About this session
Here’s a contradiction: the accounts that can rewrite your entire tenant, read executive mail, grant a rogue app persistence, or self-assign Global Admin are often your least defended. Only 55% of organisations enforce MFA across 75–100% of admin accounts, compared with 62% for standard users.
MFA is the most basic security control. If it’s not enforced on accounts with the largest blast radius, what else are you assuming is covered that isn’t?
Join Sharon for Seven Microsoft 365 Myths to Retire, exploring where Microsoft 365 security confidence breaks down, from admin privileges and Copilot rollouts to SharePoint growth. Based on the 2026 CoreView survey of 279 IT and security leaders, we’ll compare assumptions against the data.
If you manage or secure Microsoft 365, this session is for you.
What you’ll take away
• Where security confidence and control coverage diverge.
• Why Copilot rollouts stall on legacy permissions.
• Risks from privileged accounts, Entra apps, and configuration changes.
• What Microsoft doesn’t back up, monitor, or restore.
• How to pressure-test your assumptions before audits, reviews, or Copilot decisions.
Speakers
Have a question on this talk?
Send it to the presenter. The team passes it on and the reply comes to you by email.
