<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Access reviews – M365.FM</title><link>https://www.m365.fm/entity/access-reviews/</link><description>Recurring Microsoft Entra reviews that ask designated reviewers whether a person still needs access to a group, application, access package or privileged role, optionally applying removals automatically.</description><language>en</language><item><title>Entra ID Governance: Access Reviews, Entitlement Management and Lifecycle Workflows</title><link>https://www.m365.fm/show/episodes/entra-id-governance/</link><guid>https://www.m365.fm/show/episodes/entra-id-governance/</guid><pubDate>Wed, 28 Oct 2026 00:00:00 -0000</pubDate><category>episode</category><description>Access that is never reviewed keeps growing, and yearly recertifications end in rubber stamps. This episode shows identity architects, IAM and compliance teams how access packages, access reviews, lifecycle workflows and PIM in Microsoft Entra ID Governance…</description></item><item><title>Why Static Checklists are Failing Your Microsoft 365 Security Strategy</title><link>https://www.m365.fm/community/u/mirko-p/blog/why-static-checklists-are-failing-your-microsoft-365-security-strategy/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/why-static-checklists-are-failing-your-microsoft-365-security-strategy/</guid><pubDate>Fri, 28 Aug 2026 04:02:18 -0000</pubDate><category>article</category><description>Welcome back to the blog! As podcasters, we spend countless hours discussing the shifting landscapes of cloud technology, enterprise architecture, and security. One…</description></item><item><title>Simplifying Identity Management with Copilot in Microsoft Entra ID</title><link>https://www.m365.fm/community/u/mirko-p/blog/simplifying-identity-management-with-copilot-in-microsoft-entra-id/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/simplifying-identity-management-with-copilot-in-microsoft-entra-id/</guid><pubDate>Thu, 27 Aug 2026 18:54:08 -0000</pubDate><category>article</category><description>Welcome back to the blog! In today's digital landscape, managing enterprise identities, access controls, and security postures can quickly become overwhelming for I…</description></item><item><title>Mastering Microsoft Entra Access Reviews: Securing Your Cloud Environment</title><link>https://www.m365.fm/community/u/mirko-p/blog/mastering-microsoft-entra-access-reviews-securing-your-cloud-environment/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/mastering-microsoft-entra-access-reviews-securing-your-cloud-environment/</guid><pubDate>Thu, 27 Aug 2026 14:28:15 -0000</pubDate><category>article</category><description>Welcome back to the podcast! In today's episode, we are diving deep into the world of cloud security and identity governance. As organizations continue to migrate t…</description></item><item><title>Preventing the Silent Guest Pile-Up in Microsoft 365</title><link>https://www.m365.fm/community/u/mirko-p/blog/preventing-the-silent-guest-pile-up-in-microsoft-365/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/preventing-the-silent-guest-pile-up-in-microsoft-365/</guid><pubDate>Wed, 12 Aug 2026 09:01:13 -0000</pubDate><category>article</category><description>Welcome back to the podcast and our ongoing exploration of enterprise security. Today, we are diving deep into a phenomenon that sneaks up on even the most diligent…</description></item><item><title>Compliance as Code: The Architect’s Blueprint for Automated Trust</title><link>https://www.m365.fm/show/episodes/compliance-as-code-the-architects-blueprint-for-automated-trust/</link><guid>https://www.m365.fm/show/episodes/compliance-as-code-the-architects-blueprint-for-automated-trust/</guid><pubDate>Sat, 11 Jul 2026 00:00:00 -0000</pubDate><category>episode</category><description>Compliance is often treated as a documentation exercise—something organizations prepare for audits rather than embed into their daily operations. In this episode, we challenge that mindset by exploring the concept of Compliance as Code and why modern…</description></item><item><title>Microsoft Entra Access Reviews Guide</title><link>https://www.m365.fm/community/u/mirko-p/blog/access-reviews-step-by-step-the-complete-guide/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/access-reviews-step-by-step-the-complete-guide/</guid><pubDate>Thu, 30 Apr 2026 03:46:28 -0000</pubDate><category>article</category><description>Learn Microsoft Entra access reviews with practical guidance on security, governance, access control, implementation, and real-world use.</description></item><item><title>Microsoft 365 Maturity Model Based on 500 Tenant Audits</title><link>https://www.m365.fm/show/episodes/i-audited-500-m365-tenants-heres-the-maturity-formula/</link><guid>https://www.m365.fm/show/episodes/i-audited-500-m365-tenants-heres-the-maturity-formula/</guid><pubDate>Mon, 13 Apr 2026 00:00:00 -0000</pubDate><category>episode</category><description>This episode explores the Microsoft 365 maturity model through real-world insights gathered from auditing over 500 tenants. Instead of relying on theoretical frameworks, it uncovers how most organizations struggle with Microsoft 365 governance maturity…</description></item><item><title>Microsoft 365 Audit Readiness and Governance Debt</title><link>https://www.m365.fm/show/episodes/audit-ready-or-audit-panic-the-high-cost-of-governance-debt/</link><guid>https://www.m365.fm/show/episodes/audit-ready-or-audit-panic-the-high-cost-of-governance-debt/</guid><pubDate>Fri, 10 Apr 2026 00:00:00 -0000</pubDate><category>episode</category><description>Most Microsoft 365 environments don’t fail audits because of missing controls—they fail because of governance debt. Over time, quick fixes, unclear ownership, and poorly aligned operating models create hidden structural issues. These problems stay invisible…</description></item><item><title>Cloud Governance as Architecture, Not Feature Management</title><link>https://www.m365.fm/show/episodes/stop-managing-features-the-architectural-truth-about-cloud-governance/</link><guid>https://www.m365.fm/show/episodes/stop-managing-features-the-architectural-truth-about-cloud-governance/</guid><pubDate>Sun, 05 Apr 2026 00:00:00 -0000</pubDate><category>episode</category><description>This episode of the M365.fm podcast challenges a common misconception in cloud strategy: that managing features, tools, and configurations leads to control. Instead, it reveals that true cloud governance is an architectural discipline, not an operational…</description></item><item><title>Why Organizations Struggle with Effective Identity Governance</title><link>https://www.m365.fm/community/u/mirko-p/blog/why-organizations-struggle-with-effective-identity-governance/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/why-organizations-struggle-with-effective-identity-governance/</guid><pubDate>Sun, 22 Mar 2026 06:14:38 -0000</pubDate><category>article</category><description>Why Enterprise Identity Governance (IGA) Projects Fail. Learn why IGA initiatives falter, increasing breach risk. Improve compliance, audit trails, and reduce access risk.</description></item><item><title>The Microsoft 365 Governance Mistake 73% of Deployments Make</title><link>https://www.m365.fm/show/episodes/73-of-m365-deployments-make-this-governance-mistake/</link><guid>https://www.m365.fm/show/episodes/73-of-m365-deployments-make-this-governance-mistake/</guid><pubDate>Sun, 22 Mar 2026 00:00:00 -0000</pubDate><category>episode</category><description>This episode argues that the biggest governance mistake in Microsoft 365 isn’t misconfiguration—it’s timing. Most organizations treat governance as something to “add later,” but by doing that, they unintentionally design failure into the system from day one.…</description></item><item><title>Automate Microsoft 365 Administration and Governance</title><link>https://www.m365.fm/show/episodes/the-satisfying-downfall-of-manual-admin/</link><guid>https://www.m365.fm/show/episodes/the-satisfying-downfall-of-manual-admin/</guid><pubDate>Sat, 21 Mar 2026 00:00:00 -0000</pubDate><category>episode</category><description>You didn’t fail as an admin. The system failed because it needed you. After years of manual governance—access reviews, approvals, lifecycle policies—this episode exposes the uncomfortable truth: human-driven administration was never scalable in a...</description></item><item><title>Understanding the Governance Maturity Model for Microsoft</title><link>https://www.m365.fm/community/u/mirko-p/blog/understanding-the-governance-maturity-model-for-microsoft-/</link><guid>https://www.m365.fm/community/u/mirko-p/blog/understanding-the-governance-maturity-model-for-microsoft-/</guid><pubDate>Tue, 24 Feb 2026 11:53:59 -0000</pubDate><category>article</category><description>Explore the governance maturity model for Microsoft 365. Assess your competency using practical scenarios &amp; advance your model for Microsoft 365.</description></item><item><title>Secure AI Agents and Shadow IT in Microsoft 365</title><link>https://www.m365.fm/show/episodes/ai-agents-shadow-it-threats-and-governance/</link><guid>https://www.m365.fm/show/episodes/ai-agents-shadow-it-threats-and-governance/</guid><pubDate>Mon, 15 Dec 2025 00:00:00 -0000</pubDate><category>episode</category><description>Shadow IT didn’t disappear, it evolved into AI agents quietly moving your data faster than your controls can see. In this episode, we break down how AI agents, Copilot Studio bots, and Power Automate flows are becoming the new Shadow IT inside Microsoft 365.…</description></item><item><title>Harden Microsoft Teams Security and Guest Access</title><link>https://www.m365.fm/show/episodes/teams-security-hardening-best-practices/</link><guid>https://www.m365.fm/show/episodes/teams-security-hardening-best-practices/</guid><pubDate>Wed, 03 Dec 2025 00:00:00 -0000</pubDate><category>episode</category><description>Your “private” Microsoft Teams channels are quietly bleeding data – and default settings are to blame. In this episode, we walk through real-world incidents where dormant guest accounts, synced libraries, and careless PII pastes turned Teams into a silent…</description></item><item><title>Microsoft Teams Channels vs Chat: When to Use Each</title><link>https://www.m365.fm/show/episodes/youre-probably-using-teams-channels-wrong/</link><guid>https://www.m365.fm/show/episodes/youre-probably-using-teams-channels-wrong/</guid><pubDate>Mon, 03 Nov 2025 00:00:00 -0000</pubDate><category>episode</category><description>Microsoft Teams channels are one of the most powerful yet misunderstood features in the entire Teams platform, and using them correctly can make or break your organization’s communication. In this episode, we dive into how Teams channels actually work, why…</description></item><item><title>Reduce SharePoint Premium SAM and PAYG AI Costs</title><link>https://www.m365.fm/show/episodes/sharepoint-premium-is-not-what-you-think/</link><guid>https://www.m365.fm/show/episodes/sharepoint-premium-is-not-what-you-think/</guid><pubDate>Mon, 03 Nov 2025 00:00:00 -0000</pubDate><category>episode</category><description>SharePoint Premium with SharePoint Advanced Management (SAM) is the governance backbone that keeps Copilot from turning oversharing into a data leak. You’ll learn how to spot risky sites with Data Access Governance (DAG), lock down visibility with Restricted…</description></item><item><title>Use Entra ID Group Writeback for Legacy File Servers</title><link>https://www.m365.fm/show/episodes/your-ad-groups-are-a-lie-fix-source-of-authority-now/</link><guid>https://www.m365.fm/show/episodes/your-ad-groups-are-a-lie-fix-source-of-authority-now/</guid><pubDate>Mon, 03 Nov 2025 00:00:00 -0000</pubDate><category>episode</category><description>Most orgs still treat on-prem AD groups as sacred, syncing them to Entra ID and calling it “hybrid.” In reality, those objects are zombies: visible in Entra but ruled by on-prem, which blocks modern governance (dynamic membership, access reviews, APIs) and…</description></item></channel></rss>