Episode Details

AI adoption is accelerating across every industry, but many organizations are still asking the same critical question: Are we truly ready for Microsoft Copilot? In this episode of the m365.fm podcast, Mirko Peters sits down with Microsoft MVP and MCT Åsne Holtklimpen to uncover the real truth about Microsoft Security, Copilot readiness, data governance, and why AI is exposing long-hidden problems inside Microsoft 365 environments.

MICROSOFT COPILOT IS NOT CREATING SECURITY RISKS — IT IS REVEALING THEM

This episode goes far beyond the usual AI buzzwords. Instead of focusing only on productivity gains, Åsne explains why organizations must first understand their data, secure their environments, and establish proper governance before fully embracing Microsoft Copilot, AI agents, and automation tools. From SharePoint oversharing to sensitivity labels, Purview, Conditional Access, and Zero Trust strategies, this conversation is packed with practical insights for IT leaders, Microsoft 365 administrators, CIOs, CISOs, consultants, and business decision-makers. Åsne shares real-world experiences from working with organizations across the Nordic region, helping companies prepare their Microsoft 365 tenants for AI adoption while balancing productivity with security and compliance. The discussion highlights one important reality: Copilot does not create security problems — it exposes the problems that already exist. Overexposed SharePoint sites, outdated files, broken permissions, forgotten Teams channels, and uncontrolled sharing become significantly more visible once AI tools can access organizational data at scale.

HOW MICROSOFT PURVIEW, SENSITIVITY LABELS, AND DLP SUPPORT AI SECURITY

The conversation also dives deep into why Microsoft Purview plays a crucial role in modern AI governance. Åsne explains how sensitive information types, sensitivity labels, Data Loss Prevention (DLP), Conditional Access policies, and SharePoint governance can help organizations secure their data before enabling Copilot across the enterprise. If your company is discussing Copilot readiness, AI governance, or Microsoft Security strategies, this episode provides an honest and practical roadmap for getting started the right way.

THE HIDDEN DANGERS OF SHAREPOINT AND TEAMS OVERSHARING

One of the biggest takeaways from this episode is that “Copilot readiness” is really a Microsoft 365 data governance challenge. Organizations that spent years oversharing files, migrating content during the pandemic, and creating uncontrolled collaboration environments are now facing the reality that AI can quickly surface sensitive or outdated information. Åsne explains why proper governance, classification, cleanup, and ownership are no longer optional — they are foundational requirements for secure AI adoption. The discussion also explores how forgotten Teams sites, unused SharePoint folders, and legacy collaboration environments create serious exposure risks. Many companies still have sharing links active from years ago, with no ownership or lifecycle strategy in place. AI tools can amplify these problems if organizations fail to clean up their Microsoft 365 environments before enabling Copilot.

ZERO TRUST, CONDITIONAL ACCESS, AND MODERN MICROSOFT SECURITY STRATEGIES

 Mirko and Åsne discuss why Zero Trust security principles are more important than ever in the AI era. Organizations must move beyond traditional perimeter security and start protecting identities, devices, data, and access policies holistically. The episode highlights how Conditional Access policies combined with Purview sensitivity labels can significantly reduce the risk of unauthorized access to sensitive information. The conversation also covers why many organizations still struggle with basic security practices such as MFA enforcement, secure identity management, and endpoint governance. Wit