Discover
What data, where, since when, shared with whom: in Microsoft 365 and on your file servers.
Data protection · Microsoft Purview
Know what you hold. Decide what may leave.
Classification, sensitivity labels, leak prevention, insider risk and lifecycle: I build your protection model from discovery to operations, and prepare the arrival of Copilot.
Classify
A label model everyone can read, multilingual, with granular permissions.
Protect
Leak prevention on endpoints, cloud and email; encryption; sharing control.
Monitor
Insider risk, departing employees, abnormal behaviour, actionable alerts.
Retain
Retention, archiving, records, eDiscovery: keep what is needed, as long as needed.
Prepare for AI
Clean up oversharing and frame assistant access before deploying them.
What I do for you
Data protection
Data protection roadmap
- Tenant audit: policies, retention, volumes
- Target classification model and detection scenarios
- Information Protection then DLP trajectory, budgeted
Sensitive data discovery
- Microsoft 365: sites, mailboxes, Teams, sharing
- On-premises: scanner and mapping
- Advanced detection: keywords, patterns, fingerprints, exact data match (EDM)
Purview implementation
- Labels, Endpoint and Cloud DLP, Insider Risk
- Lifecycle, records, communication compliance
- Rollout support and exception handling
Copilot readiness
- Data exposure assessment (oversharing)
- Permission and site clean-up
- Usage framework and assistant governance
The method, applied
Six steps, one thread.
A clear label model and reliable detections.
Where your data goes, and through which channels.
What an AI assistant could see today.
Method
- 01Scoping
Understand the need, the stakes and the constraints. Set the scope, the actors and the expected results.
- 02Audit
Observe the current state without assumptions: configurations, usage, documents, interviews and tool-based measurements.
- 03Analysis
Confront the findings with frameworks and your objectives. Measure the gaps, qualify the risks, prioritise.
- 04Design
Design the target and the path to reach it: architecture, governance, budget, licences, milestones.
- 05Transcription
Translate the target into operational documents your teams and vendors can execute without me.
- 06Delivery
Present, get stakeholder sign-off, transfer knowledge and support the implementation.
Classify our sensitive data before Copilot
Sensitivity labelsPublished
PublicNo restriction
InternalEmployees
ConfidentialRestricted editor
Highly confidentialOwner
IBAN detected · Supplier_contract.docxConfidential
Where does our data go this month?
Detected leak channelsDLP
Proposed actionBlock + encrypt "Confidential" files
Illustrative example
What would an AI assistant see today?
Data exposureOversharing
0%sites shared with "everyone"
0sensitive files reachable
After remediationExposure under control
Illustrative example
Workshops and knowledge transfer
Dense, practical sessions that make your teams autonomous.
Watch
What is moving on this topic
An automatic selection of recent articles from trusted sources, filtered to keep only what touches this specialty.
The CT Conseil briefing
Get this watch every week
One edition a week: the deadlines you must not miss, what is moving on Entra, Purview, Defender and compliance, and one practical tip. No advertising, one-click unsubscribe. Editions are written in French.
Gauge my level in 5 questions
Five questions to measure your data maturity. Answer spontaneously.
Two minutes, no tricks. You leave with a level and concrete leads.
Question 1 of 5
An employee leaving with data…
Data protected? Let's look at your overall posture.
Audits, Zero Trust, detection and response: cybersecurity ties everything together.