Security & Compliance Track
Tuesday 1:30 PM - 5:00 PM · Room 442
Agents run amuck! Governing & Securing your agents in M365
Copilot Studio Agents, Declarative Agents, SharePoint Agents, Copilot Studio use rights agents? Every day, there's another agent and another way for your users to create them. It can quickly turn into a nightmare for your organization trying to make sure these agents are secured and governed correctly. There is hope though! Join this 1/2 day workshop and learn:
- Where agents are deployed and how to find them
- What are the capabilities of these agents and what do they have access to?
- How do control the creation of agents
- What are the licensing requirements for creating the various agents
- How to protect sensitive data
- Self Service Management
Wednesday 10:20 AM - 11:30 AM · Room 442
I've Got Microsoft Purview!... Now What?
When Microsoft Purview is discussed with organizations, it is usually in the context of Information Protection or Records Management. Sometimes, both are known as being part of Purview. But in reality, Microsoft Purview is so much more than just either of these features. Purview is a suite within the Microsoft 365 platform and provides several services to organizations that understand the power of the toolset.
Join David as he highlights, defines, and describes the many features of Microsoft Purview. You'll come away with a working knowledge of Purview and it's many parts. He'll explain the intended use of each feature and provide you with the knowledge you need to answer the question, now what?
Wednesday 11:40 AM - 12:50 PM · Room 442
Managing Insider Risk with Microsoft Purview
Learn how Microsoft Purview Insider Risk Management and Adaptive Protection can effectively manage insider risk by dynamically adjusting security controls based on users' behavior and their data-related activity. I'll showcase the Purview features that work together to safeguard sensitive information and mitigate potential threats from risky users within an organization. To demonstrate, I'll walk thru the practical use-case of a departing employee, the potential data-related risks that are often associated with that, and how Insider Risk Management can help.
In the words of one security leader, ‘If any company thinks they don’t have an insider risk problem, they aren’t paying attention.’
Wednesday 2:00 PM - 3:10 PM · Room 432
From Chaos to Collaboration: Safe, Secure & Governed Microsoft Teams Collaboration and Meetings
Have you ever thought "My Teams environment is a mess and I need to clean it up!" or "My users don't really pay attention to how they run their Teams meetings even with sensitive topics"? Many organizations feel their Microsoft Teams environments are set up inconsistently and are not well governed or secured. As well, Microsoft Teams meetings have become a critical part of our day, every day, and its important to select the right controls and policies so that meetings are safe and secure. With the move to remote and hybrid work we saw an explosion of Teams usage and adoption! We know these methods of work are here to stay, and with that Teams usage and the number of Teams we have continues to grow. This makes the need for governance and security in Teams critical! In this session, we'll share common tips and best practices for conducting safe and secure Teams meetings. We'll also look at Teams Premium and what it provides to help run secure meetings. We'll show how to govern your Teams collaboration spaces, how to safely enable guest access, and how to secure sensitive data within Teams. Join us to learn how to move from chaos to safe, secure and well-governed Microsoft Teams collaboration!
Wednesday 3:20 PM - 3:40 PM · Solution Stage
Build a Secure & M365 Copilot-ready Data Environment
For years, organizations have struggled with information sprawl, file oversharing, and poor data management in collaborative spaces like Teams, SharePoint, and file shares. Now, GenAI tools like Microsoft 365 Copilot are exposing these long-standing challenges, making strong data governance a critical first step in securing data and ensuring Copilot readiness. Without clear structures, access controls, and permissions, AI surfaces these issues – amplifying risk, eroding trust, and halting adoption.
In this session, you’ll learn practical governance strategies to secure your Microsoft 365 collaborative environment while enabling effective Copilot and GenAI use. We'll cover best practices for collaborative information architecture, data inventory, workspace-based RBAC, and external sharing management, along with key steps to prepare your content for Copilot while maintaining security and compliance.
Attendees will also receive a starter template to jumpstart their Copilot and content governance strategy.
Wednesday 4:00 PM - 5:10 PM · Room 447-448
Azure-centric, Cyber Resiliency, and Protection for Microsoft 365, Server, and Endpoints
Strengthening your Microsoft 365 cyber-resiliency through reliable data protection is crucial. Learn how to enable zero and low-cost storage for protection, recovery, archiving, compliance, and content search. In this session, we will feature live demonstrations with Azure, including:
- Granular, release independent restores for Microsoft 365 apps and file data surrounding Microsoft 365
- How to use Microsoft OneDrive as an innovative, smart, free and secure storage target
- The options and benefits of public and private cloud storage
- How to enable a full turnkey data protection SaaS solution
- The easy way to search across data within Microsoft 365 for E-discovery and compliance
- Smart, tiered archiving for legacy data within Microsoft 365, SharePoint, and Exchange
- How to meet compliance and data sovereignty requirements
Thursday 9:50 AM - 10:10 AM · Collab Studio
Azure-centric, Cyber Resiliency, and Protection for Microsoft 365, Server, and Endpoints
Strengthening your Microsoft 365 cyber-resiliency through reliable data protection is crucial. Learn how to enable zero and low-cost storage for protection, recovery, archiving, compliance, and content search. In this session, we will feature live demonstrations with Azure, including:
- Granular, release independent restores for Microsoft 365 apps and file data surrounding Microsoft 365
- How to use Microsoft OneDrive as an innovative, smart, free and secure storage target
- The options and benefits of public and private cloud storage
- How to enable a full turnkey data protection SaaS solution
- The easy way to search across data within Microsoft 365 for E-discovery and compliance
- Smart, tiered archiving for legacy data within Microsoft 365, SharePoint, and Exchange
- How to meet compliance and data sovereignty requirements
Thursday 11:40 AM - 12:50 PM · Room 442
You Have Sensitive Information. Now Let's Protect It.
Every organization has data considered sensitive to its business, employees, or even the industry it exists within. As a result, protecting its data has become a priority for many organizations worldwide. Microsoft provides several tools for identifying sensitive information within the organization and protecting it from being provided to sources that should not have it.
In this session, we'll cover features and processes such as Microsoft Purview Information Protection (MPIP), Data Loss Prevention (DLP), and more to help you protect your organization's sensitive information from leaving your control and falling into the hands of those who should not have it.
Thursday 11:40 AM - 12:50 PM · Room 443-444
Copilot- A Guide to Hacking, Managing, Securing Your Data
In this session we will discuss how customers are managing, securing and providing governance to Copilot content and data. We will also discuss security issues and how end users are working around Chat GPT and Copilot safeguards.
Thursday 1:20 PM - 1:40 PM · Collab Studio
Securing Microsoft 365 Data: Effective Strategies to Reduce Risk
Microsoft 365 contains intellectual property critical to business function and innovation. This data is at risk for loss and corruption due to many factors, including accidental deletion and malicious actors. To effectively mitigate risk to this data, you need a layered approach with both native and integrated tools that also meet business objectives. This session will explore the different tools and help answer the most frequently asked questions.
Thursday 4:00 PM - 5:10 PM · Room 442
Real-World Implementation Experiences of Microsoft Purview
Organizations have invested heavily in recent years in moving to Microsoft 365 to improve productivity and collaboration. With this transition comes incredible opportunities to increase business efficiencies. However, it also brings increased risks as users collaborate more with internal coworkers as well as with external partners and customers. In addition, the continually changing regulatory compliance landscape makes this an ever evolving challenge. Microsoft has provided a robust set of capabilities for mitigating risks and meeting compliance obligations with Microsoft Purview, such as information protection, data loss prevention, records management and eDiscovery. In this session, we'll share real-world experiences implementing Microsoft Purview across different types of organizations. We'll deep dive into many the features of Purview, share real examples and provide actionable guidance to help you leverage Microsoft Purview to mitigate risks and comply with regulations in your organization.
Friday 10:20 AM - 11:30 AM · Room 421-422
Microsoft Purview Compliance – Tales from the Trenches
As more and more of an organization's data is stored within the cloud, controlling the amount of data can be daunting. Administrators and compliance professionals are being called on to support content management to ensure it is protected and maintained throughout its data lifecycle.
Joanne and David have assisted organizations for years and helped many enterprises design and build compliance solutions using Microsoft Purview from the ground up. In this session, they'll discuss critical topics organizations should consider when implementing Records Management and Information Protection controls. They will also cover common pitfalls affecting the organization on its compliance journey.
Friday 10:20 AM - 11:30 AM · Room 442
Protecting users from themselves: How to engage your employees and drive effective data protection
Many organizations feel they must choose between protecting their data or enabling strong collaboration. David and Sarah ask: “Why not do both?”
Sarah Haase (renowned user adoption specialist) and David Drever (data protection expert) join forces to demonstrate you can collaborate, share files, and protect your data at the same time! Join them as they demonstrate how to configure your Microsoft 365 environment to collaborate internally and externally while ensuring your data is protected. Sarah and David will outline methods for planning your security, configuring Microsoft Purview, and driving effective employee engagement and adoption. By the end of the session, you’ll understand how to build a highly collaborative environment that lets your users share and protect your data.
Friday 12:30 PM - 1:40 PM · Room 421-422
Establish a Data Protection Strategy with Microsoft Purview
Data Protection is top of mind for all organizations that work with sensitive information. As those organizations move into the Microsoft Cloud and adopt Cloud services faster and faster, establishing a strong data protection strategy is critical to protecting the information that your business runs on and preventing threats from both external attackers and insiders. Whether you're concerned about unstructured or structured data, risks from accidental or malicious data leaks, external threats, ransomware, external sharing, or any combination of these, having a Data Protection Strategy that protects your data no matter where it lives is a critical part of that strategy. Microsoft Purview provides robust capabilities for protecting that data, both in the cloud, on-premises or shared externally and understanding those capabilities is an important part of rolling out controls to protect your information. Join Antonio as he shares important considerations for establishing a Data Protection strategy for your organization and learn how you can use the extensive features of Microsoft Purview to protect your critical business information.
Friday 12:30 PM - 1:40 PM · Room 442
Top 10 best practices every Admin should be doing in M365!
Come and learn the top 10 best practices you should be doing to both manage and secure your environment. Tenant configuration can be a balance of usability and security when planning your roll-out or management model. These best practices will assist you in improving visibility into M365 and help you understand the necessary controls needed to have in place to ensure your tenant is protected.
Friday 12:30 PM - 1:40 PM · Room 445-446
How to Avoid AI Disasters: Copilot, Data Security, and Unintended Consequences
Say your company rushes in the coming months to implement a Copilot over their Intranet. An employee asks the Copilot, "How much does my co-worker make?" How will it answer?
This scenario becomes plausible as Copilot is connected to data sources for Q&A activities. If the data related to pay, layoffs, and other sensitive topics is accessible by the AI, it's possible that an employee could get an answer to their question. You should take great care before connecting it to your own internal data.
Unfortunately hearing GPT, AI and Machine Learning terms thrown about like doubloons at a Mardi Gras parade in the news is giving many organizations FOMO. We'll discuss what you should know before you jump in.
In this session, we'll address:
- What are these technologies and how they will impact you
- How can these technologies be used in your organization
- Data and security considerations
- Preparing for unintended consequences
Join us to learn about this brave new world and how you could apply it in your own work.