Posts by Torsten Mandelkow
-
How to add business metadata to Microsoft 365 workspaces
Put cost center, owner and project on every team and site, capture them at creation and keep them current, so policies follow your business.
-
How to align Microsoft 365 governance with business policies
Governance drifts from business policy when rules live in documents and the tenant runs on its own. Testable rules, owners and continuous checks close the gap.
-
How to apply sensitivity labels before a Copilot rollout
Copilot answers from whatever people can open. Find unlabeled teams and sites, get owners to label them, and prove the gap is closing.
-
How to make sure every Microsoft 365 workspace has an owner
Find the Teams, sites and groups with no owner, one owner or a leaver as owner, and keep every workspace accountable to a named person.
-
How to automate Microsoft 365 governance policies
Turn written rules into policies that check Microsoft 365 on every scan, then let automations fix what they find, with a person approving where it matters.
-
How to automate the Microsoft 365 workspace lifecycle
Run every Teams team, site and group from request to archive, with owners deciding at each stage and the record kept.
-
How to clean up inactive SharePoint sites
Find the SharePoint sites nobody uses, ask each owner, and archive or delete what is not needed, with the decision on record.
-
How to close governance blind spots across Microsoft 365 admin centers
Each Microsoft 365 admin center shows one service, so the gaps between them go unseen. One inventory, named owners and policy checks close them.
-
How to stop unmanaged workspaces driving up Microsoft 365 costs
Unowned, unused Teams and SharePoint sites keep consuming storage and licences. Find them, give them an owner, and retire what nobody needs.
-
How to keep data residency controls consistent in Microsoft 365
Microsoft Multi-Geo sets where data is stored, but consistency needs oversight. Inventory where workspaces and guests sit and check each against the residency rule.
-
How to find and reassign ownerless Power Apps and flows
Find Power Apps and Power Automate flows whose owner has left, then assign a new owner or retire them.
-
How to govern ChatGPT Enterprise and custom GPTs
Custom GPTs, projects and connectors multiply fast. Inventory them, see who each is shared with and join users to your Microsoft identity.
-
How to govern Claude Enterprise usage and spend
Claude Enterprise spend and projects sit outside Microsoft 365. Join users to Entra ID, read spend by department and clean up stale projects.
-
How to govern Power BI workspaces and sharing
Put an owner on every Power BI workspace, find what is shared outside your organization and clear what nobody uses.
-
How to govern SharePoint agents
A SharePoint agent is only as safe as the site it reads. Inventory the agents, fix labels and sharing on their sites, and give each an owner.
-
How to manage guest users across Microsoft 365
Manage guests from invitation to removal, with rules for who may invite them, who sponsors them, when access is reviewed and how it ends.
-
How to measure Microsoft 365 and Copilot adoption
Set an adoption baseline, measure real usage by service and department, and show which Microsoft 365 and Copilot seats pay off.
-
How to monitor Microsoft 365 governance posture continuously
Governance posture is the current state of ownership, access and policy across Microsoft 365. Monitor it with an inventory, policy checks and a trend.
-
How to offboard users in Microsoft 365 without losing data or control
Offboard a leaver without orphaned Teams, lost OneDrive files or paid-for licenses: transfer ownership first, then disable the account.
-
How to reduce audit preparation effort in Microsoft 365
Audit preparation balloons when collaboration spaces have no owner and no record. Named owners, regular reviews and exportable reports shrink it to an export.
-
How to reduce SharePoint storage costs
Find what fills your SharePoint and OneDrive storage, retire what nobody uses, and make owners answerable for the rest.
-
How to review Entra ID app registrations and their permissions
Find every app registration in Entra ID, name an owner, check its permissions and secrets, and retire what nobody needs.
-
How to segment a Microsoft 365 tenant by subsidiary, region or business unit
Segment one Microsoft 365 tenant by subsidiary, region or business unit so each admin sees only their part, without splitting into separate tenants.
-
How to standardize Teams and SharePoint provisioning with templates
Let people request Teams and SharePoint sites from templates, with owner, naming, label and approval built in, so sprawl does not start.
-
How to keep track of permissions across Microsoft 365
Permissions in Microsoft 365 spread across Teams, SharePoint, OneDrive and Entra ID. Inventory who can reach what, review with owners and keep the record.
-
How to govern AI coding assistants
Coding assistants read source code and internal context. Inventory them, map their access, give each an owner and review it like any AI tool.
-
How to control Microsoft Teams sprawl
A repeatable routine for Teams sprawl: inventory every team, find inactive and ownerless ones, set owners and expiry, review, then archive with a trail.
-
How to run recurring access reviews across Microsoft 365
Owner-led access reviews on a fixed cycle, across Microsoft 365 workspaces, so access stays in line and the proof is kept.
-
How to reclaim unused Microsoft 365 Copilot licences
Copilot seats stay assigned until someone removes them. Define what used means, find idle seats by owner and department, notify, then reclaim.
-
Operationalizing AI agents: What every IT and compliance leader should know
Beyond familiar scripts and automations, a new class of software is emerging: AI agents. These intelligent agents are designed to perform tasks that were once manual, connecting systems and people in…
-
How to control shadow AI
Find the AI tools nobody approved, assess what they can reach, and bring the useful ones under the same inventory, owners and reviews as the rest.
-
How to inventory the AI tools in use across your organization
Build an inventory of the AI assistants and agents in use, with an owner, data reach and risk for each, starting in Microsoft 365 and extending out.
-
How to govern the Power Platform
Govern Power Apps, Power Automate and Power BI as one low-code estate: inventory it, give every asset an owner, watch connectors and review access.
-
How to build EU AI Act evidence across your AI tools
The EU AI Act applies to every AI system you use, whoever made it. Keep a record per system: purpose, data, owner, risk class and last review.
-
How to monitor data loss prevention across Microsoft 365
DLP policies stop known patterns. Watch the conditions around them too: external sharing, mail redirect rules and connector use, ranked and fixed.
-
How to produce DORA audit evidence in Microsoft 365
DORA counts the agents, flows and workspaces in your tenant as ICT assets. Inventory them, assign owners, review access and export the evidence.
-
How to govern Microsoft Copilot agents
Keep every Copilot Studio and SharePoint agent inventoried, owned and risk-ranked, so agent creation does not turn into sprawl and data exposure.
-
How to prepare Microsoft 365 for a Copilot rollout
Copilot answers with each user's permissions. Measure exposure, close oversharing, label sensitive sites, retire stale content, then pilot.
-
How to prepare Microsoft 365 for NIS2
NIS2 asks you to prove control, not assert it. Map the duties to Microsoft 365, set a baseline, keep owners and reviews current and package evidence.
-
How to govern AI tools beyond Microsoft Copilot
Apply one governance model to every AI tool your teams use: an owner, a risk rating, an access review and one report, joined to your Entra ID.
-
How to detect and fix SharePoint oversharing
Find SharePoint content that more people can reach than intended, fix the most sensitive first, repair the causes and re-check on a cycle.
-
How tenant sprawl slows Microsoft 365 governance, and how to reverse it
Tenant sprawl turns governance into search and cleanup. Measure what it costs, then stop it at creation with owners, expiry and reviews.
-
Entra ID identity governance and B2B collaboration
How many cloud services does your business use? Can you count them on one hand?
-
Entra admin center: manage users, apps and devices in one place
There’s no rest for the admins. Keeping end users up and running and power users in check, jumping between control panels, dashboards, and admin centers, can sometimes feel like a bit too much. And…
-
How to best govern Microsoft Entra ID in your organization
Administrators have two tough tasks to oversee on an ongoing basis: optimizing security and managing permissions. The two go hand in hand and finding the balance between them is key. Security must be…
-
Everything you need to know about Microsoft Azure Active Directory
The Microsoft cloud is at the heart of so many businesses right now. Remote and hybrid working requires everyone to level up their cloud game, and Azure Active Directory (Azure AD) is one of the…
-
SharePoint admin center: features and how to manage SharePoint
Managing SharePoint can be a challenge. There’s just so much of it. For larger businesses with more employees, this can make implementing policies tricky. Thankfully, SharePoint has a built-in admin…
-
SharePoint permissions and external sharing
Collaboration in business is essential. Whether it’s between your teams across departments or an external partnership with third-party collaborators you need to make the process as smooth as…
-
Microsoft 365 Groups and Microsoft Teams lifecycle management
IT Departments play a pivotal role in facilitating business collaboration. As more organizations turn to the Microsoft cloud ecosystem for business activity, cloud sprawl becomes an increasingly…
















































