{"id":17754,"date":"2025-02-06T08:55:00","date_gmt":"2025-02-06T16:55:00","guid":{"rendered":"https:\/\/www.microsoft.com\/insidetrack\/blog\/?p=17754"},"modified":"2026-02-09T14:09:01","modified_gmt":"2026-02-09T22:09:01","slug":"how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/","title":{"rendered":"How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft"},"content":{"rendered":"\n<nav\n\tstyle=\"margin-top:0;margin-bottom:0;\" class=\"wp-block-inside-track-in-post-navigation\"\t>\n\t<button class=\"in-page-block__button\" aria-expanded=\"false\" aria-controls=\"in-page-block__list\">\n\t\tWhat this guide contains\t<\/button>\n\n\t<ul id=\"in-page-block__list\">\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"intro\" href=\"#intro\" style=\"\"><a href=\"#intro\"><strong>Introduction:<\/strong> Governance in the age of AI<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"chapter-1\" href=\"#chapter-1\" style=\"\"><a href=\"#chapter-1\"><strong>Chapter 1:<\/strong> Enable self-service<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"chapter-2\" href=\"#chapter-2\" style=\"\"><a href=\"#chapter-2\"><strong>Chapter 2:<\/strong> Establish container labels and set well-scoped, intuitive defaults<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"chapter-3\" href=\"#chapter-3\" style=\"\"><a href=\"#chapter-3\"><strong>Chapter 3:<\/strong> Derive file labels from parent containers<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"chapter-4\" href=\"#chapter-4\" style=\"\"><a href=\"#chapter-4\"><strong>Chapter 4: <\/strong>Train employees<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"chapter-5\" href=\"#chapter-5\" style=\"\"><a href=\"#chapter-5\"><strong>Chapter 5: <\/strong>Trust employees, but verify their work<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"chapter-6\" href=\"#chapter-6\" style=\"\"><a href=\"#chapter-6\"><strong>Chapter 6:<\/strong> Implement lifecycle management and attestation<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"chapter-7\" href=\"#chapter-7\" style=\"\"><a href=\"#chapter-7\"><strong>Chapter 7:<\/strong> Enable company-sharable links<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"chapter-8\" href=\"#chapter-8\" style=\"\"><a href=\"#chapter-8\"><strong>Chapter 8: <\/strong>Extract inventory to detect and report oversharing<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"conclusion\" href=\"#conclusion\" style=\"\"><a href=\"#conclusion\"><strong>Conclusion:<\/strong> The way forward<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t\t\t<li class=\" \" style=\"\">\n\t\t\t\t<a class=\"\" data-id=\"appendix\" href=\"#appendix\" style=\"\"><a href=\"#appendix\"><strong>Appendix: <\/strong>More resources for you<\/a><\/a>\n\t\t\t<\/li>\n\t\t\t<\/ul>\n<\/nav>\n\n\n\n<div class=\"wp-block-group aside-for-guide has-gray-1100-background-color has-background has-global-padding is-content-justification-right is-layout-constrained wp-container-core-group-is-layout-576308da wp-block-group-is-layout-constrained\" style=\"padding-top:var(--wp--preset--spacing--spacing-20);padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-6c531013 wp-block-group-is-layout-flex\">\n<h3 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-bottom:0\">Engage with our experts!<\/h3>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Customers or Microsoft account team representatives from Fortune 500 companies&nbsp;<a href=\"mailto:msitstaff@microsoft.com\">are welcome to request a virtual engagement<\/a>&nbsp;on this topic with experts from our Microsoft Digital team.&nbsp;<\/p>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"intro\">Governance in the age of AI<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Unlocking the next generation of productivity tools<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft 365 Copilot combines the power of large language models (LLMs) with your organization\u2019s data to turn employees\u2019 words into some of the most powerful productivity tools on the planet\u2014all within the flow of work. It suffuses the Microsoft 365 apps your people use every day, including Word, Excel, PowerPoint, Outlook, Teams, and more, to provide real-time intelligent assistance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Initial results from our Microsoft Digital team, the company\u2019s IT organization, and early adopters speak for themselves.<\/p>\n\n\n\n<div class=\"wp-block-group is-layout-grid wp-container-core-group-is-layout-9089f190 wp-block-group-is-layout-grid\" style=\"margin-bottom:0;padding-top:var(--wp--preset--spacing--spacing-20);padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-blue-1300-border-color is-layout-flow wp-container-core-group-is-layout-8ea50889 wp-block-group-is-layout-flow\" style=\"border-style:solid;border-radius:30px;margin-bottom:0;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<p class=\"has-text-align-center has-h-3-font-size wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-10)\"><strong>70%<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">of users said they were more productive at work.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-1300-border-color has-white-background-color has-background is-layout-flow wp-block-group-is-layout-flow\" style=\"border-style:solid;border-radius:30px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<p class=\"has-text-align-center has-h-3-font-size wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-10)\"><strong>64%<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">reported they spent less time processing email.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-1300-border-color has-white-background-color has-background is-layout-flow wp-block-group-is-layout-flow\" style=\"border-style:solid;border-radius:30px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<p class=\"has-text-align-center has-h-3-font-size wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-10)\"><strong>85%<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">shared that Copilot helps them get to a good first draft faster.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-1300-border-color has-white-background-color has-background is-layout-flow wp-block-group-is-layout-flow\" style=\"border-style:solid;border-radius:30px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<p class=\"has-text-align-center has-h-3-font-size wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-10)\"><strong>75%<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">highlighted time savings through improved document discovery.<\/p>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Source: <\/em><a href=\"https:\/\/www.microsoft.com\/en-us\/worklab\/work-trend-index\/copilots-earliest-users-teach-us-about-generative-ai-at-work\" target=\"_blank\" rel=\"noreferrer noopener\"><em>What can Copilot\u2019s earliest users teach us about AI at work?<\/em><\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Getting governance right<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">With all the opportunities AI presents, your organization might be in the process of implementing Microsoft 365 Copilot. But it\u2019s important to do that safely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Copilot combs through your organization\u2019s entire data estate in the blink of an eye, so the old method of security through obscurity doesn\u2019t cut it. You need to assert control over where data flows throughout your tenant so Copilot knows what it can and can\u2019t access or display.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To ensure that proper data hygiene extends to AI-powered workflows, Microsoft designed Copilot to respect the sensitivity labels and data loss prevention (DLP) controls that organizations configure in their Microsoft Azure environment. That way, administrators can be confident that the right people and apps have access to the data they need, and it doesn\u2019t appear where it shouldn\u2019t.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<strong><em>{<\/em><\/strong><em><u><a href=\"http:\/\/aka.ms\/msdaigovernance\" target=\"_blank\" rel=\"noreferrer noopener\">Download the eBook version of this Governance in the age of AI readiness guide.<\/a><\/u>}<\/em><\/p>\n\n\n\n<div class=\"wp-block-group has-gray-1100-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-eb0c3eea wp-block-group-is-layout-constrained\" style=\"padding-top:var(--wp--preset--spacing--spacing-20);padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<h3 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-bottom:0\">Learn from our Microsoft 365 Copilot experience<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We learned a lot as the first large enterprise to deploy Microsoft 365 Copilot. We used those learnings to create this deployment and adoption guide that you can use at your company\u2014check it out:<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/deploying-copilot-for-microsoft-365-in-four-chapters\/\">View our full Microsoft 365 Copilot deployment and adoption guide.<\/a>&nbsp;<a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/10\/Deploying-Microsoft-365-Copilot-in-four-chapters_EBOOK.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Download our eBook version.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/copilot-for-microsoft-365-for-executives-sharing-our-internal-deployment-and-adoption-journey-at-microsoft\/\">View a condensed version for executives.<\/a>&nbsp;<a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10633_Copilot_for_executives_eBook.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Download our eBook version.<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Our team in Microsoft Digital implemented a company-wide governance strategy to address this issue. In the process, we learned valuable lessons that will be useful to any organization using Copilot.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This guide outlines our process for implementing a governance strategy that delivers the benefits of Copilot to Microsoft employees while minimizing the risks and entryways into our data estate. It shares our internal learnings so our customers can get up and running while avoiding pitfalls or surprises.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Follow along to find out how you can safely and effectively deploy Copilot at your organization\u2014backed by rock-solid governance.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-text-align-center\">Principles for effective AI governance<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Use this set of tips to ground yourself as you read through this guide.<\/p>\n\n\n\n<div class=\"wp-block-group is-layout-grid wp-container-core-group-is-layout-478b6e6b wp-block-group-is-layout-grid\">\n<div class=\"wp-block-group has-border-color has-blue-900-border-color has-white-background-color has-background wp-container-content-d8344436 has-global-padding is-layout-constrained wp-container-core-group-is-layout-7dcf2f97 wp-block-group-is-layout-constrained\" style=\"border-radius:20px;padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">\n<div class=\"wp-block-columns are-vertically-aligned-center is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50px\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"512\" height=\"512\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/1.png\" alt=\"\" class=\"wp-image-17579\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/1.png 512w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/1-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/1-150x150.png 150w\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0\">Enable self-service<\/h4>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">Give employees the ability to create new workspaces across your Microsoft 365 applications. By maintaining all data on a unified Microsoft 365 tenant, you ensure that your governance strategy applies to any new workspaces.<br><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-900-border-color has-white-background-color has-background wp-container-content-d8344436 has-global-padding is-layout-constrained wp-container-core-group-is-layout-7dcf2f97 wp-block-group-is-layout-constrained\" style=\"border-radius:20px;padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">\n<div class=\"wp-block-columns are-vertically-aligned-center is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50px\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"512\" height=\"512\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/2.png\" alt=\"\" class=\"wp-image-17580\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/2.png 512w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/2-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/2-150x150.png 150w\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0\">Limit the number of information protection labels<\/h4>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">Limit your taxonomy to a maximum of five parent labels and five sub-labels. That way, employees won\u2019t feel overwhelmed by the volume of different options.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-900-border-color has-white-background-color has-background wp-container-content-d8344436 has-global-padding is-layout-constrained wp-container-core-group-is-layout-7dcf2f97 wp-block-group-is-layout-constrained\" style=\"border-radius:20px;padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">\n<div class=\"wp-block-columns are-vertically-aligned-center is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50px\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"512\" height=\"512\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/3.png\" alt=\"\" class=\"wp-image-17581\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/3.png 512w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/3-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/3-150x150.png 150w\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0\">Use intuitive labels that mean what they say<\/h4>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">Make your labels simple and legible. For example, a \u201cbusiness-critical\u201d label might imply confidentiality, but every employee\u2019s work feels critical to them. On the other hand, there\u2019s very little doubt about what \u201chighly confidential\u201d or \u201cpublic\u201d mean.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-900-border-color has-white-background-color has-background wp-container-content-d8344436 has-global-padding is-layout-constrained wp-container-core-group-is-layout-7dcf2f97 wp-block-group-is-layout-constrained\" style=\"border-radius:20px;padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">\n<div class=\"wp-block-columns are-vertically-aligned-center is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50px\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"512\" height=\"512\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/4.png\" alt=\"\" class=\"wp-image-17582\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/4.png 512w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/4-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/4-150x150.png 150w\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0\">Capture container labels for groups and sites<\/h4>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">Label your data containers for segmentation to ensure your data isn\u2019t overexposed by default. Consider setting your container label defaults to the \u201cPrivate: no guests\u201d setting.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-900-border-color has-white-background-color has-background wp-container-content-d8344436 has-global-padding is-layout-constrained wp-container-core-group-is-layout-7dcf2f97 wp-block-group-is-layout-constrained\" style=\"border-radius:20px;padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">\n<div class=\"wp-block-columns are-vertically-aligned-center is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50px\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"512\" height=\"512\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/5.png\" alt=\"\" class=\"wp-image-17584\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/5.png 512w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/5-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/5-150x150.png 150w\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0\">Derive file labels from parent containers<\/h4>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">Classify files according to their parent containers. That consistency boosts security at multiple levels and ensures that deviations from the default are exceptions, not the norm.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-900-border-color has-white-background-color has-background wp-container-content-d8344436 has-global-padding is-layout-constrained wp-container-core-group-is-layout-7dcf2f97 wp-block-group-is-layout-constrained\" style=\"border-radius:20px;padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">\n<div class=\"wp-block-columns are-vertically-aligned-center is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50px\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"512\" height=\"512\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/6.png\" alt=\"\" class=\"wp-image-17585\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/6.png 512w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/6-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/6-150x150.png 150w\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0\">Train employees<\/h4>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">Train your employees to handle and label sensitive data to increase accuracy and ensure they recognize labeling cues across your productivity suite.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-900-border-color has-white-background-color has-background wp-container-content-d8344436 has-global-padding is-layout-constrained wp-container-core-group-is-layout-7dcf2f97 wp-block-group-is-layout-constrained\" style=\"border-radius:20px;padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">\n<div class=\"wp-block-columns are-vertically-aligned-center is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50px\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"512\" height=\"512\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/7.png\" alt=\"\" class=\"wp-image-17586\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/7.png 512w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/7-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/7-150x150.png 150w\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0\">Trust employees, but verify their work<\/h4>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">Trust your employees to apply sensitivity labels, but also verify them. Check against DLP standards and use auto-labeling and quarantining through Microsoft Purview automation.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-900-border-color has-white-background-color has-background wp-container-content-d8344436 has-global-padding is-layout-constrained wp-container-core-group-is-layout-7dcf2f97 wp-block-group-is-layout-constrained\" style=\"border-radius:20px;padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">\n<div class=\"wp-block-columns are-vertically-aligned-center is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50px\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"468\" height=\"468\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/8.png\" alt=\"\" class=\"wp-image-17587\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/8.png 468w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/8-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/8-150x150.png 150w\" sizes=\"auto, (max-width: 468px) 100vw, 468px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0\">Implement lifecycle management and attestation<\/h4>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">Use strong lifecycle management policies that require employees to attest containers, creating a chain of accountability.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-900-border-color has-white-background-color has-background wp-container-content-d8344436 has-global-padding is-layout-constrained wp-container-core-group-is-layout-7dcf2f97 wp-block-group-is-layout-constrained\" style=\"border-radius:20px;padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">\n<div class=\"wp-block-columns are-vertically-aligned-center is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50px\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"468\" height=\"468\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/9.png\" alt=\"\" class=\"wp-image-17588\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/9.png 468w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/9-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/9-150x150.png 150w\" sizes=\"auto, (max-width: 468px) 100vw, 468px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0\">Enable company-sharable links<\/h4>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">Limit oversharing at the source by enabling company-shareable links rather than forcing employees to add large groups for access. For highly confidential items, limit sharing to employees on a need-to-know basis.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-border-color has-blue-900-border-color has-white-background-color has-background wp-container-content-d8344436 has-global-padding is-layout-constrained wp-container-core-group-is-layout-7dcf2f97 wp-block-group-is-layout-constrained\" style=\"border-radius:20px;padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">\n<div class=\"wp-block-columns are-vertically-aligned-center is-not-stacked-on-mobile is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:50px\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1941\" height=\"1941\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10.png\" alt=\"\" class=\"wp-image-17589\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10.png 1941w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10-1024x1024.png 1024w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10-150x150.png 150w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10-768x768.png 768w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10-1536x1536.png 1536w\" sizes=\"auto, (max-width: 1941px) 100vw, 1941px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h4 class=\"wp-block-heading\" style=\"margin-top:0;margin-bottom:0\">Extract inventory to detect and report oversharing<\/h4>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-8);padding-bottom:var(--wp--preset--spacing--spacing-8)\">Use Microsoft Graph Data Connect extraction in conjunction with Microsoft Purview to catch and report oversharing after the fact. When you find irregularities, contain the vulnerability or require the responsible party to repair it themselves.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-top has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-65eef5bf wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"125\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_How-We-Did-it.png\" alt=\"\" class=\"wp-image-18136\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>How we did it at Microsoft<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use these assets to guide you&nbsp;our own journey\u2014they represent how we did things here in Microsoft Digital.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/getting-the-most-out-of-generative-ai-at-microsoft-with-good-governance\/\">Find out how we governed our deployment of Microsoft 365 Copilot.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/copilot-for-microsoft-365-for-executives-sharing-our-internal-deployment-and-adoption-journey-at-microsoft\/\">View our condensed, CIO version of our Microsoft 365 Copilot deployment guide.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/the-ai-revolution-how-microsoft-digital-it-is-responding-with-an-ai-center-of-excellence\/\">Learn how we\u2019re responding to the AI revolution with a Center of Excellence.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"126\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_More-Guidance.png\" alt=\"\" class=\"wp-image-18137\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>More guidance for you<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are more assets that we found useful.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/copilot-for-microsoft-365\/how-to-prepare-for-microsoft-365-copilot\/ba-p\/3851566\" target=\"_blank\" rel=\"noreferrer noopener\">Get an overview of pre-deployment preparation for Microsoft 365 Copilot<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/microsoft-365-copilot\/your-path-to-value-with-copilot-for-microsoft-365\/ba-p\/4078744\" target=\"_blank\" rel=\"noreferrer noopener\">Learn about our Copilot Success Kit, a one-stop shop for most of our Copilot deployment and adoption resources.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.youtube.com\/watch?v=RO5uLlDFd1k\" target=\"_blank\" rel=\"noreferrer noopener\">Watch a presentation from the Microsoft 365 Community Conference about governance and administration at Microsoft in the era of Copilot.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"chapter-1\">Chapter 1: Enable self-service<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Applying self-service principles to the way we manage labeling and governance emerged as a crucial step for us.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Secure self-service that empowers employees<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Self-service is a core tenet of employee empowerment here at Microsoft. We want to give every employee the independence to create the resources they need without engaging IT. But that level of freedom relies on ensuring our Microsoft Digital governance team identifies and protects valuable data. As a result, our employees can implement and own the containers, workspaces, and content they need to do their work productively.&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-group has-teal-300-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-12bf26e4 wp-block-group-is-layout-constrained\" style=\"border-style:none;border-width:0px;padding-top:0;padding-right:0;padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-24)\">\n<p class=\"has-white-200-background-color has-background wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-16);padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:var(--wp--preset--spacing--spacing-16);padding-left:var(--wp--preset--spacing--spacing-10)\">A container or workspace is a logical unit of content storage associated with a designated roster of collaborators. Common containers include SharePoint sites, Viva Engage communities, Outlook groups, and Teams channels.<\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Self-service forms the foundation of our entire governance strategy. Employees can create workspaces and content across many of the Microsoft tools they use for their day-to-day work, including SharePoint, OneDrive, Teams, and Power Platform. That freedom enables a culture of innovation and agility, where people can work together across teams and geographies without encountering \u201cIT gating,\u201d the need for IT to get involved in enabling day-to-day activities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By encouraging collaboration in place, our tenant structure frees employees from resorting to email attachments or working in overly broad and open workspaces. As an IT team ourselves, we understand the value of eliminating IT gating for minimizing the time and effort our professionals need to invest in keeping employees productive.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This kind of data hygiene isn\u2019t just about Microsoft 365 Copilot. It maintains data security and compliance wherever employees access company content and information. But because Copilot depends on the ability to access an organization\u2019s data estate, good governance is essential for keeping it within bounds\u2014especially in a self-service culture.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-text-align-center\">Pillars of our asset governance<\/h3>\n\n\n\n<div class=\"wp-block-group is-layout-grid wp-container-core-group-is-layout-478b6e6b wp-block-group-is-layout-grid\">\n<div class=\"wp-block-group has-teal-500-color has-teal-300-background-color has-text-color has-background has-link-color wp-elements-d4ab1322f26e27252273bd9f4387d1dd is-layout-flow wp-container-core-group-is-layout-40bc1974 wp-block-group-is-layout-flow\" style=\"border-radius:0px;padding-top:var(--wp--preset--spacing--spacing-20);padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"661\" height=\"661\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Empower-Employees_icon.png\" alt=\"\" class=\"wp-image-17591\" style=\"width:65px\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Empower-Employees_icon.png 661w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Empower-Employees_icon-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Empower-Employees_icon-150x150.png 150w\" sizes=\"auto, (max-width: 661px) 100vw, 661px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\"><strong>Empower employees<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Support self-service creation<\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Use lifecycle management<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-teal-500-color has-teal-300-background-color has-text-color has-background has-link-color wp-elements-95abbbd0bc76e44fb9adc27e866a8da3 is-layout-flow wp-container-core-group-is-layout-40bc1974 wp-block-group-is-layout-flow\" style=\"border-radius:0px;padding-top:var(--wp--preset--spacing--spacing-20);padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"661\" height=\"661\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Identify_value_icon.png\" alt=\"\" class=\"wp-image-17592\" style=\"width:65px\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Identify_value_icon.png 661w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Identify_value_icon-300x300.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Identify_value_icon-150x150.png 150w\" sizes=\"auto, (max-width: 661px) 100vw, 661px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\"><strong>Identifying valuable and vulnerable content<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Require classification for containers<\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Scan with Microsoft Purview Data Loss Prevention (DLP)<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-teal-500-color has-teal-300-background-color has-text-color has-background has-link-color wp-elements-7a5bce4ed5a9771ce52e394779b07e6e is-layout-flow wp-container-core-group-is-layout-40bc1974 wp-block-group-is-layout-flow\" style=\"border-radius:0px;padding-top:var(--wp--preset--spacing--spacing-20);padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"528\" height=\"661\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Protect_assets_icon.png\" alt=\"\" class=\"wp-image-17593\" style=\"width:auto;height:65px\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Protect_assets_icon.png 528w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Protect_assets_icon-240x300.png 240w\" sizes=\"auto, (max-width: 528px) 100vw, 528px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\"><strong>Protect assets<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Limit reach<\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Enforce policy<\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Use conditional access or multi-factor authentication<\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Microsoft Purview Information Protection<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-teal-500-color has-teal-300-background-color has-text-color has-background has-link-color wp-elements-36afc39bb34d3a43db3f7a3c4a1e0a1b is-layout-flow wp-container-core-group-is-layout-40bc1974 wp-block-group-is-layout-flow\" style=\"border-radius:0px;padding-top:var(--wp--preset--spacing--spacing-20);padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"661\" height=\"483\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Ensure_accountability_icon.png\" alt=\"\" class=\"wp-image-17594\" style=\"width:auto;height:65px\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Ensure_accountability_icon.png 661w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Ensure_accountability_icon-300x219.png 300w\" sizes=\"auto, (max-width: 661px) 100vw, 661px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\"><strong>Ensure accountability<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Manage group or site ownership<\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Review external membership<\/p>\n\n\n\n<p class=\"has-text-align-left wp-block-paragraph\" style=\"margin-top:var(--wp--preset--spacing--spacing-8)\">Generate reports<\/p>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"margin-top:0;padding-top:0\"><em>Microsoft Digital\u2019s asset governance strategy rests on four pillars: Empowering employees, identifying valuable and vulnerable content, protecting our assets, and ensuring accountability.<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Responsible self-service<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"padding-top:0\">Self-service container creation has abundant benefits, but it also poses some challenges for content governance and security\u2014things like oversharing, unneeded asset sprawl, and data leakage. To address these challenges, our Microsoft Digital governance team has established self-service principles that balance the needs of employees and the company.<\/p>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>We empower with accountability<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Accountability has responsibility. Any full-time employee can create a workspace, but they\u2019re responsible for re-attesting its compliance every six months to ensure it meets our governance requirements. They also need to attest that they still require and maintain the resource. They need to manage their own content and ensure it\u2019s properly classified, labeled, and secured. The content\u2019s accountable owner makes any decisions about the workspace with respect to reach or the desire to maintain it. That removes any guesswork for IT about whether a site is still valued and cared for.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>We empower with guardrails<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We secure assets by default and expand access based on employee needs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>We trust, but we also verify<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Information Protection (MIP) sensitivity labels and Purview DLP act as guardrails for employee-led governance efforts.<\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">As we in Microsoft Digital have worked to improve the company\u2019s overall governance posture, we\u2019ve learned several important lessons. When you consider self-service container creation, there are a few questions to ask yourself:<\/p>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-6c531013 wp-block-group-is-layout-flex\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-a072189174537c82e3dd0a5d8719e75f has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">1<\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Who do you trust to create containers?<\/strong> At Microsoft, we reserve complete self-service capabilities for full-time employees. Then, we configure those privileges in Microsoft Entra ID to define who can create Microsoft 365 Groups. These users need to take relevant trainings, and we hold them accountable for the containers they create.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-6c531013 wp-block-group-is-layout-flex\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-e790741e588fe1315022fe296b053c37 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">2<\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Where does employee self-service make sense?<\/strong> Different employees will require self-service in different environments. Will yours need to operate within SharePoint? Power Platform? Teams?<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-6c531013 wp-block-group-is-layout-flex\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-7afb54dd159f73a6786513549dfa92b5 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">3<\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What are your lifecycle rules? <\/strong>Think about your policies and rule sets. Who\u2019s accountable? What does the lifecycle look like?<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-6c531013 wp-block-group-is-layout-flex\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-b3a586c048afd1e84c92325d04805921 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">4<\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What are your naming rules? <\/strong>A clear taxonomy can act as an extra signpost and organizational driver for your users. It can also be useful to think through what names are explicitly helpful or obscure. At Microsoft, we use a blocked word list, but we don\u2019t prefix or suffix all groups or site names to avoid overloading the employee experience.<\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">When you\u2019ve settled on degrees of autonomy and where to apply it, you can begin your AI governance journey. <a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/sensitivity-labels-teams-groups-sites\" target=\"_blank\" rel=\"noreferrer noopener\">Find out how to configure containers for self-service here<\/a>.<\/p>\n\n\n\n<div class=\"wp-block-group has-border-color has-teal-500-border-color has-global-padding is-layout-constrained wp-container-core-group-is-layout-027a824a wp-block-group-is-layout-constrained\" style=\"border-width:3px;border-radius:20px;margin-top:var(--wp--preset--spacing--spacing-24);margin-bottom:var(--wp--preset--spacing--spacing-16);padding-top:var(--wp--preset--spacing--spacing-24);padding-right:var(--wp--preset--spacing--spacing-24);padding-bottom:var(--wp--preset--spacing--spacing-24);padding-left:var(--wp--preset--spacing--spacing-24)\">\n<h3 class=\"wp-block-heading has-text-align-left has-h-5-font-size\" style=\"margin-top:0\">Learning from our self-service principles<\/h3>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-25e6b0859250088357e219d98ea43265\">Front-end load on building your strategy<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Put thought into your environment and tenant architecture, key personas, and scenarios before adoption.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-5ad0e2772e0debcd4859f2e03735bafe\">Account for hesitancy<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Understand that IT organizations have inherently cautious habits, and self-service might seem like a leap. As you lay out the business value for self-service container creation, illustrate the safety backstops as well. Also consider the risks if you don\u2019t take this step, like employees misusing existing sites or other means not supported by IT.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-990b366758f5c202b40cd40511287697\">Bring leadership on board<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Make the business case and offer reassurances that greater flexibility doesn\u2019t equal greater vulnerability.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-d6bfabfef2d957c0999123922c10fae6\">Assess your current setup<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Consider your existing data hygiene and how it needs to extend to accommodate AI.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-top has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-65eef5bf wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"125\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_How-We-Did-it.png\" alt=\"\" class=\"wp-image-18136\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>How we did it at Microsoft<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use these assets to guide you&nbsp;our own journey\u2014they represent how we did things here in Microsoft Digital.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\">d<a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/deploying-copilot-for-microsoft-365-in-four-chapters\/\">Check out our guide for deploying Microsoft 365 Copilot.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/copilot-for-microsoft-365-for-executives-sharing-our-internal-deployment-and-adoption-journey-at-microsoft\/\">View our condensed, CIO version of our Microsoft 365 Copilot deployment guide.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"126\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_More-Guidance.png\" alt=\"\" class=\"wp-image-18137\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>More guidance for you<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are more assets that we found useful.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/techcommunity.microsoft.com\/blog\/microsoft365copilotblog\/how-to-prepare-for-microsoft-365-copilot\/3851566\" target=\"_blank\" rel=\"noreferrer noopener\">Get an overview of pre-deployment preparation for Microsoft 365 Copilot.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/nam06.safelinks.protection.outlook.com\/?url=https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-365-copilot%2Fyour-path-to-value-with-copilot-for-microsoft-365%2Fba-p%2F4078744&amp;data=05%7C02%7Cv-pathompson%40microsoft.com%7Caf3d84d693ab40afa3ac08dd4626e9ae%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638743855129087858%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;sdata=WBVkWrI0tlMZAjgyx1qUfVs8GWCiaakdhh2A%2BXbfF%2F8%3D&amp;reserved=0\" target=\"_blank\" rel=\"noreferrer noopener\">Learn about our Copilot Success Kit, a one-stop shop for most of our Copilot deployment and adoption resources.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"chapter-2\">Chapter 2: Establish container labels and set well-scoped, intuitive defaults<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We developed healthy baseline practices to ensure both our employees and the resources that they work with are protected.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Balancing freedom with trust through an easy-to-use labeling taxonomy<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Self-service container creation forms the foundation of our employee-centric governance strategy. As part of that freedom, our Microsoft Digital governance team has established baseline protections inherent to all containers, and those protections depend on sensitivity labels. Microsoft 365 Copilot respects labels, so establishing effective labeling practices extends data security into our employees\u2019 AI usage.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Baseline labeling habits<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Employees need to label every container or workspace they create using Purview Information Protection (PIP) container labels. It\u2019s a matter of policy at Microsoft: If it isn\u2019t labeled, we delete it. We use container labeling for data delineation and to apply consistent protection and governance policies to containers based on their sensitivity and purpose. Microsoft labels break out into four different categories.<\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex has-1-columns\">\n<div class=\"wp-block-column is-layout-flow wp-container-core-column-is-layout-8a368f38 wp-block-column-is-layout-flow\">\n<h3 class=\"wp-block-heading has-text-align-center has-white-color has-purple-500-background-color has-text-color has-background has-link-color wp-elements-bb8ad7f8bf4f48d0c73f4fc0a5bd7dec\">Our container and file classification system<\/h3>\n\n\n\n<div class=\"wp-block-group has-purple-500-color has-magenta-100-background-color has-text-color has-background has-link-color wp-elements-60be239e6cd4cfee710829e8912befdb has-global-padding is-layout-constrained wp-container-core-group-is-layout-14a26bff wp-block-group-is-layout-constrained\" style=\"border-style:none;border-width:0px;margin-top:var(--wp--preset--spacing--spacing-2);margin-bottom:var(--wp--preset--spacing--spacing-2);padding-top:var(--wp--preset--spacing--spacing-2);padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<h4 class=\"wp-block-heading has-h-5-font-size\">Highly confidential<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">This is Our most critical data. Employees can only share this with specifically designated recipients.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-purple-500-color has-magenta-100-background-color has-text-color has-background has-link-color wp-elements-c5c0168905e0a333d1f8bc24f3e1847a has-global-padding is-layout-constrained wp-container-core-group-is-layout-14a26bff wp-block-group-is-layout-constrained\" style=\"border-style:none;border-width:0px;margin-top:var(--wp--preset--spacing--spacing-2);margin-bottom:var(--wp--preset--spacing--spacing-2);padding-top:var(--wp--preset--spacing--spacing-2);padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<h4 class=\"wp-block-heading has-h-5-font-size\">Confidential<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">This is sensitive business data that\u2019s crucial to achieving our goals. Employees should limit distribution to a need-to-know basis.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-purple-500-color has-magenta-100-background-color has-text-color has-background has-link-color wp-elements-27129deceb07f6fc21186bb7fce55ddd has-global-padding is-layout-constrained wp-container-core-group-is-layout-14a26bff wp-block-group-is-layout-constrained\" style=\"border-style:none;border-width:0px;margin-top:var(--wp--preset--spacing--spacing-2);margin-bottom:var(--wp--preset--spacing--spacing-2);padding-top:var(--wp--preset--spacing--spacing-2);padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<h4 class=\"wp-block-heading has-h-5-font-size\">General<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The \u201cGeneral\u201d label includes data we use and share throughout Microsoft, like personal settings and postal codes. They\u2019re visible internally throughout Microsoft.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-purple-500-color has-magenta-100-background-color has-text-color has-background has-link-color wp-elements-0e972493d093cc6be95da76799dc89c7 has-global-padding is-layout-constrained wp-container-core-group-is-layout-14a26bff wp-block-group-is-layout-constrained\" style=\"border-style:none;border-width:0px;margin-top:var(--wp--preset--spacing--spacing-2);margin-bottom:var(--wp--preset--spacing--spacing-2);padding-top:var(--wp--preset--spacing--spacing-2);padding-right:var(--wp--preset--spacing--spacing-20);padding-bottom:var(--wp--preset--spacing--spacing-20);padding-left:var(--wp--preset--spacing--spacing-20)\">\n<h4 class=\"wp-block-heading has-h-5-font-size\">Public<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Public data is unrestricted and suitable for open, external consumption. It includes open-source code or financials the company has announced. Employees can share this data freely.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Container labels provide two things:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">First, they drive user awareness over how to handle content. For example, if something is highly confidential, employees shouldn\u2019t talk about it in the caf\u00e9.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Second, they illustrate what data is appropriate for which container. In other words, they signal to an employee that they shouldn\u2019t store highly confidential documents on a general site.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Our Microsoft Digital governance team predefines and centrally manages labels to align them with broader MIP sensitivity levels used for email, files, meetings, and containers. Those include the same four categories: \u201chighly confidential,\u201d \u201cconfidential,\u201d \u201cgeneral,\u201d and \u201cpublic,\u201d although we don\u2019t use the latter for containers.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Matching labels with policies and protections<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Each label we\u2019ve defined has a set of protection settings that include policies around characteristics like guest allowance and membership openness. They also drive inherited file labeling, which we use for encryption.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At its core, container classification communicates four things:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><strong>Privacy level:<\/strong> Labels determine whether the workspace is broadly available internally or it\u2019s a private site.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><strong>External permissions:<\/strong> We administer guest allowance via the group\u2019s classification, allowing specified partners to access teams when appropriate.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><strong>Sharing guidelines<\/strong>: We tie important governance policies to the container\u2019s label. For example, can employees share this workspace outside Microsoft? Is this group limited to a specific division or team? Or is it restricted to specific people? The label establishes these rules.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><strong>Conditional access:<\/strong> While not implemented at Microsoft, tying identity and device verification to container labels introduces additional governance controls.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">After extensive experimentation, we arrived at our current schema for how container sensitivity labels align with MIP policies. Your organization might make different choices about your labels\u2019 relationships with information protection policies, but this can give you an idea of what a healthy governance ecosystem looks like.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-text-align-center\">Information protection container sensitivity labels<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"2815\" height=\"1454\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/02\/10616_Information_protection_container_sensitivity_labels_graphic.png\" alt=\"\" class=\"wp-image-18312\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/02\/10616_Information_protection_container_sensitivity_labels_graphic.png 2815w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/02\/10616_Information_protection_container_sensitivity_labels_graphic-300x155.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/02\/10616_Information_protection_container_sensitivity_labels_graphic-1024x529.png 1024w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/02\/10616_Information_protection_container_sensitivity_labels_graphic-768x397.png 768w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/02\/10616_Information_protection_container_sensitivity_labels_graphic-1536x793.png 1536w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/02\/10616_Information_protection_container_sensitivity_labels_graphic-2048x1058.png 2048w\" sizes=\"auto, (max-width: 2815px) 100vw, 2815px\" \/><figcaption class=\"wp-element-caption\"><em>Microsoft Digital\u2019s schema clearly delineates what each label means and how it affects content.<\/em><\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Building a process around employee ownership<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The labeling process works like this: When employees create a new container, they\u2019re responsible for selecting a container label that matches the sensitivity and purpose of the content they intend to store and share. By default, we lock new containers, which means that only the owner and members can access them. Locked containers prevent unauthorized or accidental access to their content.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Container owners can unlock the container if they need to share content with a broader audience within the organization or external partners. Container owners can also change the container label if the sensitivity or purpose of the content changes over time.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At Microsoft, this process provides the right combination of flexibility and protection while empowering employees with effective self-service.<\/p>\n\n\n\n<div class=\"wp-block-group has-border-color has-purple-500-border-color has-global-padding is-layout-constrained wp-container-core-group-is-layout-027a824a wp-block-group-is-layout-constrained\" style=\"border-width:3px;border-radius:20px;margin-top:var(--wp--preset--spacing--spacing-24);margin-bottom:var(--wp--preset--spacing--spacing-16);padding-top:var(--wp--preset--spacing--spacing-24);padding-right:var(--wp--preset--spacing--spacing-24);padding-bottom:var(--wp--preset--spacing--spacing-24);padding-left:var(--wp--preset--spacing--spacing-24)\">\n<h3 class=\"wp-block-heading has-text-align-left has-h-5-font-size\" style=\"margin-top:0\">Learning from our labeling practices<\/h3>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-purple-500-color has-text-color has-link-color wp-elements-088d8a9f1e8d6a1ed780cd059085a4f7\">Use intuitive labels<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Your employees will be the ones applying labels, so make those labels intuitive. For example, \u201chighly confidential\u201d is easy to understand, while \u201cbusiness-critical\u201d can be interpreted many ways from a sensitivity standpoint.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-purple-500-color has-text-color has-link-color wp-elements-bc04a877268397040c3bfe4933613173\">Make use of existing defaults<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Identify the security needs and regulatory compliance that are specific to your organization and use built-in governance controls available through Microsoft tools.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-purple-500-color has-text-color has-link-color wp-elements-0058585ef13c8e876d624bbdf3f546ec\">Limit the number of labels to 5&#215;5<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Keep labels minimal to avoid overtaxing your employees\u2019 understanding. We recommend restricting your labeling schema to no greater than five main labels with five sub-labels each\u2014and the fewer, the better!<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-purple-500-color has-text-color has-link-color wp-elements-2cf6340553f25626d60ac6419b0c1eaf\">Pilots are powerful<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Experiment with sensitivity labeling through a small group of early champions, then roll these features out alongside an adoption and education initiative.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-top has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-65eef5bf wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"125\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_How-We-Did-it.png\" alt=\"\" class=\"wp-image-18136\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>How we did it at Microsoft<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use these assets to guide you&nbsp;our own journey\u2014they represent how we did things here in Microsoft Digital.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-creates-self-service-sensitivity-labels-in-microsoft-365\/\">Learn how we create self-service sensitivity labels in Microsoft 365.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/empowering-employee-self-service-with-guardrails-how-were-using-sensitivity-labels-to-make-microsoft-more-secure\/\">Find out how we\u2019re using sensitivity labels to make Microsoft more secure.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"126\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_More-Guidance.png\" alt=\"\" class=\"wp-image-18137\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>More guidance for you<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are more assets that we found useful.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/sensitivity-labels\" target=\"_blank\" rel=\"noreferrer noopener\">Find information about getting started with sensitivity labels.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"chapter-3\">Chapter 3: Derive file labels from parent containers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We&#8217;re using default file-labeling based on container labels to help our teams stay consistent with how they create and store resources that they work on. Here&#8217;s how that looks for our employees:<\/p>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-947e61e1 wp-block-group-is-layout-flex\" style=\"padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-a072189174537c82e3dd0a5d8719e75f has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">1<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<p class=\"wp-block-paragraph\">SharePoint and other containers support default library labels, which we configure to align with the container label through mapping we define in Purview.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-947e61e1 wp-block-group-is-layout-flex\" style=\"padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-e790741e588fe1315022fe296b053c37 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">2<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<p class=\"wp-block-paragraph\">For instances where we need to define default library labels for tools that don\u2019t have container labels, like OneDrive for Business, we create custom scripts.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-947e61e1 wp-block-group-is-layout-flex\" style=\"padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-7afb54dd159f73a6786513549dfa92b5 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">3<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<p class=\"wp-block-paragraph\">By default, new items inherit the label of the container that stores them. That helps employees apply the correct label and avoid misclassification. For example, if an employee creates a new document in a SharePoint site labeled \u201cconfidential,\u201d the document will automatically receive that label.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-947e61e1 wp-block-group-is-layout-flex\" style=\"padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-b3a586c048afd1e84c92325d04805921 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">4<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<p class=\"wp-block-paragraph\">Employees can change the item label if the sensitivity or purpose of the content differs from the container label. But that only works in one direction; they can\u2019t store files with higher-confidentiality labels in a lower-confidentiality container. For example, they can downgrade a file in a \u201chighly confidential\u201d container to \u201cgeneral\u201d if it doesn\u2019t require heightened protection, but they can\u2019t upgrade a file in a \u201cgeneral\u201d container to anything above that grade. SharePoint will provide warnings to site owners when it detects label mismatches, for example, when a file label is more sensitive than its container\u2019s.<\/p>\n<\/div>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading has-text-align-center\">Understanding our sensitivity labels<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"3587\" height=\"1976\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Item_sensitivity_labels_Trust_and_set_good_defaults_99_percent_case_graphic_example.png\" alt=\"\" class=\"wp-image-17640\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Item_sensitivity_labels_Trust_and_set_good_defaults_99_percent_case_graphic_example.png 3587w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Item_sensitivity_labels_Trust_and_set_good_defaults_99_percent_case_graphic_example-300x165.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Item_sensitivity_labels_Trust_and_set_good_defaults_99_percent_case_graphic_example-1024x564.png 1024w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Item_sensitivity_labels_Trust_and_set_good_defaults_99_percent_case_graphic_example-768x423.png 768w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Item_sensitivity_labels_Trust_and_set_good_defaults_99_percent_case_graphic_example-1536x846.png 1536w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Item_sensitivity_labels_Trust_and_set_good_defaults_99_percent_case_graphic_example-2048x1128.png 2048w\" sizes=\"auto, (max-width: 3587px) 100vw, 3587px\" \/><figcaption class=\"wp-element-caption\"><em>By trusting employees and setting good defaults, we\u2019re able to account for 99% of our governance needs.\u202f&nbsp;<\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">By defaulting file labels to their container labels, you can ensure that every item and collaborative space will align with both its context in your organization and your information protection policies. As a result, Copilot will respect those labels and their corresponding information protection policies.<\/p>\n\n\n\n<div class=\"wp-block-group has-border-color has-teal-500-border-color has-global-padding is-layout-constrained wp-container-core-group-is-layout-027a824a wp-block-group-is-layout-constrained\" style=\"border-width:3px;border-radius:20px;margin-top:var(--wp--preset--spacing--spacing-24);margin-bottom:var(--wp--preset--spacing--spacing-16);padding-top:var(--wp--preset--spacing--spacing-24);padding-right:var(--wp--preset--spacing--spacing-24);padding-bottom:var(--wp--preset--spacing--spacing-24);padding-left:var(--wp--preset--spacing--spacing-24)\">\n<h3 class=\"wp-block-heading has-text-align-left has-h-5-font-size\" style=\"margin-top:0\">Learning from our container-file relationships<\/h3>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-43d791f9af510907851365ab43f2aaf2\">Communicate the relationship between files and containers<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Employees might not understand the relationship between files and their containers intuitively. When you implement your labeling strategy, be sure to include education about container-file derivation.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-d99f26ffd265405b3192a3b48e36cc0a\">Guide through correction<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Many employees learn best from practice, not instruction. Include automated messages that correct edge-case behaviors like trying to make a file in a confidential container generally available.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-1f304bf47949f405f5f97c1ae9004a30\">Ensure you\u2019re comfortable with your label defaults<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Employees will more often than not use the default, so ensure your defaults are correct and reflect your organization\u2019s needs.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-5fb984fa7a3cc6b3e2273e43a4aa0a0a\">Reinforce the importance of file labels<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Because a file can be moved or downloaded from its original container, the only way to protect that information is to ensure its label remains durable. Embed that durability in your object label configurations.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-d5d95385556a029d67188e2d7799975d\">Match container and file label defaults<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Whenever possible, make the container and file defaults the same from the outset. If you start with different labels or policy sets at the outset, it will be difficult to reconcile those changes later.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-top has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-65eef5bf wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"125\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_How-We-Did-it.png\" alt=\"\" class=\"wp-image-18136\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>How we did it at Microsoft<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use these assets to guide you&nbsp;our own journey\u2014they represent how we did things here in Microsoft Digital.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/sensitivity-labeling-a-new-layer-of-security-for-microsoft-teams-premium-meetings\/\">Find out how we\u2019re using sensitivity labeling as a new layer of security for Microsoft Teams Premium meetings.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/empowering-employee-self-service-with-guardrails-how-were-using-sensitivity-labels-to-make-microsoft-more-secure\/\">Learn how we&#8217;re using sensitivity labels to make Microsoft more secure.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"126\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_More-Guidance.png\" alt=\"\" class=\"wp-image-18137\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>More guidance for you<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are more assets that we found useful.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/sensitivity-labels-sharepoint-default-label\" target=\"_blank\" rel=\"noreferrer noopener\">Learn more about configuring default sensitivity labels in SharePoint libraries.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"chapter-4\">Chapter 4: Train employees<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Training your employees on how to handle and label sensitive data was and continues to be a critical step on our governance journey.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Empowering our employees: A joint effort between IT and users<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Establishing a robust labeling strategy is only part of good governance. When it comes to getting employees on board, culture is as critical as policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At Microsoft, employee learning and development are how we move sensitivity labeling from the administrative sphere into day-to-day practice. It helps us increase the accuracy of how our labels are used and ensures that our employees recognize labeling cues when they appear across our productivity suite.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Every incoming Microsoft employee takes our Standards of Business Conduct and security trainings. As part of that process, we created an internal SharePoint resource dedicated to educating employees about their responsibilities for labeling and adhering to our governance policies. It educates employees about the philosophy behind our policies, shares a simplified overview of our sensitivity label structure, and provides practical, app-specific guidance for self-service labeling.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-text-align-center\">Use this decision tree to determine the sensitivity label needed on your document&#8221; to &#8220;Using sensitivity label decision trees<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"5107\" height=\"2159\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Label_decision_tree_graphic.png\" alt=\"\" class=\"wp-image-17639\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Label_decision_tree_graphic.png 5107w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Label_decision_tree_graphic-300x127.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Label_decision_tree_graphic-1024x433.png 1024w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Label_decision_tree_graphic-768x325.png 768w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Label_decision_tree_graphic-1536x649.png 1536w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Label_decision_tree_graphic-2048x866.png 2048w\" sizes=\"auto, (max-width: 5107px) 100vw, 5107px\" \/><figcaption class=\"wp-element-caption\"><em>This quick-reference guide helps Microsoft employees understand our labeling taxonomy at a glance.&nbsp;<\/em><\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Effective learning and development assets<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">As you build out your employee education assets, consider emulating our content with the following elements.<\/p>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-911a4333 wp-block-group-is-layout-flex\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-a072189174537c82e3dd0a5d8719e75f has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">1<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<h4 class=\"wp-block-heading\">Overview<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">It will be much easier for employees to act according to your governance policies if they understand what they do and why they\u2019re so important. Our overview illustrates the relevance of sensitivity labeling for security and compliance and reinforces our employees\u2019 place in maintaining them.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-911a4333 wp-block-group-is-layout-flex\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-e790741e588fe1315022fe296b053c37 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">2<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<h4 class=\"wp-block-heading\">A quick-reference guide<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">A visual guide will help employees understand how labels relate to each other and what they accomplish. At Microsoft, we use a helpful flowchart that provides an outline of our labeling taxonomy without overloading employees with details. Placing it near the beginning of your training content grounds employees in the knowledge early, before they dive deeper into the details.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-911a4333 wp-block-group-is-layout-flex\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-7afb54dd159f73a6786513549dfa92b5 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">3<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<h4 class=\"wp-block-heading\">Technical education<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Our learning material includes a section on how labeling works within our data estate. Then, it proceeds into an in-depth description of how each label or classification interacts with users\u2019 content. Including this section will make labeling more tangible for your employees.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-911a4333 wp-block-group-is-layout-flex\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-b3a586c048afd1e84c92325d04805921 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">4<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<h4 class=\"wp-block-heading\">App-specific guidance<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">At this point, our guidance documentation progresses through the most common app-based use cases for sensitivity labeling: Microsoft 365 files, Teams, Power BI, and PDFs, as well as AIP and other file types separate from Microsoft 365. This app-by-app procedural content will help employees home in on their most common scenarios and educate themselves accordingly.<\/p>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Aside from laying a solid foundation as an IT team, the most effective way to promote good governance is by bringing your workforce on board. Robust learning and development content is a powerful lever for establishing a culture of data security.<\/p>\n\n\n\n<div class=\"wp-block-group has-border-color has-teal-500-border-color has-global-padding is-layout-constrained wp-container-core-group-is-layout-027a824a wp-block-group-is-layout-constrained\" style=\"border-width:3px;border-radius:20px;margin-top:var(--wp--preset--spacing--spacing-24);margin-bottom:var(--wp--preset--spacing--spacing-16);padding-top:var(--wp--preset--spacing--spacing-24);padding-right:var(--wp--preset--spacing--spacing-24);padding-bottom:var(--wp--preset--spacing--spacing-24);padding-left:var(--wp--preset--spacing--spacing-24)\">\n<h3 class=\"wp-block-heading has-text-align-left has-h-5-font-size\" style=\"margin-top:0\">Learning from our employee training<\/h3>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-7d7cfd0d292e8c88a791f2b340fe5d02\">Educate from day one<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">People will only do what they know, so ensure employees know your policies and how to enact them. Build robust education into your labeling and governance strategy, ideally as part of employee onboarding.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-b14e81b0adb6f0719064484a740966c4\">Don\u2019t neglect in-app education opportunities<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Labeling cues are an excellent opportunity for helping employees remember their responsibilities. Make label descriptions brief and tangible during in-app experiences.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-7123f0a437095f10906b3c9c7cad105f\">Provide education on-ramps<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Nobody\u2019s memory is perfect. Link out to relevant information as part of label descriptions so curious employees have a chance to reinforce their knowledge.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-7178f22b60fcdf88d76b92deac4c140a\">Engage actively and situationally<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">If breaches occur or certain teams underperform, coordinate with relevant managers to refresh employee knowledge.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-top has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-65eef5bf wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"125\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_How-We-Did-it.png\" alt=\"\" class=\"wp-image-18136\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>How we did it at Microsoft<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use these assets to guide you&nbsp;our own journey\u2014they represent how we did things here in Microsoft Digital.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/deploying-copilot-for-microsoft-365-with-the-help-of-you-guessed-it-copilot\/\">Find out how we\u2019re deploying Microsoft 365 Copilot with the help of\u2014you guessed it\u2014Copilot.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/embracing-emerging-technology-at-microsoft-with-new-ai-certifications\/\">Check out how we&#8217;re embracing AI at Microsoft with AI certifications.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"126\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_More-Guidance.png\" alt=\"\" class=\"wp-image-18137\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>More guidance for you<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are more assets that we found useful.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/sensitivity-labels\">Learn more about sensitivity labels.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"chapter-5\">Chapter 5: Trust employees, but verify their work<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Trusting your employees while also verifying that what that their actions are secure via automation is a crucial step.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Self-service with guardrails: How we&#8217;re backstopping our employee efforts with technology<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Thanks to our education efforts and intuitive labeling interfaces, we trust employees to apply sensitivity labels. But we also verify their work. It\u2019s how we catch the 1% of edge cases where problems might arise.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We accomplish that by checking files against our DLP standards and using auto-labeling and quarantining when we need them. Swiftly tying up any loose ends eliminates wayward items that Microsoft 365 Copilot might scoop up during the course of its work.<\/p>\n\n\n\n<div class=\"wp-block-group has-teal-300-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-12bf26e4 wp-block-group-is-layout-constrained\" style=\"border-style:none;border-width:0px;padding-top:0;padding-right:0;padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-24)\">\n<p class=\"has-white-200-background-color has-background wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--spacing-16);padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:var(--wp--preset--spacing--spacing-16);padding-left:var(--wp--preset--spacing--spacing-10)\">DLP is a set of technologies and practices centered around Purview that prevent sensitive data from leaving the organization and make it impossible for unauthorized users to access it.<\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">At Microsoft Digital, we use Purview DLP policies to define the rules and actions for detecting and protecting sensitive data across Microsoft 365, SharePoint, OneDrive, and Teams.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DLP policies support vulnerable data types and scenarios that require protection. They include any kind of information that might introduce inappropriate access to company data or intellectual property:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">Access credentials like keys or tokens<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Personally identifying information<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Financial data<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Non-public source code<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Sign-in information<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Reports and dashboards are available via Purview to help our team monitor and analyze content activity and compliance across the organization. They also provide insights into the volume, location, and usage of sensitive data, as well as any incidents and alerts that indicate potential data breaches or violations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, an employee might label something as \u201cGeneral,\u201d but it contains credentials or other sensitive end-user identification information (EUII). In those instances, Purview will automatically block the file from access beyond its owner or reapply a more appropriate label.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Automation and escalation<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We\u2019ve configured Purview to automatically remediate these kinds of issues or escalate them to our Microsoft Digital governance team for resolution when an issue is more complex. DLP remediation and escalation processes can involve several different groups of stakeholders depending on the severity and impact of the incident or alert:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">Content owners<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Content champions<\/li>\n\n\n\n<li class=\"wp-block-list-item\">The MIP team<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Our legal team<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Security<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We use Microsoft 365 Purview to run DLP remediation operations at scale.<\/p>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-947e61e1 wp-block-group-is-layout-flex\" style=\"padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-a072189174537c82e3dd0a5d8719e75f has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">1<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<p class=\"wp-block-paragraph\">DLP systems acquire telemetry from the Microsoft 365 activity management API. Backend processing cleanses the data to build relevant insights and surface them through Power BI dashboards.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-947e61e1 wp-block-group-is-layout-flex\" style=\"padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-e790741e588fe1315022fe296b053c37 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">2<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<p class=\"wp-block-paragraph\">We flag information about files and aggregate it at the file level, then assign it to the last modifier for remediation action.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-947e61e1 wp-block-group-is-layout-flex\" style=\"padding-top:0;padding-bottom:0\">\n<div class=\"wp-block-group has-border-color has-teal-500-color has-text-color has-link-color wp-elements-7afb54dd159f73a6786513549dfa92b5 has-global-padding is-layout-constrained wp-container-core-group-is-layout-b4e7a42c wp-block-group-is-layout-constrained\" style=\"border-color:var(--wp--custom--color--teal--500);border-width:3px;border-radius:100px;padding-top:0;padding-right:var(--wp--preset--spacing--spacing-10);padding-bottom:0;padding-left:var(--wp--preset--spacing--spacing-10)\">\n<p class=\"has-body-xl-font-size wp-block-paragraph\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">3<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-323a0f85 wp-block-group-is-layout-constrained\" style=\"padding-right:0;padding-left:0\">\n<p class=\"wp-block-paragraph\">If users don\u2019t act on the files quickly, the DLP team scopes risky sites to quarantine any files with vulnerabilities.<\/p>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Fortunately, all these features and functionalities are available out of the box through Microsoft 365 and Purview. After you\u2019ve established your labeling strategy and policies, it\u2019s just a matter of adding guardrails to your self-service environment. By automating information protection through quarantining content or rightsizing its label, you can keep Copilot from making sensitive information available where it shouldn\u2019t.<\/p>\n\n\n\n<div class=\"wp-block-group has-border-color has-teal-500-border-color has-global-padding is-layout-constrained wp-container-core-group-is-layout-027a824a wp-block-group-is-layout-constrained\" style=\"border-width:3px;border-radius:20px;margin-top:var(--wp--preset--spacing--spacing-24);margin-bottom:var(--wp--preset--spacing--spacing-16);padding-top:var(--wp--preset--spacing--spacing-24);padding-right:var(--wp--preset--spacing--spacing-24);padding-bottom:var(--wp--preset--spacing--spacing-24);padding-left:var(--wp--preset--spacing--spacing-24)\">\n<h3 class=\"wp-block-heading has-text-align-left has-h-5-font-size\" style=\"margin-top:0\">Learning from Microsoft Digital\u2019s trust and verification process<\/h3>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-7c06a837238963102c8b24e50fe87bac\">Strategize according to schema<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Think carefully about where vulnerabilities can arise and where the relationships between labels, policies, and vulnerabilities might be. Incorporate those into your DLP automation.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-6f8af511b9deb89a62560b9fbd5a0061\">Consider your key escalation partners<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">When human intervention is necessary, it\u2019s important to have immediate access to the relevant stakeholders. Assemble your list and build it into your process.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-148e296800392aa8e0350ea362568588\">Understand DLP\u2019s limitations<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Purview DLP is a powerful set of capabilities, but it still relies on automation, which can miss things humans don\u2019t. For example, DLP might not understand the code name for a product and fail to catch it during automated verification.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-01ce46808efb65d04fd8ea84d8705cad\">Identify and manage exceptions<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">There are very few absolutes in IT, so you\u2019ll always need exceptions. For example, finance professionals will often need to include passwords or credit card numbers in working documents, so we exempt them from Purview DLP oversight with that team. At Microsoft, we use exemption groups to exempt certain employees.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-cd48bab65ba65010bf3c2e62777b3c91\">Involve experts<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Your legal, HR, and security teams will be key allies in this process. Engage them early to help you flesh out risk factors and vulnerabilities.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-top has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-65eef5bf wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"125\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_How-We-Did-it.png\" alt=\"\" class=\"wp-image-18136\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>How we did it at Microsoft<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use these assets to guide you&nbsp;our own journey\u2014they represent how we did things here in Microsoft Digital.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/empowering-our-employees-with-generative-ai-while-keeping-the-company-secure\/\">Learn how we&#8217;re empowering our employees with generative AI while keeping the company secure.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/transforming-our-data-culture-with-ai-ready-data\/\">Check out how we&#8217;re transforming our data culture with AI-ready data.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"126\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_More-Guidance.png\" alt=\"\" class=\"wp-image-18137\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>More guidance for you<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are more assets that we found useful.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/dlp-learn-about-dlp\" target=\"_blank\" rel=\"noreferrer noopener\">Find out how Microsoft Purview Data Loss prevention can help you au<\/a><a href=\"https:\/\/nam06.safelinks.protection.outlook.com\/?url=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fpurview%2Fdlp-learn-about-dlp&amp;data=05%7C02%7Cv-pathompson%40microsoft.com%7Caf3d84d693ab40afa3ac08dd4626e9ae%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638743855129179780%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;sdata=KLRc%2BIyJyKSd1uCNglFfl1DUgbgbYlTHMrRmoEjOmHM%3D&amp;reserved=0\">t<\/a><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/dlp-learn-about-dlp\">omate remediation.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"chapter-6\">Chapter 6: Implement lifecycle management and attestation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We focused on strong lifecycle management policies and employee attestation to help us get our lifecycle management right.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Pairing trust with accountability: How we&#8217;re maintaining our data hygiene with attestation<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Attestation and self-service go hand-in-hand. In simple terms, it means employees can create what they need, but they\u2019re accountable for its upkeep. In turn, that chain of accountability makes sure Copilot only accesses clean and appropriate data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At Microsoft, we follow the principle of data minimization. That means only content that\u2019s necessary and relevant for the company\u2019s operations and objectives should exist in storage. Data minimization reduces the risk of oversharing content that isn\u2019t cared for by employees, minimizes asset sprawl, halts data leakage, and improves quality and usability.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To implement this principle, Microsoft Digital requires that every existing container has attestation. By extension, we delete information that doesn\u2019t have a full-time employee to care for it or that has become stale or irrelevant.<\/p>\n\n\n\n<div class=\"wp-block-group has-teal-300-background-color has-background has-global-padding is-layout-constrained wp-container-core-group-is-layout-f078265f wp-block-group-is-layout-constrained\" style=\"padding-right:0\">\n<p class=\"has-gray-400-background-color has-background wp-block-paragraph\" style=\"padding-right:var(--wp--preset--spacing--spacing-10);padding-left:var(--wp--preset--spacing--spacing-10)\">Attestation is the process of verifying and validating the existence, ownership, and purpose of a container and ensuring it complies with content governance and security policies.<\/p>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">At Microsoft, we require attestation from a full-time employee every six months to confirm several aspects of their containers:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">It\u2019s correctly labeled.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Users actually care about its ongoing existence.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">The roster of people with access is accurate and necessary.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Sharing capabilities are appropriately restrictive or permissive.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">It complies with corporate retention guidelines.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If a container or an item doesn\u2019t have attestation, we consider it orphaned or abandoned, and it\u2019s subject to deletion. You don\u2019t want to be too draconian about these policies. We configure our Microsoft Entra group expiration policies and SharePoint Premium inactive sites attestation to give container owners 60 days to take action. That\u2019s followed by a final notice at deletion time with a link to restore and resolve for another 30 days. We also archive deleted items for recovery over an extended period if employees decide they need them after the fact.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Managing exceptions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If a container is subject to a retention or hold for our legal team, that supersedes any deletion event. Generally speaking, containers where the legal team is the accountable owner aren\u2019t subject to re-attestation because we handle those life cycles more granularly based on Purview retention policies.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ultimately, every organization will have to decide what makes the most sense for them. Applying these principles will help you maintain organization-wide data hygiene, which prevents over-access from Copilot.<\/p>\n\n\n\n<div class=\"wp-block-group has-border-color has-teal-500-border-color has-global-padding is-layout-constrained wp-container-core-group-is-layout-027a824a wp-block-group-is-layout-constrained\" style=\"border-width:3px;border-radius:20px;margin-top:var(--wp--preset--spacing--spacing-24);margin-bottom:var(--wp--preset--spacing--spacing-16);padding-top:var(--wp--preset--spacing--spacing-24);padding-right:var(--wp--preset--spacing--spacing-24);padding-bottom:var(--wp--preset--spacing--spacing-24);padding-left:var(--wp--preset--spacing--spacing-24)\">\n<h3 class=\"wp-block-heading has-text-align-left has-h-5-font-size\" style=\"margin-top:0\">Learning from our lifecycle management habits<\/h3>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-6a8f262a0fc86d41a8da88814cb1b5af\">Choose a meaningful attestation interval<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The attestation interval should be short enough that it doesn\u2019t introduce risk through neglect and long enough that it isn\u2019t unnecessarily burdensome for employees. Think about what makes the most sense for your people by analyzing their behaviors.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-20103e52f439653f6dfa8cc76c271e89\">Communication is key<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Be sure that the attestation requests you create for employees contain both the objective for motivation and simple instructions. That will increase buy-in and smooth the process.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-376101e5440f57b7badf1453d1dde815\">Base non-compliance response on severity<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">The severity of non-compliance will vary based on different files and containers. Some might be more relaxed, and others more strict. Determine a strategy for deciding which is which.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-75051b7d19548cc30eaaaeb3145cdb91\">Include reasonable resolution and recovery options<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Consider your resolution and recovery intervals after a lapse in attestation. You\u2019ll need to balance between items\u2019 sensitivity, employees\u2019 bandwidth, and the infrastructure cost of extended archiving for recoverable items.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-top has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-65eef5bf wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"125\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_How-We-Did-it.png\" alt=\"\" class=\"wp-image-18136\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>How we did it at Microsoft<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use these assets to guide you&nbsp;our own journey\u2014they represent how we did things here in Microsoft Digital.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/copilot-for-microsoft-365-for-executives-sharing-our-internal-deployment-and-adoption-journey-at-microsoft\/\">Check out our&nbsp;guide for deploying and driving adoption of Microsoft 365 for executives.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/empowering-employee-self-service-with-guardrails-how-were-using-sensitivity-labels-to-make-microsoft-more-secure\/\">Find out how using sensitivity labels is enabling us to give our employees the access they need to do their work.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"126\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_More-Guidance.png\" alt=\"\" class=\"wp-image-18137\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>More guidance for you<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are more assets that we found useful.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/users\/groups-lifecycle\" target=\"_blank\" rel=\"noreferrer noopener\">Find out how to configure the expiration policy for Microsoft 365 groups.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/sharepoint\/site-lifecycle-management\" target=\"_blank\" rel=\"noreferrer noopener\">Learn about managing site lifecycle policies.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"chapter-7\">Chapter 7: Enable company-sharable links<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We&#8217;re finding that the best way to reduce oversharing is by addressing it at the source.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Enabling fluid, secure collaboration: How we&#8217;re extending access with company-shareable links<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">At Microsoft Digital, we recognize that content sharing is essential for collaboration and productivity. Employees need to share content with both internal and external audiences. But that also poses a risk of content oversharing when employees expose material to more people or for longer than necessary. It might also mean they\u2019ve shared content without proper protection or classification.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In many cases, employees need to share content outside its container. That might include simply sharing a specific file outside of the container\u2019s roster to enable collaboration in place without resorting to making a copy of the file. On the other hand, someone might need to email the file as an attachment.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Using company-shareable links<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Digital limits oversharing at the source by enabling company-shareable links (CSLs) for all containers and items except ones labeled \u201chighly confidential.\u201d A CSL is a type of link that allows anyone who receives it within our organization to access the content. CSLs are convenient and easy to use, and they promote a culture of openness and transparency.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before CSLs, employees resorted to sharing with large security groups because they didn\u2019t know which groups contained everyone who needed access, and manually adding every unique user was too cumbersome. That behavior leads to oversharing because anyone with access can stumble on the content in Microsoft Search or get answers from Copilot. Any Microsoft 365 discovery scenario will security-trim results, so it\u2019s important that users can\u2019t directly access things they don\u2019t need.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">While employees can pass a CSL around within the company, it isn\u2019t discoverable in Microsoft Search or Copilot because only users who received the link directly via email or chat will have pre-granted access. It might seem counterintuitive that a CSL is more secure, but it eliminates the need for standing access to content and provides greater protection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Finally, we allow content owners to modify or revoke CSLs if their sensitivity or purpose changes, or if sharing is no longer necessary. The content owner can also set an expiration date or a password for their link to enhance security and control.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Extra protection for highly confidential items<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Our governance team at Microsoft Digital determined that we should enable CSLs by default for all containers and items labeled \u201cpublic,\u201d \u201cgeneral,\u201d or \u201cconfidential.\u201d As a result, employees can share content with their colleagues without having to grant individual permissions or manage access requests.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There are some kinds of content that employees absolutely shouldn\u2019t share through a CSL. The risk emerges if someone copies the link into an open location like a broadly accessible document or community. You\u2019ll have to decide where to draw that line for your organization. At Microsoft, we\u2019ve elected to disable CSLs for all containers and items that are labeled \u201chighly confidential.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At Microsoft, highly confidential items require need-to-know access for specific people. For these files, employees use links they designate for specific people, which allows access to only individuals the content creator or owner explicitly identifies. In those situations, large security groups aren\u2019t appropriate in any case.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our policy compels employees to think about who needs access to content and take deliberate action before sharing. In some ways, it acts as an extra gate or prompt to keep our people security-conscious during the sharing process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At Microsoft Digital, we tailored our policies to the company\u2019s specific needs, but it provides a blueprint for other organizations to build a CSL strategy. Deciding what should be sharable and how will help you ensure robust information protection that\u2019s still flexible enough to foster collaboration and productivity.<\/p>\n\n\n\n<div class=\"wp-block-group has-border-color has-teal-500-border-color has-global-padding is-layout-constrained wp-container-core-group-is-layout-027a824a wp-block-group-is-layout-constrained\" style=\"border-width:3px;border-radius:20px;margin-top:var(--wp--preset--spacing--spacing-24);margin-bottom:var(--wp--preset--spacing--spacing-16);padding-top:var(--wp--preset--spacing--spacing-24);padding-right:var(--wp--preset--spacing--spacing-24);padding-bottom:var(--wp--preset--spacing--spacing-24);padding-left:var(--wp--preset--spacing--spacing-24)\">\n<h3 class=\"wp-block-heading has-text-align-left has-h-5-font-size\" style=\"margin-top:0\">Learning from our company-shareable link strategy<\/h3>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-1f54bfcf99a4819b1882838c3b27a281\">Establish thresholds for CSLs or specific people links<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Align your CSL policies with the sensitivity labels that meet your organization\u2019s security needs. Above a certain threshold, it might make sense to require links for specific people.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-7b67ae2b143ececc2c493b02824da6aa\">Embed education in the process<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Employees will need time to get used to this structure. Create education communications early in the process, and configure your labeling interface to display information about the sharing implications of different labels.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-47a7aa5e2c557c495f2c2fd8b91a1fb6\">Manage expectations for security teams<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">CSLs are counterintuitive in terms of safety. They might make security professionals uncomfortable because employees are free to share them internally with anyone. Reinforce that CSLs are safer than giant security groups, which will be the other default behavior for employees. And unlike security groups, they won\u2019t show up in Microsoft Search.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-c9a426e9035afdcd6ff065ef450ed892\">Build data hygiene on good defaults<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Most people will take the simple path, so make the simple path the safe path. Generally speaking, employees leave the defaults intact. If CSLs are your default, that\u2019s the behavior it will drive for your employees.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-top has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-65eef5bf wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"125\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_How-We-Did-it.png\" alt=\"\" class=\"wp-image-18136\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>How we did it at Microsoft<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use these assets to guide you&nbsp;our own journey\u2014they represent how we did things here in Microsoft Digital.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/transforming-microsofts-enterprise-it-infrastructure-with-ai\/\">Learn how we&#8217;re transforming our enterprise IT infrastructure with AI.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/protecting-against-oversharing-power-bi-reports-with-microsoft-sentinel\/\">Check out how we&#8217;re using Microsoft Sentinel to reduce oversharing Power BI reports.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"126\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_More-Guidance.png\" alt=\"\" class=\"wp-image-18137\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>More guidance for you<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are more assets that we found useful.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/sharepoint\/shareable-links-anyone-specific-people-organization\" target=\"_blank\" rel=\"noreferrer noopener\">Find out how&nbsp; company-shareable links work in Microsoft 365 environments.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"chapter-8\">Chapter 8: Extract inventory to detect and report oversharing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When oversharing does slip through, it&#8217;s important to have systems in place to catch it.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Remediating oversharing errors when they occur: How we&#8217;re reporting on broad-access files and sites with Microsoft Graph Data Connect<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In spite of our Microsoft Digital governance team\u2019s best efforts to limit oversharing at the source, it can still occur. In some ways, it\u2019s inevitable.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Organizations are made up of people, and so will always experience human error. Left unchecked, content oversharing can have negative consequences for an organization, including data breaches, compliance violations, or reputational damage. It will also give employees access to that content through Copilot when it isn\u2019t appropriate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To detect and mitigate content oversharing, we use Microsoft Graph Data Connect to report on every broad-access file or site with more sensitive labels. It helps us access and analyze data from Microsoft 365, SharePoint, OneDrive, and Teams using Azure Data Factory, Azure Synapse Analytics, or Azure Machine Learning. We then connect those datasets in our data estate using Azure Synapse Spark and track how many SharePoint sites and items are currently overshared based on our business rules.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One of the principal benefits of Microsoft Graph Data Connect is accessing the information we need through each of these technologies in a secure and scalable way, with control governed by our tenant admins.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-text-align-center\">Using Microsoft Graph Data Connect for oversharing remediation<\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"2720\" height=\"2050\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Microsoft_Graph_Data_Connect.png\" alt=\"\" class=\"wp-image-17643\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Microsoft_Graph_Data_Connect.png 2720w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Microsoft_Graph_Data_Connect-300x226.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Microsoft_Graph_Data_Connect-1024x772.png 1024w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Microsoft_Graph_Data_Connect-768x579.png 768w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Microsoft_Graph_Data_Connect-1536x1158.png 1536w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_Microsoft_Graph_Data_Connect-2048x1544.png 2048w\" sizes=\"auto, (max-width: 2720px) 100vw, 2720px\" \/><figcaption class=\"wp-element-caption\"><em>We use Microsoft Graph Data Connect to detect, reveal, and remediate oversharing in the rare cases where it occurs.<\/em><\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Reporting for accountability<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Our tenant\u2019s data team uses Microsoft Graph Data Connect to generate reports on every file or site on the tenant with a broad access level, like a CSL or link that can be shared with anyone. It also monitors any item with a sensitive label like \u201cconfidential\u201d or \u201chighly confidential.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These reports provide information and insights on the content\u2019s owners, recipients, activity, and content protection and compliance status. They also help identify and prioritize potential cases of content oversharing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At Microsoft, this output is helpful for several groups of stakeholders:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">We share the reports with the <strong>content champions<\/strong> responsible for reviewing and validating any cases of content oversharing.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">We use the reports to contact and educate the <strong>content owners<\/strong> on how to resolve oversharing issues and comply with our governance and security policies.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">We share the reports with the <strong>legal and security teams<\/strong> responsible for investigating and responding to cases of content oversharing that involve legal or security risks and incidents.<\/li>\n\n\n\n<li class=\"wp-block-list-item\">We <strong>track our improvement over time<\/strong> as we enforce policies on our assets.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">To help customers benefit from this kind of visibility, <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/microsoft-graph-data-connect-for\/oversharing-for-very-large-tenants\/ba-p\/4086761\" target=\"_blank\" rel=\"noreferrer noopener\">we\u2019ve created a freely available reporting template<\/a>. We encourage you to use this tool to track oversharing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Beyond weaving your Microsoft Graph data connect and data export into your own data estate, you can now also use SharePoint Advanced Management in SharePoint Premium to get a list of sites that meet a set of criteria that you select. We use this capability to find all our sites that share Highly Confidential data to more than 5,000 users. We then use the same capabilities to selectively require our site owners to fix any anomalies we discover.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/sharepoint\/data-access-governance-reports\" target=\"_blank\" rel=\"noreferrer noopener\">Go here to get more information on this data access functionality in SharePoint<\/a>. &nbsp;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With the right controls and policies in place, you can minimize the number of oversharing errors your employees commit. But when errors do occur, a proactive detection strategy quarantines the risk from Copilot, even as your staff stays connected and collaborating.<\/p>\n\n\n\n<div class=\"wp-block-group has-border-color has-teal-500-border-color has-global-padding is-layout-constrained wp-container-core-group-is-layout-027a824a wp-block-group-is-layout-constrained\" style=\"border-width:3px;border-radius:20px;margin-top:var(--wp--preset--spacing--spacing-24);margin-bottom:var(--wp--preset--spacing--spacing-16);padding-top:var(--wp--preset--spacing--spacing-24);padding-right:var(--wp--preset--spacing--spacing-24);padding-bottom:var(--wp--preset--spacing--spacing-24);padding-left:var(--wp--preset--spacing--spacing-24)\">\n<h3 class=\"wp-block-heading has-text-align-left has-h-5-font-size\" style=\"margin-top:0\">Learning from our oversharing detection and reporting setup<\/h3>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-cbe7a4f15930f51f52ba6815501e6eab\">Select the tools that work best for you<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Between Microsoft 365 and Azure, it\u2019s likely you already have access to the tools you need to set up your reporting apparatus. Explore out-of-the-box functionality before building your own solution.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-35d628e9cb71faf4b6c1c2138254b19d\">Get reports to the right people<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Collaborate with stakeholder teams to nominate point people who will receive oversharing reports and take action or communicate findings.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-24c9b4cbbee02f16364b8fd4a5ede9c4\">Put thought into your communication strategy<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Work with internal comms professionals to determine the best communication strategy when you detect oversharing, especially when speaking with content owners.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-28c9901f wp-block-group-is-layout-constrained\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<h4 class=\"wp-block-heading has-teal-500-color has-text-color has-link-color wp-elements-2ab8466ec9671367d6ef902845b3f80f\">Consider the content of your reports<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Different stakeholders will require different information. Work with individual teams to determine what their reports should look like.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns are-vertically-aligned-top has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-65eef5bf wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"125\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_How-We-Did-it.png\" alt=\"\" class=\"wp-image-18136\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>How we did it at Microsoft<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Use these assets to guide you&nbsp;our own journey\u2014they represent how we did things here in Microsoft Digital.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/deploying-copilot-for-microsoft-365-internally-at-microsoft\/\">Check out how we\u2019re deploying Microsoft 365 Copilot internally at Microsoft.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/powering-a-generational-shift-in-it-at-microsoft-with-ai\/\">Find out how we&#8217;re powering a generational shift in IT at Microsoft with AI.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-top is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-f66f9956 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"126\" height=\"126\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2025\/01\/icon_More-Guidance.png\" alt=\"\" class=\"wp-image-18137\" style=\"width:64px\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-container-core-group-is-layout-639b5052 wp-block-group-is-layout-constrained\" style=\"padding-top:0;padding-right:0;padding-bottom:0;padding-left:0\">\n<p class=\"wp-block-paragraph\"><strong>More guidance for you<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here are more assets that we found useful.<\/p>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/graph\/reportroot-concept-overview\">See how you can set up your Microsoft Graph Data Connect reporting appartus.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"conclusion\">The way forward<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Getting governance right in the age of AI<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The advent of AI tools like Microsoft 365 Copilot is a once-in-a-generation development. At this point, we\u2019re still learning all the ways that these tools can be used to unlock creativity, productivity, collaboration, and innovation. But we can be sure of one thing: implementing them securely and effectively should be priority one.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you\u2019re deploying Copilot to your organization, the lessons we\u2019ve learned at Microsoft Digital can act as a roadmap for your own journey. Ultimately, the most important thing is to consider the data implications of AI assistance and plan accordingly. Diligence and forethought will make sure your employees get all the benefits of next-generation AI technology while your organization stays protected.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Welcome to the age of AI.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<strong><em>{<\/em><\/strong><em><u><a href=\"http:\/\/aka.ms\/msdaigovernance\" target=\"_blank\" rel=\"noreferrer noopener\">Download the eBook version of this Governance in the age of AI readiness guide.<\/a><\/u>}<\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"appendix\">Appendix<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This the full list of related resources shared with you in this readiness guide.&nbsp;<\/p>\n\n\n\n<p class=\"has-body-lg-font-size wp-block-paragraph\"><strong>How we did it at Microsoft with Microsoft 365 Copilot deployment and adoption<\/strong><\/p>\n\n\n\n<div class=\"wp-block-columns has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-28232c24 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Intro<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/getting-the-most-out-of-generative-ai-at-microsoft-with-good-governance\/\">Find out how we governed our deployment of Microsoft 365 Copilot.<\/a>&nbsp;<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/copilot-for-microsoft-365-for-executives-sharing-our-internal-deployment-and-adoption-journey-at-microsoft\/\">View our condensed, CIO version of our Microsoft 365 Copilot deployment guide.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/the-ai-revolution-how-microsoft-digital-it-is-responding-with-an-ai-center-of-excellence\/\">Learn how we\u2019re responding to the AI revolution with a Center of Excellence.<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 1<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/deploying-copilot-for-microsoft-365-in-four-chapters\/\">Check out our guide for deploying Microsoft 365 Copilot.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/ai-powered-agents-in-action-how-were-embracing-this-new-agentic-moment-at-microsoft\/\">Learn how we&#8217;re enabling our employees to build AI-powered agents.<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 2<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/microsoft-creates-self-service-sensitivity-labels-in-microsoft-365\/\">Learn how we create self-service sensitivity labels in Microsoft 365.<\/a>&nbsp;<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/empowering-employee-self-service-with-guardrails-how-were-using-sensitivity-labels-to-make-microsoft-more-secure\/\">Find out how we\u2019re using sensitivity labels to make Microsoft more secure.<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 3<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/sensitivity-labeling-a-new-layer-of-security-for-microsoft-teams-premium-meetings\/\">Find out how we\u2019re using sensitivity labeling as a new layer of security for Microsoft Teams Premium meetings.<\/a>&nbsp;<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 4<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/embracing-emerging-technology-at-microsoft-with-new-ai-certifications\/\">Check out how we\u2019re embracing emerging technology at Microsoft with AI certifications.<\/a>&nbsp;<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/deploying-copilot-for-microsoft-365-with-the-help-of-you-guessed-it-copilot\/\">Find out how we\u2019re deploying Microsoft 365 Copilot with the help of\u2014you guessed it\u2014Copilot.<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 5<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/empowering-our-employees-with-generative-ai-while-keeping-the-company-secure\/\">Learn how we\u2019re empowering our employees with generative AI while keeping the company secure.<\/a>&nbsp;<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/transforming-our-data-culture-with-ai-ready-data\/\">Check out how we&#8217;re transforming our data culture with AI-ready data.<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 6<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/embracing-emerging-technology-at-microsoft-with-new-ai-certifications\/\">Check out our guide for deploying and driving adoption of Microsoft 365 Copilot for executives.&nbsp;<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/empowering-employee-self-service-with-guardrails-how-were-using-sensitivity-labels-to-make-microsoft-more-secure\/\">Find out how using sensitivity labels is enabling us to give our employees the access they need to do their work.<\/a><br>&nbsp;<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 7<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/transforming-microsofts-enterprise-it-infrastructure-with-ai\/\">Learn how we\u2019re transforming our enterprise IT infrastructure with AI.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/protecting-against-oversharing-power-bi-reports-with-microsoft-sentinel\/\">Check out how we&#8217;re using Microsoft Sentinel to reduce oversharing Power BI reports.<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 8<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/powering-a-generational-shift-in-it-at-microsoft-with-ai\/\">Find out how we\u2019re powering a generational shift in IT at Microsoft with AI.<\/a> &nbsp;<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/deploying-copilot-for-microsoft-365-internally-at-microsoft\/\">Check out how we\u2019re deploying Microsoft 365 Copilot internally at Microsoft.<\/a><br>&nbsp;<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<p class=\"has-body-lg-font-size wp-block-paragraph\"><strong>More guidance for you<\/strong><\/p>\n\n\n\n<div class=\"wp-block-columns has-white-200-background-color has-background is-layout-flex wp-container-core-columns-is-layout-28232c24 wp-block-columns-is-layout-flex has-2-columns\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Intro<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/copilot-for-microsoft-365\/how-to-prepare-for-microsoft-365-copilot\/ba-p\/3851566\" target=\"_blank\" rel=\"noreferrer noopener\">Get an overview of pre-deployment preparation for Microsoft 365 Copilot<\/a>.<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/microsoft-365-copilot\/your-path-to-value-with-copilot-for-microsoft-365\/ba-p\/4078744\" target=\"_blank\" rel=\"noreferrer noopener\">Learn about Our Copilot Success Kit, a one-stop shop for most of our Copilot deployment and adoption resources.<\/a><\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/www.youtube.com\/watch?v=RO5uLlDFd1k\" target=\"_blank\" rel=\"noreferrer noopener\">Watch a presentation from the Microsoft 365 Community Conference about governance and administration at Microsoft in the era of Copilot.<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 1<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/copilot-for-microsoft-365\/how-to-prepare-for-microsoft-365-copilot\/ba-p\/3851566\" target=\"_blank\" rel=\"noreferrer noopener\">Get an overview of pre-deployment preparation for Microsoft 365 Copilot.<\/a>&nbsp;<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/techcommunity.microsoft.com\/blog\/microsoft365copilotblog\/your-path-to-value-with-copilot-for-microsoft-365\/4078744\" target=\"_blank\" rel=\"noreferrer noopener\">Learn about our Copilot Success Kit, a one-stop shop for most of our Copilot deployment and adoption resources.<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 2<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/sensitivity-labels\" target=\"_blank\" rel=\"noreferrer noopener\">Find information about getting started with sensitivity labels.<\/a>&nbsp;<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 3<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/sensitivity-labels-sharepoint-default-label\" target=\"_blank\" rel=\"noreferrer noopener\">Learn more about configuring default sensitivity labels in SharePoint libraries.<\/a>&nbsp;<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 4<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/sensitivity-labels\" target=\"_blank\" rel=\"noreferrer noopener\">Learn more about managing sensitivity labels.<\/a>&nbsp;<\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 5<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/dlp-learn-about-dlp\" target=\"_blank\" rel=\"noreferrer noopener\">Find out how Microsoft Purview Data Loss Prevention can help you automate remediation.<\/a>&nbsp;<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 6<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/users\/groups-lifecycle\" target=\"_blank\" rel=\"noreferrer noopener\">Find out how to configure the expiration policy for Microsoft 365 groups.<\/a>&nbsp;&nbsp;<\/li>\n\n\n\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/sharepoint\/site-lifecycle-management\" target=\"_blank\" rel=\"noreferrer noopener\">Learn about managing site lifecycle policies.<\/a>&nbsp;<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 7<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/sharepoint\/shareable-links-anyone-specific-people-organization\" target=\"_blank\" rel=\"noreferrer noopener\">Find out how company-shareable links work in Microsoft 365 environments.<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"wp-block-paragraph\"><strong>Chapter 8<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/graph\/reportroot-concept-overview\">Check out&nbsp;how you can set up your Microsoft Graph Data Connect reporting apparatus.&nbsp;<\/a><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><br>&nbsp;<\/p>\n\n\n\n<div data-bi-aN=\"Key Takeaways\" class=\"wp-block-group is-vertical is-layout-flex wp-container-core-group-is-layout-fe9cc265 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-medium is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"68\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2023\/07\/OKR_Try_it_out-300x68.png\" alt=\"Try it out\" class=\"wp-image-11919\" style=\"width:360px\" srcset=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2023\/07\/OKR_Try_it_out-300x68.png 300w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2023\/07\/OKR_Try_it_out-1024x234.png 1024w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2023\/07\/OKR_Try_it_out-768x175.png 768w, https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2023\/07\/OKR_Try_it_out.png 1319w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/learn.microsoft.com\/en-us\/copilot\/microsoft-365\/microsoft-365-copilot-setup\/?OCID=InsideTrack_Product_10616\" target=\"_blank\" rel=\"noreferrer noopener\">Get your organization and data ready for Microsoft 365 Copilot.<\/a><\/p>\n<\/div>\n\n\n\n<div data-bi-aN=\"Key Takeaways\" class=\"wp-block-group is-vertical is-layout-flex wp-container-core-group-is-layout-fe9cc265 wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2023\/05\/Customer-Survey-580x85-1.png\" alt=\"We'd like to hear from you!\" style=\"width:580px\"\/><\/figure>\n\n\n\n<ul class=\"wp-block-list is-style-list-no-bullets\">\n<li class=\"wp-block-list-item\"><a href=\"mailto:msitstaff@microsoft.com\">Want more information? Email us and include a link to this story and we\u2019ll get back to you.<\/a><\/li>\n<\/ul>\n<\/div>\n\n\n<p><!-- \/wp:post-content --><\/p>","protected":false},"excerpt":{"rendered":"<p>Engage with our experts! Customers or Microsoft account team representatives from Fortune 500 companies&nbsp;are welcome to request a virtual engagement&nbsp;on this topic with experts from our Microsoft Digital team.&nbsp; Governance in the age of AI Unlocking the next generation of productivity tools Microsoft 365 Copilot combines the power of large language models (LLMs) with your [&hellip;]<\/p>\n","protected":false},"author":115,"featured_media":17574,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_hide_featured_on_single":false,"_show_featured_caption_on_single":true,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[71,854],"tags":[199,89,850,853,237,263,827,848],"coauthors":[622],"class_list":["post-17754","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-featured","category-readiness-guide","tag-ai","tag-digital-transformation","tag-end-user-services-and-support","tag-enterprise-data","tag-governance","tag-microsoft-365","tag-microsoft-365-copilot","tag-security-and-risk-management","m-blog-post"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft - Inside Track Blog<\/title>\n<meta name=\"description\" content=\"Learn how we\u2019re managing our Microsoft 365 Copilot governance internally here at Microsoft.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft - Inside Track Blog\" \/>\n<meta property=\"og:description\" content=\"Learn how we\u2019re managing our Microsoft 365 Copilot governance internally here at Microsoft.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/\" \/>\n<meta property=\"og:site_name\" content=\"Inside Track Blog\" \/>\n<meta property=\"article:published_time\" content=\"2025-02-06T16:55:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-09T22:09:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_hero_image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2300\" \/>\n\t<meta property=\"og:image:height\" content=\"1293\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Alex Fleck\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alex Fleck\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"42 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/\"},\"author\":{\"name\":\"Alex Fleck\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/#\\\/schema\\\/person\\\/b623d895338189d1c487d4a0b93d4764\"},\"headline\":\"How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft\",\"datePublished\":\"2025-02-06T16:55:00+00:00\",\"dateModified\":\"2026-02-09T22:09:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/\"},\"wordCount\":7828,\"image\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/uploads\\\/prod\\\/2024\\\/11\\\/10616_hero_image.jpg\",\"keywords\":[\"AI\",\"digital transformation\",\"End user services and support\",\"Enterprise Data\",\"governance\",\"Microsoft 365\",\"Microsoft 365 Copilot\",\"Security and risk management\"],\"articleSection\":[\"Featured\",\"Readiness Guide\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/\",\"url\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/\",\"name\":\"How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft - Inside Track Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/uploads\\\/prod\\\/2024\\\/11\\\/10616_hero_image.jpg\",\"datePublished\":\"2025-02-06T16:55:00+00:00\",\"dateModified\":\"2026-02-09T22:09:01+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/#\\\/schema\\\/person\\\/b623d895338189d1c487d4a0b93d4764\"},\"description\":\"Learn how we\u2019re managing our Microsoft 365 Copilot governance internally here at Microsoft.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/uploads\\\/prod\\\/2024\\\/11\\\/10616_hero_image.jpg\",\"contentUrl\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/uploads\\\/prod\\\/2024\\\/11\\\/10616_hero_image.jpg\",\"width\":2300,\"height\":1293,\"caption\":\"This readiness guide walks you through how we\u2019re managing our Microsoft 365 Copilot governance internally here at Microsoft.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/\",\"name\":\"Inside Track Blog\",\"description\":\"How Microsoft does IT\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/#\\\/schema\\\/person\\\/b623d895338189d1c487d4a0b93d4764\",\"name\":\"Alex Fleck\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/340114d229a43eb2e869170b958db0ecd4394144a36e326e2b188d4937b1989d?s=96&d=mm&r=g4cfaccedbee32e457bda8cf3019f258b\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/340114d229a43eb2e869170b958db0ecd4394144a36e326e2b188d4937b1989d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/340114d229a43eb2e869170b958db0ecd4394144a36e326e2b188d4937b1989d?s=96&d=mm&r=g\",\"caption\":\"Alex Fleck\"},\"description\":\"I\u2019ve always had a passion for story, whether I find it in a novel, a medieval epic, a movie, or a game. Now, I\u2019m helping tell stories about the people and teams at Microsoft who build the technology that moves our world. When I\u2019m not reading, writing, translating, or gaming, you\u2019ll find me on a backcountry trek in Canada\u2019s woods and mountains.\",\"url\":\"https:\\\/\\\/www.microsoft.com\\\/insidetrack\\\/blog\\\/author\\\/alexfleck\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft - Inside Track Blog","description":"Learn how we\u2019re managing our Microsoft 365 Copilot governance internally here at Microsoft.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/","og_locale":"en_US","og_type":"article","og_title":"How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft - Inside Track Blog","og_description":"Learn how we\u2019re managing our Microsoft 365 Copilot governance internally here at Microsoft.","og_url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/","og_site_name":"Inside Track Blog","article_published_time":"2025-02-06T16:55:00+00:00","article_modified_time":"2026-02-09T22:09:01+00:00","og_image":[{"width":2300,"height":1293,"url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_hero_image.jpg","type":"image\/jpeg"}],"author":"Alex Fleck","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Alex Fleck","Est. reading time":"42 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/"},"author":{"name":"Alex Fleck","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/b623d895338189d1c487d4a0b93d4764"},"headline":"How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft","datePublished":"2025-02-06T16:55:00+00:00","dateModified":"2026-02-09T22:09:01+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/"},"wordCount":7828,"image":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_hero_image.jpg","keywords":["AI","digital transformation","End user services and support","Enterprise Data","governance","Microsoft 365","Microsoft 365 Copilot","Security and risk management"],"articleSection":["Featured","Readiness Guide"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/","name":"How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft - Inside Track Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_hero_image.jpg","datePublished":"2025-02-06T16:55:00+00:00","dateModified":"2026-02-09T22:09:01+00:00","author":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/b623d895338189d1c487d4a0b93d4764"},"description":"Learn how we\u2019re managing our Microsoft 365 Copilot governance internally here at Microsoft.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/#primaryimage","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_hero_image.jpg","contentUrl":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_hero_image.jpg","width":2300,"height":1293,"caption":"This readiness guide walks you through how we\u2019re managing our Microsoft 365 Copilot governance internally here at Microsoft."},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/how-were-tackling-microsoft-365-copilot-governance-internally-at-microsoft\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/insidetrack\/blog\/"},{"@type":"ListItem","position":2,"name":"How we\u2019re tackling Microsoft 365 Copilot governance internally at Microsoft"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#website","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/","name":"Inside Track Blog","description":"How Microsoft does IT","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/insidetrack\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.microsoft.com\/insidetrack\/blog\/#\/schema\/person\/b623d895338189d1c487d4a0b93d4764","name":"Alex Fleck","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/340114d229a43eb2e869170b958db0ecd4394144a36e326e2b188d4937b1989d?s=96&d=mm&r=g4cfaccedbee32e457bda8cf3019f258b","url":"https:\/\/secure.gravatar.com\/avatar\/340114d229a43eb2e869170b958db0ecd4394144a36e326e2b188d4937b1989d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/340114d229a43eb2e869170b958db0ecd4394144a36e326e2b188d4937b1989d?s=96&d=mm&r=g","caption":"Alex Fleck"},"description":"I\u2019ve always had a passion for story, whether I find it in a novel, a medieval epic, a movie, or a game. Now, I\u2019m helping tell stories about the people and teams at Microsoft who build the technology that moves our world. When I\u2019m not reading, writing, translating, or gaming, you\u2019ll find me on a backcountry trek in Canada\u2019s woods and mountains.","url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/author\/alexfleck\/"}]}},"jetpack_featured_media_url":"https:\/\/www.microsoft.com\/insidetrack\/blog\/uploads\/prod\/2024\/11\/10616_hero_image.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9hcZA-4Cm","_links":{"self":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts\/17754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/users\/115"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/comments?post=17754"}],"version-history":[{"count":15,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts\/17754\/revisions"}],"predecessor-version":[{"id":22316,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/posts\/17754\/revisions\/22316"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/media\/17574"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/media?parent=17754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/categories?post=17754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/tags?post=17754"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/insidetrack\/blog\/wp-json\/wp\/v2\/coauthors?post=17754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}