Seattle, WA

Security & Compliance Track

Tuesday 1:30 PM - 5:00 PM · Room 442

Agents run amuck! Governing & Securing your agents in M365

Antonio Maio

Antonio Maio

Protiviti - Managing Director & Enterprise Architect

Mark Rackley

Mark Rackley

Director Microsoft Practice @ Protiviti

Copilot Studio Agents, Declarative Agents, SharePoint Agents, Copilot Studio use rights agents? Every day, there's another agent and another way for your users to create them. It can quickly turn into a nightmare for your organization trying to make sure these agents are secured and governed correctly. There is hope though! Join this 1/2 day workshop and learn:

  • Where agents are deployed and how to find them
  • What are the capabilities of these agents and what do they have access to?
  • How do control the creation of agents
  • What are the licensing requirements for creating the various agents
  • How to protect sensitive data
  • Self Service Management
Wednesday 10:20 AM - 11:30 AM · Room 442

I've Got Microsoft Purview!... Now What?

David Drever

David Drever

Microsoft 365 MVP - Compliance, Data Protection, and M365 Specialist

When Microsoft Purview is discussed with organizations, it is usually in the context of Information Protection or Records Management. Sometimes, both are known as being part of Purview. But in reality, Microsoft Purview is so much more than just either of these features. Purview is a suite within the Microsoft 365 platform and provides several services to organizations that understand the power of the toolset.

Join David as he highlights, defines, and describes the many features of Microsoft Purview. You'll come away with a working knowledge of Purview and it's many parts. He'll explain the intended use of each feature and provide you with the knowledge you need to answer the question, now what?

Wednesday 11:40 AM - 12:50 PM · Room 442

Managing Insider Risk with Microsoft Purview

Joanne Klein

Joanne Klein

Microsoft 365 Independent Consultant

Learn how Microsoft Purview Insider Risk Management and Adaptive Protection can effectively manage insider risk by dynamically adjusting security controls based on users' behavior and their data-related activity. I'll showcase the Purview features that work together to safeguard sensitive information and mitigate potential threats from risky users within an organization. To demonstrate, I'll walk thru the practical use-case of a departing employee, the potential data-related risks that are often associated with that, and how Insider Risk Management can help.

In the words of one security leader, ‘If any company thinks they don’t have an insider risk problem, they aren’t paying attention.’

Wednesday 2:00 PM - 3:10 PM · Room 432

From Chaos to Collaboration: Safe, Secure & Governed Microsoft Teams Collaboration and Meetings

Antonio Maio

Antonio Maio

Protiviti - Managing Director & Enterprise Architect

Have you ever thought "My Teams environment is a mess and I need to clean it up!" or "My users don't really pay attention to how they run their Teams meetings even with sensitive topics"? Many organizations feel their Microsoft Teams environments are set up inconsistently and are not well governed or secured. As well, Microsoft Teams meetings have become a critical part of our day, every day, and its important to select the right controls and policies so that meetings are safe and secure. With the move to remote and hybrid work we saw an explosion of Teams usage and adoption! We know these methods of work are here to stay, and with that Teams usage and the number of Teams we have continues to grow. This makes the need for governance and security in Teams critical! In this session, we'll share common tips and best practices for conducting safe and secure Teams meetings. We'll also look at Teams Premium and what it provides to help run secure meetings. We'll show how to govern your Teams collaboration spaces, how to safely enable guest access, and how to secure sensitive data within Teams. Join us to learn how to move from chaos to safe, secure and well-governed Microsoft Teams collaboration!

Wednesday 3:20 PM - 3:40 PM · Solution Stage

Build a Secure & M365 Copilot-ready Data Environment

Timothy Boettcher

Timothy Boettcher

AvePoint, SVP, Digital Workplace Strategy

For years, organizations have struggled with information sprawl, file oversharing, and poor data management in collaborative spaces like Teams, SharePoint, and file shares. Now, GenAI tools like Microsoft 365 Copilot are exposing these long-standing challenges, making strong data governance a critical first step in securing data and ensuring Copilot readiness. Without clear structures, access controls, and permissions, AI surfaces these issues – amplifying risk, eroding trust, and halting adoption.

In this session, you’ll learn practical governance strategies to secure your Microsoft 365 collaborative environment while enabling effective Copilot and GenAI use. We'll cover best practices for collaborative information architecture, data inventory, workspace-based RBAC, and external sharing management, along with key steps to prepare your content for Copilot while maintaining security and compliance.

Attendees will also receive a starter template to jumpstart their Copilot and content governance strategy.

Wednesday 4:00 PM - 5:10 PM · Room 447-448

Azure-centric, Cyber Resiliency, and Protection for Microsoft 365, Server, and Endpoints

Randy De Meno

Randy De Meno

VP, Business Development & Microsoft Practice

Strengthening your Microsoft 365 cyber-resiliency through reliable data protection is crucial. Learn how to enable zero and low-cost storage for protection, recovery, archiving, compliance, and content search. In this session, we will feature live demonstrations with Azure, including:

  • Granular, release independent restores for Microsoft 365 apps and file data surrounding Microsoft 365
  • How to use Microsoft OneDrive as an innovative, smart, free and secure storage target
  • The options and benefits of public and private cloud storage
  • How to enable a full turnkey data protection SaaS solution
  • The easy way to search across data within Microsoft 365 for E-discovery and compliance
  • Smart, tiered archiving for legacy data within Microsoft 365, SharePoint, and Exchange
  • How to meet compliance and data sovereignty requirements
Thursday 9:50 AM - 10:10 AM · Collab Studio

Azure-centric, Cyber Resiliency, and Protection for Microsoft 365, Server, and Endpoints

Randy De Meno

Randy De Meno

VP Business Development and Microsoft Practice

Strengthening your Microsoft 365 cyber-resiliency through reliable data protection is crucial. Learn how to enable zero and low-cost storage for protection, recovery, archiving, compliance, and content search. In this session, we will feature live demonstrations with Azure, including:

  • Granular, release independent restores for Microsoft 365 apps and file data surrounding Microsoft 365
  • How to use Microsoft OneDrive as an innovative, smart, free and secure storage target
  • The options and benefits of public and private cloud storage
  • How to enable a full turnkey data protection SaaS solution
  • The easy way to search across data within Microsoft 365 for E-discovery and compliance
  • Smart, tiered archiving for legacy data within Microsoft 365, SharePoint, and Exchange
  • How to meet compliance and data sovereignty requirements
Thursday 11:40 AM - 12:50 PM · Room 442

You Have Sensitive Information. Now Let's Protect It.

David Drever

David Drever

Microsoft 365 MVP - Compliance, Data Protection, and M365 Specialist

Every organization has data considered sensitive to its business, employees, or even the industry it exists within. As a result, protecting its data has become a priority for many organizations worldwide. Microsoft provides several tools for identifying sensitive information within the organization and protecting it from being provided to sources that should not have it.

In this session, we'll cover features and processes such as Microsoft Purview Information Protection (MPIP), Data Loss Prevention (DLP), and more to help you protect your organization's sensitive information from leaving your control and falling into the hands of those who should not have it.

Thursday 11:40 AM - 12:50 PM · Room 443-444

Copilot- A Guide to Hacking, Managing, Securing Your Data

Michelle Boyd

Michelle Boyd

Head of Delivery Excellence

In this session we will discuss how customers are managing, securing and providing governance to Copilot content and data. We will also discuss security issues and how end users are working around Chat GPT and Copilot safeguards.

Thursday 1:20 PM - 1:40 PM · Collab Studio

Securing Microsoft 365 Data: Effective Strategies to Reduce Risk

Veeam Speaker

Veeam Speaker

Veeam

Microsoft 365 contains intellectual property critical to business function and innovation. This data is at risk for loss and corruption due to many factors, including accidental deletion and malicious actors. To effectively mitigate risk to this data, you need a layered approach with both native and integrated tools that also meet business objectives. This session will explore the different tools and help answer the most frequently asked questions.

Thursday 4:00 PM - 5:10 PM · Room 442

Real-World Implementation Experiences of Microsoft Purview

Antonio Maio

Antonio Maio

Protiviti - Managing Director & Enterprise Architect

Organizations have invested heavily in recent years in moving to Microsoft 365 to improve productivity and collaboration. With this transition comes incredible opportunities to increase business efficiencies. However, it also brings increased risks as users collaborate more with internal coworkers as well as with external partners and customers. In addition, the continually changing regulatory compliance landscape makes this an ever evolving challenge. Microsoft has provided a robust set of capabilities for mitigating risks and meeting compliance obligations with Microsoft Purview, such as information protection, data loss prevention, records management and eDiscovery. In this session, we'll share real-world experiences implementing Microsoft Purview across different types of organizations. We'll deep dive into many the features of Purview, share real examples and provide actionable guidance to help you leverage Microsoft Purview to mitigate risks and comply with regulations in your organization.

Friday 10:20 AM - 11:30 AM · Room 421-422

Microsoft Purview Compliance – Tales from the Trenches

David Drever

David Drever

Microsoft 365 MVP - Compliance, Data Protection, and M365 Specialist

Joanne Klein

Joanne Klein

Microsoft 365 Independent Consultant

As more and more of an organization's data is stored within the cloud, controlling the amount of data can be daunting. Administrators and compliance professionals are being called on to support content management to ensure it is protected and maintained throughout its data lifecycle.

Joanne and David have assisted organizations for years and helped many enterprises design and build compliance solutions using Microsoft Purview from the ground up. In this session, they'll discuss critical topics organizations should consider when implementing Records Management and Information Protection controls. They will also cover common pitfalls affecting the organization on its compliance journey.

Friday 10:20 AM - 11:30 AM · Room 442

Protecting users from themselves: How to engage your employees and drive effective data protection

David Drever

David Drever

Microsoft 365 MVP - Compliance, Data Protection, and M365 Specialist

Sarah Haase

Sarah Haase

Microsoft MVP | M365 enthusiast | Principal Product Manager | User adoption advocate

Many organizations feel they must choose between protecting their data or enabling strong collaboration. David and Sarah ask: “Why not do both?”

Sarah Haase (renowned user adoption specialist) and David Drever (data protection expert) join forces to demonstrate you can collaborate, share files, and protect your data at the same time! Join them as they demonstrate how to configure your Microsoft 365 environment to collaborate internally and externally while ensuring your data is protected. Sarah and David will outline methods for planning your security, configuring Microsoft Purview, and driving effective employee engagement and adoption. By the end of the session, you’ll understand how to build a highly collaborative environment that lets your users share and protect your data.

Friday 12:30 PM - 1:40 PM · Room 421-422

Establish a Data Protection Strategy with Microsoft Purview

Antonio Maio

Antonio Maio

Protiviti - Managing Director & Enterprise Architect

Data Protection is top of mind for all organizations that work with sensitive information. As those organizations move into the Microsoft Cloud and adopt Cloud services faster and faster, establishing a strong data protection strategy is critical to protecting the information that your business runs on and preventing threats from both external attackers and insiders. Whether you're concerned about unstructured or structured data, risks from accidental or malicious data leaks, external threats, ransomware, external sharing, or any combination of these, having a Data Protection Strategy that protects your data no matter where it lives is a critical part of that strategy. Microsoft Purview provides robust capabilities for protecting that data, both in the cloud, on-premises or shared externally and understanding those capabilities is an important part of rolling out controls to protect your information. Join Antonio as he shares important considerations for establishing a Data Protection strategy for your organization and learn how you can use the extensive features of Microsoft Purview to protect your critical business information.

Friday 12:30 PM - 1:40 PM · Room 442

Top 10 best practices every Admin should be doing in M365!

Michelle Gilbert

Michelle Gilbert

Principal Cloud Solution Architect, Copilot for M365, Microsoft

Come and learn the top 10 best practices you should be doing to both manage and secure your environment. Tenant configuration can be a balance of usability and security when planning your roll-out or management model. These best practices will assist you in improving visibility into M365 and help you understand the necessary controls needed to have in place to ensure your tenant is protected.

Friday 12:30 PM - 1:40 PM · Room 445-446

How to Avoid AI Disasters: Copilot, Data Security, and Unintended Consequences

Treb Gatte

Treb Gatte

Marquee Insights, make better, faster decisions with smarter data.

Say your company rushes in the coming months to implement a Copilot over their Intranet. An employee asks the Copilot, "How much does my co-worker make?" How will it answer?

This scenario becomes plausible as Copilot is connected to data sources for Q&A activities. If the data related to pay, layoffs, and other sensitive topics is accessible by the AI, it's possible that an employee could get an answer to their question. You should take great care before connecting it to your own internal data.

Unfortunately hearing GPT, AI and Machine Learning terms thrown about like doubloons at a Mardi Gras parade in the news is giving many organizations FOMO. We'll discuss what you should know before you jump in.

In this session, we'll address:

  • What are these technologies and how they will impact you
  • How can these technologies be used in your organization
  • Data and security considerations
  • Preparing for unintended consequences

Join us to learn about this brave new world and how you could apply it in your own work.

X Close

Keep Up to Date on
TechCon 365 & PWRCON Seattle