This episode explores why so many organizations still depend on hidden “Excel shadow systems,” where critical processes are managed outside official Microsoft 365 tools. Rather than treating this as a user problem, the discussion frames it as a structural…
The episode argues that Power Platform itself is not the real risk—poor governance is. Many organizations blame low-code tools for creating chaos, but the issue actually comes from a lack of structure around how those tools are used. Shadow IT existed long…
Azure Bicep is far more than a cleaner replacement for ARM templates—it's an architectural approach to managing cloud infrastructure at enterprise scale. In this episode, we explore how Bicep enables organizations to build modular, reusable, and maintainable…
Shadow IT didn’t disappear, it evolved into AI agents quietly moving your data faster than your controls can see. In this episode, we break down how AI agents, Copilot Studio bots, and Power Automate flows are becoming the new Shadow IT inside Microsoft 365.…
This episode explores “structural debt” in Microsoft 365, showing how default governance settings—like open sharing and easy workspace creation—lead to long-term issues such as oversharing, content sprawl, and fragmented knowledge. It argues these problems…
This episode argues that the biggest governance mistake in Microsoft 365 isn’t misconfiguration—it’s timing. Most organizations treat governance as something to “add later,” but by doing that, they unintentionally design failure into the system from day one.…
Is Power Platform actually dangerous for the enterprise—or is that fear hiding a more uncomfortable truth? In this episode, we dismantle the question executives keep asking: “Is Power Platform secure enough?” The answer is sharper than most teams expect.…
This episode challenges one of the most common assumptions in the Microsoft ecosystem: 👉 “If it’s Microsoft, it must already be secure.” The reality is the opposite. Power Platform is enterprise-grade secure by design—but becomes risky the moment governance…
In this episode of the M365 FM Podcast, we explore one of the biggest hidden risks in modern data governance: shadow data. While Microsoft Purview provides powerful visibility into governed data sources, many organizations assume that what Purview cannot see…
Developers are drowning in Kubernetes, pipelines and compliance checklists instead of shipping features. This episode is for engineering leaders and platform teams who want to understand the DevOps tax and replace it with platform engineering, from golden…
This episode explains that most industry certifications validate task execution but not architectural authority, meaning many certified professionals never see the salary growth or career opportunities they expect. It argues that credential inflation has made…
“Zero Trust everywhere” and “freedom for everyone” both fail in production. One grinds work to a halt; the other invites disaster. In this workshop we show how top M365 orgs hit the operating sweet spot—where CISO, GDPR officer, and everyday users all win.…
Uncovering the Chaos: How to Find Shadow IT in Microsoft 365 · Mirko Peters Welcome back to the podcast and our ongoing deep dive into keeping your environments secure, manageable, and performing at their absolute best. If you manage a Micr…
Uncovering Shadow IT in Your Microsoft 365 Tenant · Mirko Peters Welcome back to the podcast and our companion deep-dive blog! If you have ever wondered what is really happening beneath the surface of your Microsoft 365 environme…
What Is Insider Risk Management? · Mirko Peters Learn what insider risk management means, how Microsoft Purview identifies risky behavior, and how organizations can respond while protecting user privacy.
Insider Risk and DLP · Mirko Peters Understand how insider risk and DLP work together to detect risky behavior, protect sensitive data, and improve Microsoft 365 security.
Microsoft 365 Governance Framework Explained · Mirko Peters Think of a Microsoft 365 governance framework as your organization’s master game plan for running Microsoft 365 securely, legally, and efficiently. It’s…
Frequently asked questions
Is Power Platform the cause of shadow IT?
No, the episode argues the real problem is poor governance. Shadow IT already existed through Excel, Access and macros, and Power Platform simply makes user-built solutions faster, more visible and easier to scale, which exposes existing weaknesses. · From the episode: Power Platform Governance Without Creating…
What is environment routing in Power Platform?
Environment routing directs makers to the right workspace automatically instead of letting everyone build in the default environment. It helps prevent shadow IT while still letting makers create solutions inside a controlled, isolated space. · From the episode: Power Platform Governance Without Creating…
What risks does shadow IT create in Power Platform?
Unmanaged apps, flows and reports can have security gaps, miss updates and proper checks, and be exploited by attackers. They can also break compliance rules, which matters especially in regulated industries. · From the episode: Power Platform Governance Without Creating…
Defaults can bring over-permissioned users, shadow IT, gaps in multi-factor authentication, incomplete backups and compliance blind spots. These everyday actions build up governance debt that is costly to retrofit later. · From the episode: Microsoft 365 Structural Debt from Default…
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Experts and companies for this topic
Nobody has listed this topic yet. Add it to your profile.
EN
Deutsch
Español
Français
Italiano
Português
Nederlands
Polski
Bahasa Indonesia
Русский
Українська
العربية
עברית
日本語
한국어