Session Abstract

The rapid adoption of Microsoft 365 Copilot and third-party generative AI tools is transforming the workplace, but it also introduces new risks around data exposure, shadow AI, and compliance. Organisations need clear strategies to monitor, secure, and govern how AI interacts with sensitive information. This session offers a practical guide to using Microsoft Purview and Defender to manage AI usage across Microsoft 365. Attendees will learn how to: - Assess the risk profile of generative AI applications using Defender for Cloud Apps - Discover which AI tools are being used within the organisation, including unsanctioned or shadow AI - Block access to unwanted AI applications and monitor emerging tools - Oversee and report AI activity, including user access and purposes - Track the sharing of sensitive data with AI tools and investigate potential data loss incidents Through real-world examples and demonstrations, you will gain actionable strategies to ensure your organisation’s AI journey is secure, compliant, and aligned with your data protection objectives.

Nikki Chapple

Nikki Chapple is a Principal Cloud Architect at CloudWay and a dual Microsoft Most Valuable Professional (MVP) in Microsoft 365 and Security. She specialises in AI governance, Microsoft Purview and helping organisations build trusted data foundations for AI across Microsoft 365, Copilot and AI agents. With more than 35 years of experience spanning IT and business, Nikki works with organisations to identify sensitive information that is overshared or exposed, strengthen data security and governance, and implement Microsoft Purview to protect critical information. By ensuring data is trusted, secure and well governed, she helps organisations adopt AI with confidence while reducing risk and meeting compliance obligations. Nikki believes successful AI adoption starts with trusted, governed data, not the AI itself. This philosophy underpins her work with enterprise customers and is the foundation of her conference sessions, workshops and technical guidance. Nikki co-authored the Governance, Risk & Compliance competency of the Microsoft 365 Maturity Model and was recognised in Microsoft's People of Purview (2025) and with the UK Community Award for Security & Compliance Evangelist (2023). She is an international conference speaker, blogs at nikkichapple.com, and co-hosts the AI Governance & Data Security Show.