Episode 38 - Copilot Doesn't Create Risk, It Reflects It - Oversharing, Agent Governance & DSPM

Is Microsoft 365 Copilot exposing your organization's biggest security blind spots? In this Part 2 of of our Navigating Copilot in 2026 series, Scott sits down with Endpoint & Security Leader Taylor Kocon to unpack the uncomfortable truth: Copilot doesn't create risk, it reflects the permissions debt organizations have been ignoring for years.

We dive deep into the numbers: 40% of organizations have delayed their Copilot rollout over oversharing concerns, 16% of business-critical data is overshared in typical M365 tenants, and an average of 802,000 files are at risk per organization. Taylor & Scott walk through real dashboards and live demos including Microsoft Entra's agent governance portal (200+ AI agents in a single tenant!), Microsoft Purview's Data Security Posture Management (DSPM), and content management assessments that reveal hundreds of sites with broken permissions.

Whether you're planning your Copilot deployment or already in production, this episode is essential for IT leaders, security professionals, and Microsoft 365 administrators.