Topics

5 posts · 1 series
Sort
Posts
AI Governance·Jun 18, 2026·4 min
What data can this system touch?

The EU AI Act, NIST's AI Risk Management Framework, and ISO/IEC 42001 agree on almost nothing. Not scope, not structure, not even whether they're law …

governanceInformation Protectionbeginner
AI Governance·Jun 17, 2026·4 min
Copilot is you. An autonomous agent isn't.

Copilot has never had an opinion about what it's allowed to read. It reads what you can read: your groups, your permissions, the rights your labels gr…

Agentsgovernancebeginner
AI Governance·Jun 14, 2026·4 min
A sensitivity label isn't a sticker. It's a gate.

A sensitivity label looks like a tag; a coloured word in the corner of a document telling people how careful to be. In a Copilot tenant, that mental m…

PurviewInformation Protectiongovernancebeginner
AI Governance·Jun 14, 2026·4 min
Copilot isn't broken. It's locked out.

Everyone prepping for Copilot hears the same advice: fix your oversharing first. It's good advice but in a regulated tenant it's only half the job. Th…

PurviewInformation Protectiongovernancebeginner
AI Governance·Jun 14, 2026·4 min
I thought AI governance was about AI?

A regulated operator switches on Copilot. People go straight to their most sensitive, high-value work — and it comes back thin. Sometimes empty. The r…

Information Protectionbeginner