The Purview Practitioner Podcast

The Purview Practitioner

Your practical guide to Microsoft Purview and data security. Luke and Johnny cut through the noise to walk you through the complete data security journey - visibility, classification, protection, DLP, governance, and enabling AI and agents securely. Drawing on years of hands-on experience at the sharp end of data security, each episode delivers real-world advice in plain language. Short, focused episodes designed for busy security professionals. No fluff, just stuff you can actually use.

Episodes

  1. Episode 5: Insider Risk - The Threat That's Already Inside

    APR 6

    Episode 5: Insider Risk - The Threat That's Already Inside

    You know what data you have, you've classified it, you're stopping it leaking, and you're governing its lifecycle. But what about the person moving the data? In Episode 5, Luke and Johnny get into Microsoft Purview Insider Risk Management - the detection layer that sits on top of everything else and watches for patterns of risky behaviour before they become incidents. And no, it's not about spying on your employees. We cover: - Why most insider risk is accidental, not malicious - and why that matters for how you deploy it - The two-step setup most people get wrong - indicators first, policies second - What's included with E5 vs what needs pay-as-you-go billing - Triggering events and indicators explained - what actually brings a user into scope - The HR, Legal, and Security triangle - and why you can't deploy IRM without all three - Sequence detection and cumulative exfiltration - spotting the patterns DLP misses - Privacy by design - pseudonymisation, RBAC, and how to build trust with employees - Adaptive Protection - the bridge between data security and identity governance - The new Risky Agents template and what it means for autonomous AI in your tenant - Cases, user activity reports, and the new Data Security Triage Agent powered by Security Copilot This is the fifth pillar of the season - detection. We've built the foundation, classified the data, prevented the leaks, and governed the lifecycle. Now we're watching for the patterns!

    25 min
  2. Episode 4: Governing Your Data Lifecycle

    MAR 29

    Episode 4: Governing Your Data Lifecycle

    You know what data you have, you've classified it, and you're stopping it from leaking. But how long should you actually keep it? And what happens when you don't need it anymore? In Episode 4, Luke and Johnny get into Data Lifecycle Management in Microsoft Purview - retention policies, retention labels, and how to build a retention strategy that actually works in production. We cover: - Retention policies vs retention labels - what each one does and when to use them - Static scopes vs adaptive scopes - and why your Entra ID data matters - A real-world deployment example for a UK-based company - phased from baseline policies through to targeted retention by department and region - The four principles of retention - what wins when policies overlap - How retention ties into Copilot readiness - because overkeeping is just as risky as oversharing - Leavers, orphaned mailboxes, and why nobody owns the cleanup - Meeting recordings, storage costs, and where priority cleanup fits in This is the fourth pillar of Microsoft's information protection framework - know your data, protect your data, prevent data loss, and now govern your data.

    26 min
  3. Episode 3: Data Loss Prevention - Stopping Data Walking Out the Door

    MAR 23

    Episode 3: Data Loss Prevention - Stopping Data Walking Out the Door

    You've turned on the lights and labelled the boxes. Now it's time to stop them leaving the warehouse. In Episode 3, Luke and Johnny get into Data Loss Prevention in Microsoft Purview - how it works, how to structure your policies, and why simulation mode is your best friend before you block anything. We cover: - The three building blocks of a DLP policy: location, conditions, actions - Why you should split policies by workload instead of grouping everything together - Sensitive info types vs sensitivity labels as DLP conditions and when to use each - The simulation to enforcement journey - crawl, walk, run - Policy tips, user education and override justifications - DLP for Copilot interactions and the January 2026 bug that caught people out - Endpoint DLP, browser-level enforcement and onboarding into Defender - New features: posture reports, the DLP triage agent, and adaptive protection - Planning tools on thepurviewpractitioner.com If you're building DLP policies or figuring out where to start with enforcement in Purview, this one walks you through it step by step. Next episode: Information Rights Management - what happens when data actually leaves your organisation.

    23 min
  4. Episode 0: Who We Are and Why This Podcast Exists

    MAR 12

    Episode 0: Who We Are and Why This Podcast Exists

    Welcome to The Purview Practitioner Podcast! In this intro episode, hosts Luke and Johnny explain what the show is all about, who it's for, and what to expect from the series. We cover: - Who we are and our backgrounds in cybersecurity and data security - Why we started this podcast and what gap we're trying to fill - The journey we're taking you on - from visibility and classification through to protection, DLP, governance, and enabling AI securely - How we're keeping things practical, plain language, and jargon-free - Johnny's experience at the Microsoft AI Tour in London and what's coming from Microsoft on the security front This podcast is for security professionals, IT teams, compliance leads, or anyone responsible for protecting data in their organisation - whether you're just getting started with Microsoft Purview or looking to mature your existing setup. Episodes are kept short and focused (12-15 mins) so you can listen on your commute, on a walk, or between meetings.

    10 min
  5. Episode 1: You can't protect what you can't see

    MAR 12

    Episode 1: You can't protect what you can't see

    Most organisations jump straight into DLP policies and encryption before doing the most important thing first - finding out where their data actually lives. In this episode, Luke and Johnny break down why visibility is the foundation of any data security project, and how Microsoft Purview's built-in tools can help you get there. We cover: - Why sensitive information types and trainable classifiers are the backbone of everything in Purview - How to use Data Explorer and Activity Explorer to understand what data you have and where it's going - The audit log - why it matters and how to check it's turned on - Shadow AI risks and why your users are your biggest exposure right now - How to get stakeholder buy-in before you touch a single policy If you're new to Purview or just trying to figure out where to start, this one's for you. Hosted by Luke Baumber and Johnny Sheehan - two Microsoft security specialists helping organisations get more from Microsoft Purview.

    16 min
  6. Episode 2: Taxonomy First, Technology Second

    MAR 12

    Episode 2: Taxonomy First, Technology Second

    Visibility told you where your data is. Now it's time to make sense of it. In Episode 2, Luke and Johnny break down sensitivity labels and taxonomies in Microsoft Purview. Why your data handling policy should drive your label structure, how to avoid the taxonomy mistakes that derail most labelling projects, and why getting this right matters more than ever with Copilot in the mix. We cover: - What a taxonomy actually is and how to design one that sticks - Sensitivity labels as policy containers, not just tags - Client-side vs service-side labelling - Label groups: Microsoft's modern label scheme replacing parent labels - How DLP and labels work together (but don't depend on each other) - The label lockout trap and other gotchas - Why you should pilot before you publish

    20 min
  • 6 Episodes

About

Your practical guide to Microsoft Purview and data security. Luke and Johnny cut through the noise to walk you through the complete data security journey - visibility, classification, protection, DLP, governance, and enabling AI and agents securely. Drawing on years of hands-on experience at the sharp end of data security, each episode delivers real-world advice in plain language. Short, focused episodes designed for busy security professionals. No fluff, just stuff you can actually use.

Information