Data Governance Episodes

veryone is talking about Private RAG, sovereign AI, regional hosting, and keeping enterprise data inside controlled environments. But in this episode of M365 FM, Mirko Peters explores a critical security gap that many organizations overlook: data sovereignty is not the same as data security. The episode examines what happens when documents leave systems like SharePoint and Microsoft 365 and are ingested into vector databases for Retrieval-Augmented Generation (RAG) solutions. While organizations often focus on where data is stored, they frequently ignore what happens to permissions, access controls, and authorization models during the indexing process. The result can be a highly capable AI system that unintentionally exposes sensitive information to users who should never have access to it. A major focus is the concept of authorization-aware retrieval. Listeners learn why self-hosting, VPN access, or private infrastructure alone do not guarantee security. The episode breaks down…

SharePoint has become the central repository for business knowledge, documents, contracts, policies, and operational records. Yet many organizations are sitting on a hidden problem: their content lacks the metadata needed to make that information truly discoverable, governable, and AI-ready. In this episode of M365 FM, Mirko Peters explores the growing “metadata gap” and why it has become one of the biggest risks in modern Microsoft 365 environments. While organizations invest heavily in SharePoint, Copilot, search, and automation, many still rely on inconsistent folder structures, poor document classification, and manual filing processes that create data chaos over time. The discussion explains how missing or inconsistent metadata impacts far more than search. It affects compliance, records management, retention policies, security controls, business process automation, and the quality of AI-generated results. As Microsoft Copilot and other AI services depend on context to under…

Manual tagging is dead—and it’s quietly undermining your Microsoft 365 governance strategy. In this episode, we explore why traditional metadata management based on dropdown menus, user-selected labels, and manual classification no longer works in modern organizations. The volume of content generated across SharePoint, Teams, OneDrive, Copilot, and Microsoft 365 has grown beyond what humans can reliably classify. The problem isn’t that users are unwilling to tag content—it’s that manual tagging is inconsistent, incomplete, and impossible to scale. When metadata quality declines, governance suffers. Search results become unreliable, retention policies lose effectiveness, compliance controls weaken, and AI tools like Microsoft Copilot struggle to understand and protect organizational data. The episode examines how Microsoft Purview and AI-powered classification are changing the game. Instead of relying on users to choose the correct label, modern governance systems can analyze …

As organizations rapidly adopt Microsoft 365 Copilot, AI agents, and generative AI technologies, one challenge stands above all others: ensuring data is secure, governed, and compliant. In this episode of M365 FM, Mirko Peters speaks with Peter Rising, Senior Partner Solution Architect at Microsoft, about how Microsoft Purview helps organizations prepare for AI at scale. The discussion explores why AI readiness is not just about deploying Copilot licenses but understanding and controlling the data that powers AI experiences. Peter explains how Microsoft Purview provides visibility into sensitive information, helps classify and protect business-critical data, and enables organizations to apply Zero Trust principles across their Microsoft 365 environment. The conversation covers key capabilities including Data Loss Prevention (DLP), sensitivity labels, information protection, insider risk management, auditing, compliance monitoring, and data governance. These tools help ensure tha…

Cloud strategies often focus on scalability, cost optimization, and centralized services, but many organizations overlook one critical factor: latency. In this episode of M365 FM, Mirko Peters explores why network latency can become a major barrier to application performance and user experience, especially as businesses increasingly rely on cloud-based services. The discussion examines the concept of the “latency wall” and explains why simply moving workloads to the cloud does not automatically guarantee better performance. For applications that require real-time processing, industrial automation, IoT, AI inference, or low-latency user interactions, the physical distance between users, devices, and cloud datacenters can create significant challenges. The episode highlights how edge computing is emerging as a solution by bringing compute and data processing closer to where data is generated. Rather than sending every request to a centralized cloud region, organizations can levera…

In this episode of the M365 FM Podcast, we explore one of the biggest hidden risks in modern data governance: shadow data. While Microsoft Purview provides powerful visibility into governed data sources, many organizations assume that what Purview cannot see does not exist. That assumption creates a dangerous blind spot. The discussion explains how shadow data emerges across disconnected systems, unmanaged repositories, legacy platforms, third-party applications, personal storage locations, and forgotten workloads that sit outside normal governance processes. These hidden data stores often contain sensitive business information, intellectual property, customer records, and compliance-relevant content that never appears in standard Purview reporting. The episode breaks down why organizations frequently mistake data discovery for complete data visibility. Even with strong classification, labeling, and compliance controls in Microsoft 365, governance can only protect what it can ac…

In this episode of M365.fm, Mirko Peters explores how organizations can build a secure and private Retrieval-Augmented Generation (RAG) platform using SharePoint as the knowledge source and n8n as the orchestration layer. The discussion focuses on moving beyond generic AI chatbots and creating enterprise-grade AI systems that can access, retrieve, and reason over internal business knowledge while maintaining governance and security. The episode explains the core architecture of a private RAG solution, including document ingestion, chunking strategies, vector embeddings, semantic search, and AI response generation. Listeners learn why SharePoint is an ideal enterprise knowledge repository and how n8n can automate the entire pipeline without requiring complex custom development. Mirko breaks down the challenges many organizations face when deploying AI, including data silos, permission management, outdated content, and the risk of exposing sensitive information to public AI servic…

This episode explores how organizations can connect Microsoft Copilot with the predictive capabilities of Power BI to move beyond simple reporting and toward proactive, data-driven decision-making. The discussion highlights that while Copilot excels at natural language interactions and summarizing information, its real business value increases when it can access trusted analytical models, forecasts, and governed business data from Power BI. The episode explains that many organizations still use Power BI primarily as a dashboard destination. However, the future lies in treating Power BI as a semantic and analytical layer that feeds AI-powered experiences. Instead of navigating reports manually, users can ask questions in natural language through Copilot and receive contextual answers backed by governed Power BI models. A key theme is predictive analytics. By combining Copilot with Power BI datasets, organizations can surface forecasts, trends, risk indicators, and business predic…

In this episode, Mirko Peters explores why successful Microsoft 365 strategy should be approached like building a synthetic market rather than deploying technology in isolation. The core idea is that Microsoft 365 creates an internal economy where information, collaboration, automation, governance, and AI capabilities continuously interact. Organizations that focus only on individual tools such as Teams, SharePoint, Power Platform, or Copilot often miss the larger system dynamics that drive long-term value. The discussion highlights that every platform decision creates incentives and behaviors. Poor governance can encourage content sprawl, uncontrolled workspace growth, and fragmented knowledge, while well-designed governance creates trust, discoverability, and sustainable adoption. The episode argues that strategy is not about maximizing feature usage but about shaping the conditions that allow productive behaviors to emerge naturally across the organization. A key theme is tha…

Enterprise search is no longer limited by storage capacity or indexing speed. The real challenge is the growing gap between when information is created and when it becomes discoverable. This article explores how Microsoft Graph API Discovery is changing enterprise search by shifting from traditional crawl-and-index models to a relationship-driven, real-time discovery architecture. Traditional enterprise search relies on scheduled indexing, which often creates delays, stale results, and fragmented knowledge across systems. As organizations generate data across Teams, SharePoint, Outlook, OneDrive, and other Microsoft 365 services, keeping search indexes current becomes increasingly difficult. Microsoft Graph approaches the problem differently. Instead of focusing solely on where information is stored, it understands how content, people, conversations, meetings, permissions, and business processes are connected. This graph-based model enables search experiences that are contextual…

The article explains why traditional SharePoint and OneDrive folder syncing is becoming a major problem for modern enterprises. Syncing entire SharePoint libraries to local devices creates unnecessary storage usage, performance slowdowns, sync conflicts, and governance risks. Large synced libraries increase metadata overhead, network traffic, and the likelihood of duplicate or outdated files appearing across devices. It also weakens compliance because files copied locally can bypass SharePoint retention policies, version history, and sensitivity labels. Instead of full sync, the article recommends using “Add shortcut to OneDrive” as a more cloud-native approach. Shortcuts act as lightweight links to SharePoint folders without downloading the entire library. This improves device performance, reduces sync errors, lowers storage consumption, and keeps users working directly from the governed SharePoint source of truth. The article highlights several business benefits of shortcuts, …

Microsoft 365’s built-in redundancy keeps services running, but it does not guarantee business recovery after ransomware, insider threats, or accidental deletion. This article explains why many organizations wrongly assume synchronization equals protection, when in reality corrupted or deleted data can spread instantly across the environment. The core argument is that traditional backup strategies are no longer enough in modern cloud environments. Businesses need an isolated vault architecture — a logically separated and immutable recovery layer that cannot be compromised by the same identities, permissions, or attack paths affecting production systems. The article highlights how attackers increasingly target backup systems first, making “connected backups” a major weakness. A secure recovery strategy therefore requires isolation, immutability, strict access separation, and clean recovery points that survive tenant-wide compromise. It also emphasizes that resilience is not ju…

Microsoft MVP Evi van der Velden joins the M365.fm podcast to explain why simplicity is one of the most overlooked success factors in Microsoft 365. The conversation explores how many organizations create unnecessary complexity through excessive customization, unclear governance, and overengineered solutions that ultimately reduce productivity instead of improving it. Evi shares practical insights from real-world Microsoft 365 projects, highlighting how simpler architectures, cleaner collaboration environments, and focused governance strategies often deliver better long-term results. The discussion covers Microsoft Teams, SharePoint, governance, adoption, user experience, and the growing impact of AI tools like Microsoft Copilot inside modern workplaces. A key theme throughout the episode is that technology should support people rather than force users to adapt to complicated systems. Evi explains why organizations frequently underestimate the importance of user behavior, commun…

In this episode of the m365.fm podcast, Christian Buckley joins the conversation to unpack why traditional governance models are struggling to keep up with the pace of AI adoption inside Microsoft 365. The discussion explores how tools like Copilot and autonomous AI agents are reshaping collaboration, compliance, and content management — often faster than organizations can adapt their policies and processes. Christian explains that most governance frameworks were designed for static content and predictable user behavior, not AI systems capable of generating, accessing, and acting on information across the tenant. The episode dives into the growing risks of “agent sprawl,” shadow AI, uncontrolled permissions, and poor data quality, all of which can undermine security, compliance, and trust in AI-driven workplaces. A major theme throughout the episode is that governance is no longer just an IT responsibility. Successful AI governance requires a balance between innovation and contr…

Microsoft is ending support for Exchange Web Services (EWS) in Exchange Online, with full retirement starting October 2026. The article explains why this matters for Microsoft 365 administrators, developers, ISVs, backup vendors, and enterprises still relying on legacy integrations. EWS has been a core API for mailbox access, calendar synchronization, migrations, archiving, and third-party tools for years, but Microsoft is now pushing organizations toward Microsoft Graph as the modern replacement. The article highlights that this is not just a technical API change. Many existing applications, scripts, automation processes, monitoring tools, and enterprise workflows still depend heavily on EWS. Organizations that fail to identify these dependencies early may face outages, broken integrations, compliance risks, or unsupported applications once Microsoft disables the service. A major focus is the migration challenge. While Microsoft Graph offers a modern, secure, and unified API mo…

From DAX to Community: The Power BI Journey with Bernat Agulló Roselló explores the evolution of modern Business Intelligence through the personal and professional journey of Microsoft MVP Bernat Agulló Roselló. In this episode of the m365.fm podcast, Bernat shares how he moved from Excel macros and manufacturing reporting into advanced Power BI development, semantic modeling, DAX optimization, and community leadership. The conversation highlights how Business Intelligence is far more than dashboards and visuals. Bernat explains that successful Power BI solutions depend on data modeling, automation, architecture, optimization, and collaboration. A major focus is DAX (Data Analysis Expressions), where he discusses common misconceptions, especially the mistake of treating DAX like Excel formulas. He emphasizes the importance of semantic models, filter context, relationships, and understanding measures versus calculated columns. Another key topic is Tabular Editor and its role in e…

This episode of M365.fm explores why traditional Microsoft 365 governance approaches fail at enterprise scale and how organizations can move from manual oversight to automated, enforceable governance models. The discussion explains the difference between governance documentation and true operational governance, highlighting why policies alone are not enough in modern cloud environments. The episode introduces the concept of control planes versus data planes and explains how scalable governance depends on automation, identity management, lifecycle controls, telemetry, and policy enforcement rather than human-driven approval processes. It also covers common governance failures such as stale policies, overprivileged automation, unmanaged AI identities, and lack of monitoring. Additional topics include governance strategies for Copilot, AI agents, and Power Platform environments, along with practical ways organizations can reduce governance friction while maintaining security, compl…

In this episode of M365.fm , the discussion centers on why traditional manual sensitivity labeling in Microsoft Purview is rapidly becoming obsolete in modern enterprise environments. The core argument is that organizations now generate far too much data, too quickly, for employees to reliably classify information by hand. Manual tagging depends on users consistently stopping their work to apply the correct sensitivity label — something that rarely happens in practice. According to the episode, many organizations see labeling adoption rates around 30%, leaving large amounts of sensitive intellectual property effectively invisible to governance, compliance, and Data Loss Prevention systems. The episode explains that older governance models were designed for a slower workplace with fewer collaboration tools and lower data velocity. Today’s environments — driven by Microsoft 365, Teams, SharePoint, OneDrive, Slack, and Copilot — overwhelm users with constant communication and AI-g…

In this episode of the M365.fm podcast, Mirko Peters explores why many Microsoft 365 environments are wasting enormous amounts of money through over-provisioned storage, oversized safety buffers, and rigid quota management strategies. Traditional “just in case” capacity planning often leaves organizations paying for storage, performance, and licensing resources that remain unused while operational complexity continues to grow. The episode explains how static quota models across SharePoint Online, OneDrive, Teams, Power Platform, Azure storage, and multi-tenant workloads create fragmented infrastructure, dark data silos, and long-term cost inefficiencies. Mirko challenges the outdated “buffer mentality,” where organizations continuously add extra capacity to avoid outages, resulting in idle resources and inflated cloud spending. A major focus of the discussion is the shift toward elastic shared data reservoirs. Instead of isolated storage silos and fixed allocations, organization…

In this episode of the M365 FM Podcast, Mirko Peters explores the concept of “The Invisible Employee” and why most organizations misunderstand how work actually happens inside Microsoft 365. Companies often believe their processes, governance models, and infrastructure diagrams reflect reality, but the truth is very different. Real work happens through informal behaviors, workarounds, hidden collaboration patterns, and decisions employees make every day to bypass friction in systems that no longer match operational needs. The episode explains that Microsoft 365 is not just a collection of tools — it acts as a behavioral operating system that reveals how people truly collaborate, share information, and move data across the organization. Employees continuously create unofficial workflows, overshare files, duplicate information, and adapt processes in ways leadership rarely sees. These invisible behaviors become the real infrastructure of the business. A major focus of the discussi…

This episode argues that the biggest challenge in global meetings is not language translation, but interpreting meaning, intent, and cultural nuance. While modern tools can accurately translate words, they often fail to capture what those words actually represent in context—such as hesitation, politeness, indirect disagreement, or power dynamics. A core idea is the distinction between “word accuracy” and “meaning accuracy.” Teams often assume that if transcripts and captions look correct, the meeting was successful. In reality, misunderstandings still occur because meaning is frequently conveyed indirectly. For example, a statement like “that may be difficult” might signal a soft rejection rather than a scheduling issue. The episode highlights how this gap leads to false alignment. Teams move forward believing decisions were made, only to encounter resistance later from participants who never explicitly disagreed. This isn’t a failure of honesty—it’s a failure to interpret cult…

This episode discusses how organizations can securely share business data with users outside their organization using Microsoft’s Power Platform. The main focus is on designing the right architecture rather than simply enabling access. Nicholas Hayduk (MVP) explains that external users should not be treated like internal employees. Instead of giving them direct access to systems like Dataverse, organizations should use solutions such as Power Pages to act as a secure front layer. This approach allows controlled access to data without exposing internal systems. A key point in the episode is the importance of identity and authentication. External users should authenticate through trusted identity providers, such as Azure Active Directory or social login providers, rather than being managed directly inside the system. This improves both security and scalability. The discussion also highlights that security must be implemented at multiple levels. It is not enough to hide data in …

The episode talks about how automation is evolving from simple scripts into more advanced, intelligent systems that can monitor themselves and fix problems automatically. Instead of just executing predefined tasks, modern automation uses telemetry data (like logs, metrics, and traces) to understand what is happening inside systems in real time. A key idea is “self-healing automation.” This means systems can detect issues, figure out the root cause, and fix them without human intervention. Traditionally, engineers had to respond to alerts and manually troubleshoot problems, which is slow and doesn’t scale well. The new approach aims to reduce that by letting systems react instantly. The discussion highlights how observability is the foundation for this. By collecting detailed telemetry data, systems gain enough insight to move beyond simple monitoring and into automated decision-making. This enables faster detection of anomalies and more accurate fixes. Another important theme…

This episode argues that sensitivity labels are widely misunderstood and often give organizations a false sense of security. While they appear to enforce governance, in reality they are static, incomplete, and poorly maintained—making them ineffective in dynamic, AI-driven environments. The core issue is not the labeling technology itself, but the way organizations structure and manage their data. Most environments suffer from fragmented information spread across Teams, SharePoint, and other systems, creating silos that block both collaboration and effective AI usage. As a result, AI tools like Copilot cannot access the right data and are forced to generate outputs based on incomplete or outdated information. This leads to what the episode describes as an “AI rework loop”: AI produces confident but incorrect results, and employees must spend significant time validating and fixing them. In many cases, a large portion of AI-generated work requires correction, eroding the expected …