ECS 2027

31/05/2027, Congress Center Düsseldorf
Düsseldorf, Germany

From Signal to Action: How AI, Agents and Microsoft Purview Turn Compliance Data into Security Outcomes

Microsoft Purview can generate thousands of signals across data loss prevention, insider risk management, information protection, communication compliance and data lifecycle management. Yet many organisations face the same challenge: once the alerts start flowing, how do you turn them into meaningful action? In this practical, experience-led session, Ryan John Murphy and Al Eardley explore how organisations can move beyond deploying Microsoft Purview and build an effective operational model for monitoring, investigating and responding to compliance and security events at scale. Drawing on real-world customer experience, we will examine how configuration choices directly influence signal quality, how to reduce noise without sacrificing visibility, and how emerging capabilities such as Artificial Intelligence and agents can help analysts triage, prioritise and investigate incidents more effectively. The session will also explore the growing convergence of Security for Artificial Intelligence and Artificial Intelligence for Security, demonstrating how Purview data can be combined with Microsoft Sentinel to provide enhanced organisational telemetry, centralised monitoring and richer investigation workflows beyond the Purview portal itself. Attendees will learn: How successful Microsoft Purview deployments are designed with operational management in mind from day one Common mistakes that create excessive alert volumes and analyst fatigue Techniques for improving signal quality and reducing false positives How agents and Artificial Intelligence can assist with alert triage and investigation Approaches for prioritising incidents and focusing analyst effort where it delivers the most value How Microsoft Sentinel can extend monitoring, reporting and alerting for Microsoft Purview How compliance and data protection signals fit into broader security operations processes Lessons learned from real customer successes, challenges and failures Practical steps for building stakeholder confidence in compliance monitoring and governance programmes Whether you are beginning your Microsoft Purview journey, looking to mature an existing deployment, or exploring how Artificial Intelligence can strengthen security operations, you will leave with practical guidance for turning compliance signals into actionable insights, measurable outcomes and more effective risk management. Why this session now? As organisations adopt Artificial Intelligence at scale, understanding and protecting sensitive information becomes more important than ever. The challenge is no longer collecting signals. It is using them effectively. This session demonstrates how Microsoft Purview, Microsoft Sentinel and AI-powered investigation capabilities can work together to help organisations move from alert overload to informed action.