Episode Details

Artificial Intelligence is rapidly transforming the Microsoft 365 ecosystem. Organizations everywhere are deploying Microsoft Copilot, experimenting with AI agents, automating workflows, and integrating intelligent systems into their daily operations. But while companies are rushing toward AI adoption, most are overlooking one critical reality: their governance policies were never designed for AI. In this episode of the m365.fm podcast, Mirko Peters sits down with Microsoft Regional Director, MVP, collaboration strategist, and governance expert Christian Buckley to explore why traditional Microsoft 365 governance approaches are no longer enough in an AI-driven world. This conversation goes far beyond generic AI discussions and dives deep into the operational challenges organizations now face around permissions, compliance, information architecture, metadata, lifecycle management, Copilot readiness, and responsible AI adoption.

WHY AI CHANGES GOVERNANCE COMPLETELY

For years, governance inside Microsoft 365 focused primarily on collaboration management, SharePoint permissions, Teams provisioning, compliance controls, and external sharing. But AI changes the entire equation. Christian explains how tools like Microsoft Copilot can now surface information across multiple systems instantly, making old governance gaps far more visible than ever before. Content that technically existed inside Microsoft 365 for years — but remained difficult to discover — can suddenly become accessible through AI-powered discovery experiences. That creates major risks for organizations with:

• Poor permissions management
• Overshared Teams environments
• Broken SharePoint inheritance
• Unmanaged OneDrive content
• Inconsistent metadata structures

According to Christian, AI does not create governance problems. It exposes the governance problems organizations already had.

THE HIDDEN DANGER OF PERMISSIONS SPRAWL

One of the biggest topics throughout the episode is permissions sprawl inside Microsoft 365 environments. Over the years, many organizations accumulated forgotten sharing links, legacy SharePoint permissions, unused Teams workspaces, stale guest accounts, and poorly managed collaboration sites. Before AI, much of this remained hidden because users rarely searched deeply enough to accidentally discover sensitive information. But AI changes discoverability completely. Christian compares this shift to the original impact of Microsoft Delve, where users suddenly realized how much information they already had access to without understanding it beforehand. With Copilot and AI-powered search experiences, this effect becomes dramatically larger because intelligent systems can aggregate information, summarize documents, identify relationships, and surface hidden content instantly. This makes governance maturity one of the most important foundations for successful AI adoption. 

AI READINESS IS NOT ABOUT BUYING COPILOT LICENSES

One of the strongest points Christian makes during the episode is that AI readiness is not a licensing project. Organizations often believe they become “AI-ready” the moment they purchase Copilot licenses or deploy AI tooling. But true AI readiness requires clean permissions, structured content, metadata strategies, ownership models, governance automation, classification policies, compliance enforcement, and lifecycle management. Without these foundations, AI systems can become unreliable, risky, and difficult to control. Christian explains that many organizations are now being forced to solve governance problems they ignored for years because AI finally made those weaknesses impossible to hide. 

WHY INFORMATION ARCHITECTURE MATTERS MORE THAN EVER

Another major theme throughout the discussion is information architecture. Many organizations underestimate how important structured i