M365.FM - Modern work, security, and productivity with Microsoft 365

M365.FM - Modern work, security, and productivity with Microsoft 365

The Model is the Vulnerability: Securing Copilot with Entra ID and Zero Trust

1 h 12 min · 31 mei 2026
Probeer gratis
aflevering The Model is the Vulnerability: Securing Copilot with Entra ID and Zero Trust artwork

Beschrijving

Microsoft Copilot is transforming how organizations access, analyze, and act on information. But while most security conversations focus on AI models, hallucinations, and prompt engineering, the real risk often lives somewhere else entirely. The model is not the vulnerability. The vulnerability is the identity layer, the permissions model, and the governance framework sitting underneath it.In this episode of the M365 FM Podcast, we explore why Microsoft Copilot doesn't create new security problems—it exposes the ones that already exist. From excessive SharePoint permissions and forgotten group memberships to semantic indexing and AI-powered data discovery, Copilot amplifies every weakness hiding inside your Microsoft 365 environment. If your permissions are broken, AI simply makes those problems easier to find. UNDERSTANDING THE LETHAL TRIFECTA One of the biggest risks in enterprise AI is what security researchers call the "Lethal Trifecta." When these three conditions exist together, organizations become highly vulnerable to AI-driven attacks: • Access to sensitive enterprise data • Exposure to untrusted content such as emails, Teams messages, and SharePoint comments • The ability for AI systems to communicate or take action on behalf of usersWhen these elements combine, prompt injection attacks can move from theoretical risk to real-world business impact. WHY PROMPT INJECTION CHANGES EVERYTHING Prompt injection is not a software bug. It is a consequence of how large language models process information. AI systems cannot reliably distinguish between instructions and data, creating opportunities for attackers to hide commands inside documents, emails, websites, and collaboration platforms.We examine real-world examples including ShareLeak and other Microsoft Copilot vulnerabilities that demonstrated how hidden instructions embedded in content can influence AI behavior. You'll learn why prompt injection remains one of the most critical security challenges facing enterprise AI deployments today. SECURING COPILOT WITH ENTRA ID Identity is the new security perimeter. In a world where AI can access everything a user can see, protecting identities becomes more important than protecting networks.In this episode, we cover:• Phishing-resistant MFA with FIDO2 and Windows Hello for Business • Conditional Access policies designed specifically for Copilot • Risk-based authentication using Entra ID Protection • Continuous Access Evaluation (CAE) and real-time session revocation • Device-bound token protection for high-value users and workloadsThese controls create a stronger foundation for securing AI access before users ever interact with Copilot. ZERO TRUST FOR AI Zero Trust is not a product. It is a design pattern.We break down how Zero Trust principles apply directly to Microsoft Copilot, including least privilege access, continuous verification, identity-first security, and assuming breach. You'll learn why permission cleanup is often the most important Copilot security project your organization will undertake and how over-permissioned SharePoint sites can become major exposure points once semantic search enters the picture. DATA GOVERNANCE, LABELS, AND DLP Security does not stop at identity. Effective Copilot governance requires a strong data protection strategy.This episode explores:• Sensitivity labels and AI-aware data classification • Encryption rights and EXTRACT permissions • BlockContentAnalysisServices controls • Purview Data Loss Prevention (DLP) for Copilot and Copilot Chat • Site scoping and semantic index exclusions • Double Key Encryption (DKE) for highly sensitive contentYou'll discover how organizations can control not only who accesses data, but also whether AI is allowed to analyze it. AGENT IDENTITIES AND THE FUTURE OF AI GOVERNANCE As autonomous AI agents become more common, traditional identity models begin to break down. We discuss Microsoft's Entra Agent ID and why AI agents require a dedicated governance model separate from users and applications.Learn how organizations can manage agent lifecycles, standardize permissions through identity blueprints, and establish guardrails for non-human identities operating inside Microsoft 365. DETECTION, RESPONSE, AND AI SECURITY OPERATIONS No security framework is complete without monitoring and response capabilities.We examine how Microsoft Sentinel, Purview, Defender, and Entra ID work together to detect suspicious AI activity, investigate prompt injection attacks, and automate containment actions. From session revocation playbooks to AI-focused audit logging and Data Security Posture Management (DSPM), you'll gain a practical blueprint for operating Copilot securely at enterprise scale. KEY TAKEAWAYS The most important lesson is simple: Copilot is not creating security problems. It is exposing governance problems that have existed for years.Organizations that succeed with AI will be the ones that :• Treat identity as the primary security boundary • Clean up permissions before large-scale AI deployment • Implement Zero Trust principles across users, agents, and data • Continuously monitor and govern AI interactionsIf you're planning, deploying, or securing Microsoft Copilot, this episode provides a practical framework for building a resilient, identity-first AI security strategy. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Reacties

0

Wees de eerste die een reactie plaatst

Meld je nu aan en word lid van de M365.FM - Modern work, security, and productivity with Microsoft 365 community!

Probeer gratis

Probeer 14 dagen gratis

€ 9,99 / maand na proefperiode. · Elk moment opzegbaar.

  • Podcasts die je alleen op Podimo hoort
  • 20 uur luisterboeken / maand
  • Gratis podcasts
Probeer gratis

Alle afleveringen

656 afleveringen

aflevering Indirect Injection: The Silent Killer of Enterprise AI artwork

Indirect Injection: The Silent Killer of Enterprise AI

Most organizations believe their biggest AI risk is hallucination. It isn't. The real threat is something far more dangerous. A vulnerability that hides inside trusted documents. A vulnerability that bypasses access controls. A vulnerability that transforms ordinary business content into executable instructions. It's called Indirect Prompt Injection. And if your Microsoft 365 Copilot, Azure AI Foundry implementation, Power Platform solution, or enterprise AI assistant relies on Retrieval-Augmented Generation (RAG), you may already be exposed. In this episode, we explore one of the fastest-growing threats in enterprise AI security and why the architecture behind modern Copilots may contain a fundamental design flaw. We examine how poisoned documents, hidden instructions, malicious metadata, and compromised knowledge bases can manipulate AI systems without ever breaching a firewall or exploiting a traditional software vulnerability. From Microsoft 365 Copilot and SharePoint to Teams, Outlook, Power Platform, Azure OpenAI, and vector databases, we explain why organizations must stop thinking about documents as passive data and start treating them as executable code. If your organization is building AI-powered solutions on proprietary enterprise data, this episode may be one of the most important security discussions you'll hear this year. THE RAG REVOLUTION THAT CHANGED EVERYTHING Retrieval-Augmented Generation transformed enterprise AI. Instead of retraining massive models on internal data, organizations simply connect AI systems to existing knowledge repositories. We explore: * Retrieval-Augmented Generation (RAG) * Microsoft 365 Copilot architecture * Microsoft Graph integration * SharePoint knowledge retrieval * Outlook and Teams context * Vector databases * Semantic search RAG solved the enterprise knowledge problem. It also created a completely new attack surface. WHY DATA IS NO LONGER JUST DATA Traditional software separates data from code. Large Language Models do not. Every piece of text retrieved from a knowledge base becomes part of the model's prompt. The AI cannot reliably distinguish: * Facts * Instructions * Policies * Commands * Metadata * Context Everything becomes tokens. Everything influences behavior. This episode explains why the phrase "Data is Code" has become one of the most important concepts in modern AI security. UNDERSTANDING INDIRECT PROMPT INJECTION Most organizations understand direct attacks. Few understand indirect ones. Direct prompt injection occurs when an attacker interacts directly with the AI system. Indirect prompt injection happens when malicious instructions are embedded inside content the AI retrieves. We examine: * Hidden instructions * Poisoned documents * Embedded commands * Context manipulation * Retrieval abuse * Prompt hijacking The attacker never talks to the AI. The document does it for them. WHY SYSTEM PROMPTS ARE NOT A FIREWALL One of the most dangerous misconceptions in enterprise AI is the belief that system prompts provide security boundaries. They don't. We discuss: * Prompt hierarchy failures * Instruction conflicts * Context competition * Attention mechanisms * System prompt limitations * Safety override scenarios Your AI's security policies are ultimately competing with every document it reads. And sometimes the documents win. THE OWASP NUMBER ONE AI SECURITY RISK Prompt injection consistently ranks as one of the most serious risks facing AI systems today. This episode explores: * OWASP GenAI Top 10 * LLM01 Prompt Injection * AI threat modeling * Enterprise AI vulnerabilities * Security community guidance * Emerging attack patterns Prompt injection isn't theoretical. It's increasingly recognized as the primary security challenge for enterprise AI deployments. POISONING THE KNOWLEDGE BASE Attackers no longer need to compromise the model. They only need to compromise the content. We examine how adversaries weaponize: * SharePoint documents * PDFs * Wiki pages * Email archives * Teams conversations * Knowledge repositories Learn how a single poisoned document can influence thousands of future Copilot interactions. HIDDEN TEXT, METADATA, AND INVISIBLE INSTRUCTIONS The most dangerous attacks aren't visible. Organizations often review documents visually. AI systems don't. We explore: * White-on-white text * Hidden paragraphs * PDF metadata * Document properties * Embedded comments * Unicode manipulation * Invisible instructions The content humans ignore may be the content the AI obeys. THE SLEEPER AGENT PROBLEM Some attacks don't activate immediately. They wait. A poisoned document can remain dormant for months before triggering under specific conditions. We discuss: * Trigger-based attacks * Delayed activation * Backdoor behavior * Conditional instructions * Query-based triggers * Long-term persistence The attack may already exist in your environment. It simply hasn't been activated yet. MICROSOFT 365 ATTACK SURFACES YOU AREN'T MONITORING Enterprise AI reads more than most organizations realize. Potential attack vectors include: * SharePoint Online * OneDrive * Teams Chats * Outlook Email * Calendar Invites * Wiki Pages * Power Platform Data Sources * Microsoft Graph Content Every repository becomes part of the AI security perimeter. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

17 jun 20261 h 18 min
aflevering From SharePoint Developer to Power Platform Architect: Building Secure and Scalable Solutions with Michel Mendes [MVP] artwork

From SharePoint Developer to Power Platform Architect: Building Secure and Scalable Solutions with Michel Mendes [MVP]

In this episode of the M365 Podcast, Mirko Peters sits down with Microsoft MVP Michel Mendes to explore his remarkable journey from traditional SharePoint development to becoming a leading Power Platform Architect. Michel shares how he started his Microsoft technology career in Brazil, transitioned from C# and SharePoint development into the modern Power Platform ecosystem, and eventually moved to Ireland to continue building enterprise-grade solutions for organizations worldwide.Throughout the conversation, Michel provides valuable insights into how the Microsoft ecosystem has evolved over the years, the growing role of AI in software development, and why understanding architecture, governance, and security remains critical even in a low-code world. Whether you're a developer, solution architect, IT leader, or Power Platform enthusiast, this episode delivers practical guidance for building scalable and maintainable business applications. POWER PLATFORM EVOLUTION AND THE FUTURE OF DEVELOPMENT Michel discusses how Power Platform has transformed application development by enabling both professional developers and technically minded business users to build solutions faster than ever before. He also shares his perspective on how AI-powered development tools such as GitHub Copilot are changing the way applications are designed, prototyped, and maintained.Key topics include:• The transition from traditional development to low-code solutions • How AI is accelerating software delivery • Why developers who embrace AI will thrive • The future of Power Apps, Power Pages, and pro-code development • The importance of understanding business problems before building technology BUILDING ENTERPRISE POWER APPS THAT SCALE Creating an app is easy. Creating an app that remains maintainable, performant, and scalable for years is much harder.Michel explains the architectural principles that separate successful Power Platform implementations from those that struggle over time. He shares practical advice on designing reusable components, improving performance, and creating solutions that can grow alongside business requirements.Topics covered:• Power Apps design best practices • Building maintainable applications • Performance optimization strategies • Reusable components and architecture patterns • Measuring business value and user adoption DATAVERSE AS THE FOUNDATION OF MODERN BUSINESS APPLICATIONS A major part of the discussion focuses on Microsoft Dataverse and its role as the foundation for enterprise-grade Power Platform solutions.Michel explains why Dataverse is much more than a database and how it provides built-in governance, security, authentication, and scalability capabilities that help organizations avoid reinventing the wheel.Learn about:• Dataverse architecture fundamentals • Security and governance advantages • Building scalable business applications • Plugins versus Power Automate flows • Designing efficient data models POWER PAGES AND EXTERNAL BUSINESS SOLUTIONS Michel is widely recognized for his expertise in Power Pages, and this episode dives deep into how organizations can create secure, modern, and scalable external-facing websites powered by Dataverse.The conversation explores when Power Pages is the right choice, how it differs from Power Apps, and how recent innovations are making the platform even more attractive for professional developers.Highlights include:• Power Pages fundamentals • External portals and customer-facing applications • React and Angular-based SPA experiences • AI-assisted website development • Modern Power Pages architecture SECURITY, GOVERNANCE, AND WEB API BEST PRACTICES One of the most valuable sections of the episode focuses on security.Michel explains common mistakes developers make when exposing Dataverse data through Power Pages and outlines practical approaches for protecting sensitive information while maintaining usability.Topics include:• Dataverse table permissions • Column-level security • Power Pages Web API security • Common security vulnerabilities • Governance and compliance best practices • Penetration testing and security reviews COMMUNITY, CAREER GROWTH, AND MVP INSIGHTS Michel also shares his experiences as a Microsoft MVP and discusses the importance of contributing back to the Microsoft community through blogging, conference speaking, GitHub projects, and social media engagement.For professionals starting their Power Platform journey, he provides actionable advice on certifications, learning paths, and developing a long-term career strategy within the Microsoft ecosystem.This episode is packed with real-world experience, technical insights, and practical guidance for anyone looking to build secure, scalable, and future-ready solutions with Microsoft Power Platform.Whether you're a SharePoint veteran, a Power Platform developer, a solution architect, or simply curious about the future of low-code and AI-powered development, this conversation with Michel Mendes delivers valuable lessons from someone who has successfully navigated every stage of that journey. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Gisteren44 min
aflevering STOP BUILDING SILOED AGENTS: The Logic App Nervous System artwork

STOP BUILDING SILOED AGENTS: The Logic App Nervous System

Everyone is building AI agents.Very few organizations are building agent architectures.Across Microsoft 365, Copilot Studio, Azure OpenAI, Power Platform, and custom AI solutions, enterprises are racing to deploy copilots, bots, assistants, and autonomous workflows. Teams are creating agents for customer service, IT support, HR onboarding, knowledge discovery, incident management, and business operations.Most of them work.At least in the demo.But something very different happens when organizations move beyond a single agent and attempt to coordinate dozens of AI-powered systems across multiple business units, multiple platforms, and multiple Microsoft 365 tenants.The result is often chaos.Disconnected bots. Duplicate integrations. Credential sprawl. Governance gaps. Broken workflows. Untraceable actions. And increasingly, AI agents that cannot collaborate because they were never designed to operate as part of a larger system.In this episode, we explore why enterprise AI is repeating the same architectural mistakes organizations made during the early API revolution, why point-to-point agent integrations are becoming unsustainable, and how Azure Logic Apps is emerging as the orchestration layer that connects reasoning, execution, governance, identity, and automation into a single enterprise nervous system.If your organization is investing in Copilot Studio, Azure OpenAI, Microsoft 365 Copilot, Power Platform, or custom AI agents, this episode provides a blueprint for building agent ecosystems that actually scale. THE CHATBOT MIRAGE Most enterprise AI projects begin with a simple success story.A team creates a bot.The bot answers questions.The demo works.The project gets funded.Then another department builds another bot.And another.And another.Soon the organization has dozens of isolated AI systems solving local problems but creating enterprise-wide complexity.We explore: * Why AI demos rarely reveal architectural weaknesses * The difference between local optimization and enterprise orchestration * How siloed agents create operational debt * Why successful pilots often fail at scale * The hidden cost of disconnected automation The problem isn't the agents.The problem is the architecture beneath them. THE POINT-TO-POINT INTEGRATION TRAP Every agent needs data.Most agents get it the wrong way.Organizations frequently allow agents to connect directly to APIs, databases, SaaS platforms, and Microsoft Graph endpoints.Initially this feels efficient.Eventually it becomes unmanageable.This episode examines: * Point-to-point integration sprawl * Credential proliferation * Duplicate business logic * Decentralized error handling * Governance fragmentation * Observability challenges The more agents you deploy, the more dangerous direct integration becomes. WHY AGENTS FAIL AT ENTERPRISE SCALE The most advanced language model in the world cannot compensate for poor architecture.We discuss why: * Reasoning is not orchestration * Intelligence is not governance * Conversation is not workflow management * Tool calling is not process execution * AI is not a replacement for enterprise integration Enterprise success depends less on model sophistication and more on execution architecture. THE STATEFUL GAPOne of the most important concepts in this episode is the distinction between reasoning and memory.Most AI agents are stateless.Enterprise processes are not.We explore: * Stateless automation * Stateful orchestration * Long-running workflows * Process persistence * Workflow recovery * Correlation and context management An employee onboarding process may last days or weeks.A chatbot conversation may last minutes.These are fundamentally different workloads. WHY COPILOTS NEED A NERVOUS SYSTEM Human brains don't directly control every muscle individually.The nervous system coordinates actions.Enterprise AI requires the same model.This episode introduces the Logic App Nervous System architecture where: * Agents reason * Logic Apps orchestrate * Connectors execute * Policies govern * Identity secures * Observability monitors The result is coordinated intelligence instead of isolated automation. AZURE LOGIC APPS AS THE ORCHESTRATION LAYER Azure Logic Apps was originally designed for enterprise integration.It is rapidly becoming one of the most important foundations for agentic workflows.We examine: * HTTP-triggered orchestrations * Event-driven automation * Workflow persistence * Long-running process support * Enterprise connectors * Business process orchestration Logic Apps becomes the central coordination layer between agents and enterprise systems. STANDARD VS CONSUMPTION ot all Logic Apps are equal.Choosing the wrong hosting model can limit scalability before your architecture even launches.We compare: * Logic Apps Consumption * Logic Apps Standard * Stateful workflows * Stateless workflows * DevOps integration * Networking capabilities * Performance characteristics For serious agent orchestration, the answer becomes increasingly clear. STATEFUL WORKFLOWS: THE MEMORY LAYER Memory is what transforms automation into orchestration.Stateful workflows provide: * Checkpointing * Persistence * Recovery * Waiting states * Approval handling * Cross-system coordination We explain why workflow memory is often more important than model memory. THE AGENT LOOP ACTION One of Microsoft's most important innovations for agentic workflows is the Agent Loop action.This episode explores: * Think-Act-Learn cycles * Tool execution * Iterative reasoning * Memory retention * AI-assisted orchestration * Workflow-native agents Rather than bolting AI onto workflows, Agent Loop embeds reasoning directly into the orchestration layer. CONNECTORS AS NEURAL PATHWAY SIn the nervous system analogy, connectors become the nerves.They connect orchestration to execution.We discuss: * Microsoft Graph * SharePoint * Teams * Outlook * Dataverse * Dynamics 365 * Azure Services * Custom APIs The orchestrator becomes the central intelligence that routes activity across the enterprise. CUSTOM CONNECTORS AND LOGIC-IN-API Modern enterprises cannot expose proprietary business logic directly to agents.Instead, they need contracts.We explore: * OpenAPI specifications * Custom connectors * Internal APIs * Enterprise service layers * Reusable business capabilities * Governance boundaries Custom connectors become the contract layer between AI and enterprise systems. THE CROSS-TENANT CHALLENGE Most organizations no longer operate in a single Microsoft 365 tenant.Mergers, acquisitions, regional operations, and regulatory requirements have changed the landscape.This episode examines: * Multi-tenant architectures * Cross-tenant identity * Microsoft Entra collaboration * Sovereign boundaries * Tenant isolation * Enterprise coordination Cross-tenant orchestration is becoming the default, not the exception. MANAGED IDENTITIES EXPLAINED Secrets are one of the biggest weaknesses in enterprise automation.We explain how managed identities eliminate: * Client secrets * Credential sprawl * Manual rotation * Shared credentials * Configuration risk Identity becomes a platform capability instead of an operational burden. WORKLOAD IDENTITY FEDERATION Cross-tenant automation introduces a new challenge.How do workloads authenticate without secrets?This episode explores: * Workload identity federation * Azure AD Token Exchange * Federated credentials * Cross-tenant trust * Secretless authentication * Zero Trust architectures This becomes one of the most important building blocks for enterprise-scale agent ecosystems. MICROSOFT ENTRA AGENT ID Identity is becoming a first-class concern for AI agents.We examine how Microsoft Entra Agent ID enables: * Agent governance * Agent identities * Blueprint-driven permissions * Security boundaries * Authorization controls * AI accountability The future of AI governance begins with identity. ERROR HANDLING AS INTELLIGENCE Failures are inevitable.Resilience is optional.We explore advanced orchestration patterns including: * Scoped error handling * Adaptive retries * Compensating transactions * AI-assisted error triage * Self-healing workflows * Recovery orchestration The goal is not preventing failure.The goal is surviving failure intelligently. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Gisteren1 h 18 min
aflevering Building Multi-Agent AI Systems with Copilot Studio: From Ideas to Intelligent Automation with David Lorenzo Lopez [MVP] artwork

Building Multi-Agent AI Systems with Copilot Studio: From Ideas to Intelligent Automation with David Lorenzo Lopez [MVP]

Artificial Intelligence is rapidly evolving from simple chatbots into sophisticated multi-agent systems capable of automating complex business processes, collaborating across services, and delivering real business value. In this episode of the M365 Podcast, Mirko Peters sits down with Microsoft MVP David Lorenzo Lopez to explore the future of intelligent automation and how organizations can leverage Microsoft Copilot Studio, Azure AI Foundry, and the Microsoft Agent Framework to build scalable AI solutions.David shares his journey from web development and .NET programming to becoming a leading voice in AI-driven automation. He explains how the arrival of GPT models transformed the technology landscape and why the real challenge today is no longer generating impressive demos but creating measurable business outcomes with AI. WHAT ARE MULTI-AGENT AI SYSTEMS? One of the core topics of this conversation is the concept of multi-agent systems. David compares modern AI architectures to the evolution from monolithic applications to microservices. Instead of building one giant AI agent responsible for everything, organizations can create specialized agents focused on individual tasks and orchestrate them through a central coordinator.Key benefits include: * Improved scalability and maintainability * Better task specialization and accuracy * Easier testing and optimization * Reusable AI components across multiple business scenarios * Greater control over automation workflows COPILOT STUDIO VS AZURE AI FOUNDRY Microsoft now offers multiple ways to build AI-powered solutions, and David explains when to choose each platform.The discussion covers how Copilot Studio enables rapid low-code development using Power Platform integrations, while Azure AI Foundry provides greater flexibility, customization, and scalability for advanced AI implementations. As Microsoft continues to integrate these platforms, organizations have more options than ever to match their technical and business requirements.Topics covered include: * Copilot Studio connected agents * Azure AI Foundry orchestration * MCP connectors * Knowledge integration * Low-code versus pro-code development * AI workflow design patterns HUMAN-IN-THE-LOOP AND RESPONSIBLE AI While autonomous AI systems are becoming more capable, David strongly advocates for maintaining human oversight in critical business processes. He explains why AI should support decision-making rather than completely replace it, especially when financial, legal, or operational risks are involved.The conversation explores: * Approval workflows * Human validation processes * Governance strategies * Compliance considerations * Risk mitigation for AI automation MICROSOFT AGENT FRAMEWORK AND THE FUTURE OF AI DEVELOPMENT A major highlight of the episode is Microsoft's new Agent Framework. David explains how the framework combines capabilities from Semantic Kernel and other Microsoft AI initiatives to create a powerful platform for building enterprise-grade agents.Listeners will learn how developers can: * Create custom AI agents * Build complex orchestration workflows * Deploy scalable AI solutions * Integrate with Azure services * Develop reusable intelligent systems GOVERNANCE, SECURITY, AND THE EU AI ACT As AI adoption accelerates across Europe, governance and compliance have become essential topics. David discusses how Microsoft addresses security, data residency, privacy, and regulatory requirements through Azure AI services and emerging governance tools such as Agent 365 Control Plane.The discussion also covers: * Data protection requirements * European AI regulations * Azure OpenAI compliance * Model selection strategies * AI governance best practices CONTROLLING AI COSTS AND FINOPS One of the biggest challenges organizations face is understanding and controlling AI costs. David explains why estimating AI consumption is difficult and how businesses can establish practical monitoring and optimization strategies. Learn about: * Token consumption * Copilot Studio credits * Pay-as-you-go models * Cost optimization techniques * AI FinOps best practices KEY TAKEAWAYS This episode delivers practical insights for architects, developers, IT leaders, and business decision-makers looking to move beyond AI hype and create sustainable business value through intelligent automation.David's final message is simple yet powerful: AI is a wave that is transforming every industry. Organizations and individuals can either let it pass over them or learn how to ride it. Those who embrace AI responsibly, strategically, and thoughtfully will be best positioned for the future.CONNECT WITH M365 FMIf you enjoyed this episode, subscribe to M365 FM on Apple Podcasts, Spotify, YouTube, and your favorite podcast platform. Don't forget to leave a review and share the episode with colleagues interested in Microsoft Copilot, AI Agents, Azure AI Foundry, and the future of intelligent automation. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

15 jun 202654 min
aflevering The Rise of Private LoRA: Architecting Secure AI on Proprietary Data artwork

The Rise of Private LoRA: Architecting Secure AI on Proprietary Data

Everyone is talking about AI adoption. Far fewer are talking about AI sovereignty. Organizations have rushed to deploy Microsoft Copilot, Azure OpenAI, ChatGPT Enterprise, Claude, Gemini, and dozens of AI-powered productivity tools. The results have been impressive. Productivity has increased. Development cycles have accelerated. Knowledge discovery has improved. But beneath the excitement lies a growing concern. What happens when your organization's most valuable asset—its proprietary knowledge—starts flowing into AI systems you don't fully control? In this episode, we explore the rise of Private LoRA (Low-Rank Adaptation), why data sovereignty is rapidly becoming one of the most important architectural challenges in enterprise AI, and how organizations can build secure, domain-specific AI models without training foundation models from scratch. We examine the convergence of AI governance, regulatory compliance, Microsoft cloud architecture, sovereign AI, LoRA fine-tuning, quantization, federated learning, and enterprise security. If your organization views proprietary data as a strategic advantage, this episode explains why the future of AI may not belong to the biggest models—but to the most specialized ones. THE SHADOW AI CRISIS Most organizations believe their AI strategy is governed. The reality is very different. Employees routinely paste sensitive information into public AI systems because they are faster and easier than approved tools. This phenomenon has a name: Shadow AI. We explore how: * Proprietary business data leaks into public models * Internal documents are shared outside governance boundaries * Competitive intelligence leaves the organization * Customer information becomes exposed * Security teams lose visibility The risk isn't always a breach. Sometimes it's simply the slow erosion of proprietary knowledge. WHY DATA SOVEREIGNTY MATTERS The conversation around AI is shifting. Organizations are no longer asking: "Can we use AI?" They're asking: "Where does the data go?" This episode explores the growing importance of: * AI Sovereignty * Data Residency * Data Localization * Cross-Border Data Restrictions * Intellectual Property Protection * AI Governance * Digital Sovereignty As regulatory pressure increases, organizations are discovering that data location is becoming as important as model performance. THE REGULATORY WALL IS ARRIVING Compliance is no longer a future problem. It's becoming an architectural requirement. We examine the impact of: * EU AI Act * GDPR * CPRA * LGPD * Data Localization Requirements * Financial Regulations * Healthcare Compliance Frameworks You'll learn why AI architectures designed for unrestricted global data movement may struggle in a world increasingly defined by jurisdictional boundaries. MICROSOFT'S APPROACH TO AI SECURITY Microsoft provides some of the strongest enterprise AI protections available today. But even with: * Microsoft 365 Copilot * Azure OpenAI * Azure AI Foundry * Microsoft Purview * Microsoft Entra ID * Azure Confidential Computing There remains a gap between approved enterprise AI usage and actual user behavior. We discuss how organizations can extend Microsoft's security model while maintaining control over proprietary intelligence. THE FALSE CHOICE BETWEEN PUBLIC AI AND BUILDING YOUR OWN MODEL Many organizations believe they have only two options: Option One Use public AI services. Option Two Build and train a foundation model from scratch. In reality, there is a third option. Private LoRA. This episode explains how LoRA enables organizations to customize powerful open-weight models without the extraordinary cost and complexity of full model training.  HOW LORA ACTUALLY WORKS  LoRA, or Low-Rank Adaptation, changes the economics of AI customization. Instead of retraining billions of parameters, LoRA introduces lightweight trainable layers that adapt an existing model to a specific domain. We break down: * Full Fine-Tuning * Parameter-Efficient Fine-Tuning * Adapter Architectures * Rank Selection * Training Efficiency * Model Specialization * Domain Adaptation The result is a highly customized AI model with a fraction of the cost and infrastructure requirements. QUANTIZATION CHANGES EVERYTHING LoRA becomes even more powerful when paired with quantization. Using techniques such as: * 8-bit Quantization * 4-bit Quantization * NF4 * QLoRA Organizations can dramatically reduce hardware requirements while maintaining strong performance. We explain how: * Memory consumption drops * Training costs decrease * Inference becomes affordable * Single-GPU deployments become practical This is one of the key innovations making sovereign AI achievable for mainstream enterprises. THE SINGLE-GPU ENTERPRISE AI MODEL  One of the most surprising insights in this episode is how little infrastructure is required. Using modern open-weight models and LoRA adaptation, organizations can: * Train on a single GPU * Deploy internally * Retain data sovereignty * Eliminate API dependencies * Reduce operating costs We explore architectures built around: * Llama * Mistral * Open-Weight Models * Azure GPU Infrastructure * Azure Kubernetes Service * Azure Machine Learning The economics are far more accessible than many organizations assume. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

15 jun 20261 h 22 min