilot, Data Security, and Unintended Consequences
Say your company rushes in the coming months to implement a Copilot over their Intranet. An employee asks the Copilot, "How much does my co-worker make?" How will it answer?
This scenario becomes plausible as Copilot is connected to data sources for Q&A activities. If the data related to pay, layoffs, and other sensitive topics is accessible by the AI, it's possible that an employee could get an answer to their question. You should take great care before connecting it to your own internal data.
Unfortunately hearing GPT, AI and Machine Learning terms thrown about like doubloons at a Mardi Gras parade in the news is giving many organizations FOMO. We'll discuss what you should know before you jump in.
In this session, we'll address:
- What are these technologies and how they will impact you
- How can these technologies be used in your organization
- Data and security considerations
- Preparing for unintended consequences
Join us to learn about this brave new world and how you could apply it in your own work.