Digital Workplace (M365)
Microsoft 365 is today the de facto standard for the digital workplace. But without clear architecture and governance, the platform quickly leads to uncontrolled data sprawl, security vulnerabilities, and frustrated users.
A successful M365 strategy balances maximum freedom for collaboration with the necessary guardrails for data protection, archiving, and compliance.
Anti-Patterns: The M365 Chaos
- Teams Sprawl: Every user can uncontrolledly create new teams and channels, leading to unfindable information.
- Unclear Data Sovereignty: Sensitive data reside in private OneDrive folders instead of structured SharePoint libraries.
- Lack of Security Configuration: Standard settings are adopted without activating MFA (multi-factor authentication) or Data Loss Prevention (DLP).
- Shadow IT in the Cloud: Use of third-party apps within Teams without approval by IT.
The Structured Platform
- Identity & Access Management: Consistent use of Entra ID (formerly Azure AD) with Conditional Access and MFA as a central security anchor.
- Governance Framework: Clear rules for the creation, naming, and deletion (lifecycle) of teams and SharePoint sites.
- Data Loss Prevention (DLP): Automated detection and protection of sensitive information (e.g., credit card numbers, patient data) against unauthorized outflow.
- Modern Collaboration Patterns: Training users in the correct use of Teams (for communication), SharePoint (for documents), and OneDrive (for personal drafts).
- Information Protection: Classification of documents (e.g., "Internal", "Confidential") to anchor encryption and access rights directly at the file.
The Focus: Platform as Enabler
M365 is not a software collection, but an ecosystem. The architecture must be designed so that it automates business processes (e.g., via Power Automate) and does not just manage emails.
FAQ
Should we block the creation of teams for all users?
No, that only promotes shadow IT. Use an automated approval process instead that ensures every new team has a responsible person and a clear purpose.
Is M365 even DSGVO/DSG-compliant to use?
Yes, under adherence to specific technical and organisational measures (TOMs), such as the correct location of data storage (Swiss region) and the encryption of particularly sensitive data.
Reference Guide
- Microsoft 365 Governance Guide: Official recommendations from Microsoft. learn.microsoft.com
- M365 Security & Compliance Center: Central point of contact for protective measures. compliance.microsoft.com
- SharePoint Patterns and Practices (PnP): Community-driven best practices for M365. pnp.github.io