AI Governance and Data Security Show

About AI Governance and Data Security Show

Formerly All Things M365 Compliance. Same hosts, expanded focus. Welcome to the AI Governance & Data Security Show. This channel helps organisations securely adopt AI, govern their data, and manage generative AI risk in the modern workplace. Hosted by Nikki Chapple, Principal Cloud Architect at CloudWay and Microsoft MVP, and Ryan John Murphy, Data Security Specialist at Microsoft and former Microsoft MVP, the show delivers practical insight grounded in real-world experience. Each episode focuses on challenges such as data oversharing, securing AI applications and agents, managing insider

Publisher

Ryan Murphy; Nikki Chapple

Category

technology

Language

en

Explicit

No

First episode

20 Jul 2022

Latest episode

19 Aug 2026

Latest episodes

47 episodes in the feed.

1. 

   19 Aug 2026

   EP6 - Governing Copilot with Sensitivity Labels, DLP & Microsoft Purview

   How do you secure Microsoft 365 Copilot without blockingproductivity? In Episode 6 of the AI Governance & Data Security Show, Nikki Chapple and Ryan John Murphy are joined by Johnny Sheehan, Microsoft MVP and AI security specialist, to explore how Microsoft Purview, Sensitivity Labels and Data Loss Prevention (DLP) can help organisations secure Copilot while enabling safe and productive AI adoption. Do you really need to label every file before you can trustMicrosoft 365 Copilot? The answer is more nuanced. In this episode, we explore how Copilot uses permissions andsensitivity labels, why encryption and extract rights matter, where DLP fits into the picture, and how organisations can take a practical, risk-based approach to AI governance without falling into "analysis paralysis". We also discuss Microsoft Purview's evolving capabilities,including Label Groups, SharePoint labelling, DSPM for AI, Adaptive Scopes and Block Content Analysis Service, and how these controls can help organisations build the trusted data foundation needed for Copilot andagent-based AI. In This Episode ✅ How Microsoft 365 Copilot uses permissions and sensitivity labels ✅ Do you really need to label everything before deploying Copilot? ✅ Why encryption settings and extract rights matter ✅ How Sensitivity Labels and DLP work together ✅ Common mistakes when designing sensitivity label taxonomies ✅ How to avoid "analysis paralysis" when preparing for AI ✅ Label Groups vs Sub Labels explained ✅ SharePoint and auto-labelling strategies ✅ Using DSPM for AI to discover and manage AI-related risks ✅ Practical guidance for securing Copilot and agent-based AI ✅ Why AI governance should accelerate adoption, not slow it down Key Takeaway AI governance isn't about blocking users or labellingeverything. It's about implementing the right combination of visibility,governance and evidence to create trusted data that enables secure AI adoption. Guest: Johnny Sheehan 🎙️ Johnny Sheehan Dual Microsoft MVP | Founder & Principal Consultant, SecureAi AI Security Specialist LinkedIn: https://www.linkedin.com/in/johnny-sheehan-68331819/ (https://www.linkedin.com/in/johnny-sheehan-68331819/) SecureAi: https://secureai.ie/ (https://secureai.ie/) Resources Microsoft Purview: Manage data security and compliancefor Microsoft 365 Copilot and Microsoft 365 Copilot Chathttps://learn.microsoft.com/en-us/purview/ai-m365-copilot (https://learn.microsoft.com/en-us/purview/ai-m365-copilot) Microsoft Purview: Data security and complianceprotections for generative AI appshttps://learn.microsoft.com/en-us/purview/ai-microsoft-purview (https://learn.microsoft.com/en-us/purview/ai-microsoft-purview) About the AI Governance & Data Security Show The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information and reduce risk across Microsoft 365. Hosted by: 🎙️ Nikki ChapplePrincipal Cloud Architect | Microsoft MVPLinkedIn: https://www.linkedin.com/in/nikkichapple/ (https://www.linkedin.com/in/nikkichapple/) 🎙️ Ryan John MurphyData Security Specialist | MicrosoftLinkedIn: https://www.linkedin.com/in/ryanjmurphym365consultant/ (https://www.linkedin.com/in/ryanjmurphym365consultant/) Subscribe for practical discussions about: 🔐 Microsoft Purview🤖 Microsoft 365 Copilot ✅ AI Governance 🛡️Data Security🚨 Insider Risk Management📋Data Loss Prevention🏷️ Information Protection📊 Compliance & Risk Management🤝Agent Governance 👍 If you found this episode useful, like, subscribe and share it with colleagues who are preparing for Microsoft 365 Copilot or agent-based AI. 💬 What approach is your organisation taking to Sensitivity Labels and Copilot? Leave your thoughts or questions in the comments. #MicrosoftPurview #Microsoft365Copilot #AIGovernance#DataSecurity #DLP #SensitivityLabels #DSPM #TrustedData

2. 

   12 Aug 2026

   EP5 - Purview Referential Architecture Explained

   In this episode of the AI Governance & Data Security Show, hosts Nikki Chapple and Ryan John Murphy are joined by Maxime Bombardier, Principal Product Manager on Microsoft Engineering, to discuss Microsoft Purview Referential Architecture Diagrams (https://techcommunity.microsoft.com/blog/microsoft-purview-blog/microsoft-purview-referential-architecture-diagrams/4510925) and why they matter for real-world data security deployments. Purview is powerful, but many deployments stall because teams understand the individual workloads without seeing how the full system fits together. In this episode, Maxime explains how the referential architecture diagrams were created from field pressure, customer questions, and the need to help teams move from scattered documentation to a shared visual model. Nikki and Ryan bring the practitioner and field perspective, exploring why these diagrams have resonated with customers, partners, MVPs, and security teams. The conversation covers classification, sensitivity labels, endpoint DLP, SharePoint, browser DLP, Insider Risk, and Copilot, with a strong focus on what architects and admins need to understand before deploying at scale. Whether you are responsible for Microsoft Purview, Microsoft 365 Copilot, AI Governance, Data Security, Compliance, Risk Management, or Information Protection, this episode provides practical insights and real-world guidance. In This Episode ✅ Why classification is the foundation for almost everything else in Microsoft Purview ✅ How sensitivity labels act as a control plane, training mechanism, and security layer ✅ Why default labelling and service-side labelling are becoming critical for Copilot readiness ✅ How endpoint DLP testing, policy sync, and JIT are commonly misunderstood ✅ How SharePoint, browser DLP, Insider Risk, and Copilot connect across the data security ecosystem ✅ Why prompt-level protection and label-based Copilot controls behave differently ✅ How referential architecture diagrams help teams train, troubleshoot, and deploy faster ✅ Why visibility, governance, and evidence are essential for trusted data in the AI era Key Takeaway The key message from this episode is that Purview deployment success depends on understanding the system, not just configuring individual features. Classification helps organisations know their data, labels provide a consistent control plane, and DLP, Insider Risk, SharePoint, endpoint, browser, and Copilot controls all build on that foundation. The referential architecture diagrams give teams a practical map for making better design decisions and accelerating secure deployment Guests Maxime Bombardier (https://www.linkedin.com/in/maximebombardier/ ) Principal Product Manager, Microsoft Engineering Resources 🔗 Microsoft Purview ReferentialArchitecture Diagrams | Microsoft Community Hub (https://techcommunity.microsoft.com/blog/microsoft-purview-blog/microsoft-purview-referential-architecture-diagrams/4510925) About the AI Governance & Data Security Show The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information, and reduce risk across Microsoft 365. Hosted by: 🎙️ Nikki Chapple (https://www.linkedin.com/in/nikkichapple/) | Principal Cloud Architect, CloudWay | Microsoft MVP 🎙️ Ryan John Murphy (https://www.linkedin.com/in/ryanjmurphym365consultant/)| Data Security Specialist, Microsoft Subscribe for discussions on:🔐 Microsoft Purview 🤖 Microsoft 365 Copilot· ✅ AI Governance· 🛡️ Data Security 🚨 Insider Risk Management 📋 Data Loss Prevention(DLP) 🏷️ InformationProtection 📊 Compliance & RiskManagement 👍 If you found this episode useful, please like, subscribe and share it with your colleagues. 💬 Have questions or feedback? Leave a comment below.

3. 

   22 Jul 2026

   EP4- Microsoft Purview DSPM: See Your Data Risks with Anders Olsson

   In this episode of the AI Governance & Data Security Show, hosts Nikki Chapple (https://www.linkedin.com/in/nikkichapple/) and Ryan John Murphy (https://www.linkedin.com/in/ryanjmurphym365consultant/) are joined by Anders Olsson (https://www.linkedin.com/in/mranders/), Data Security Specialist at Onevinn, to explore Microsoft Purview Data Security Posture Management (DSPM) and how organisations can gain greater visibility into their data risks. As organisations adopt Microsoft 365 Copilot and other AI technologies, understanding where sensitive data exists, who can access it, how it is being used, and where the greatest risks lie has never been more important. Microsoft Purview DSPM brings together insights from Microsoft 365, AI applications, endpoints, user activity, data classification, and security controls to help organisations identify, prioritise, and reduce risk. In this conversation, we discuss how DSPM supports data security, compliance, and AI governance initiatives by providing visibility into oversharing, risky user activity, sensitive data exposure, Shadow AI usage, and information protection effectiveness. We also explore how DSPM works alongside Endpoint DLP, Activity Explorer, Defender for Cloud Apps, sensitivity labels, collection policies, and Microsoft Purview reporting to deliver actionable insights that support better security and governance decisions. Whether you're responsible for Microsoft Purview, Microsoft 365 Copilot, AI Governance, Data Security, Compliance, Risk Management, or Information Protection, this episode provides practical guidance for improving your organisation's data security posture. In This Episode ✅ What Microsoft Purview Data Security Posture Management (DSPM) is ✅ Why DSPM is about more than AI observability ✅ How to identify sensitive data risks across Microsoft 365 ✅ Reducing oversharing and improving data security posture ✅ Why classification, sensitivity labels, and sensitive information types still matter ✅ Improving data discovery through collection policies ✅ Monitoring Shadow AI and third-party AI applications with Endpoint DLP ✅ Using Activity Explorer to investigate risky data activity ✅ Prioritising remediation based on business risk ✅ Enabling better conversations between security teams and business owners Key TakeawayYou cannot protect what you cannot see.Microsoft Purview DSPM helps organisations understand and prioritise data risks by combining signals from sensitive data discovery, user activity, Data Loss Prevention (DLP), Insider Risk Management, AI usage, Endpoint DLP, and security recommendations. The real value comes from using that visibility to identify high-risk data, reduce oversharing, improve classification, engage business stakeholders, and take meaningful action to better protect sensitive information. Guest Anders Olsson - Data Security Specialist, Onevinn 🔗 LinkedIn: https://www.linkedin.com/in/mranders/ (https://www.linkedin.com/in/mranders/) Resources 🔗 Learn about Microsoft Purview Data Security Posture Management (DSPM) | Microsoft Learn (https://learn.microsoft.com/en-us/purview/data-security-posture-management-learn-about) 🔗 Get started with endpoint data loss prevention | Microsoft Learn (https://learn.microsoft.com/en-us/purview/endpoint-dlp-getting-started) About the AI Governance & Data Security Show The AI Governance & Data Security Show helps organisations securely adopt AI, protect sensitive data, govern information, and reduce risk across Microsoft 365. Hosted by: 🎙️ Nikki Chapple Principal Cloud Architect | Microsoft MVP 🔗 LinkedIn: Nikki Chapple | LinkedIn (https://www.linkedin.com/in/nikkichapple/) 🎙️ Ryan John Murphy Data Security Specialist | Microsoft 🔗 LinkedIn: Ryan John Murphy | LinkedIn (https://www.linkedin.com/in/ryanjmurphym365consultant/) Subscribe for discussions on: 🔐 Microsoft Purview 🤖 Microsoft 365 Copilot ✅ AI Governance 🛡️ Data Security 🚨 Insider Risk Management 📋 Data Loss Prevention (DLP) 🏷️ Information Protection 📊 Compliance & Risk Management 👍 If you found this episode useful, please like, subscribe and share it with your colleagues. 💬 Have questions, experiences, or feedback about Microsoft Purview DSPM? Leave a comment below .#MicrosoftPurview #DSPM #DataSecurity #AIGovernance #Microsoft365 #MicrosoftCopilot #InformationProtection #DataProtection #CyberSecurity #Compliance

Contact AI Governance and Data Security Show

Guest appearances

Books guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.