Govern and secure Microsoft 365 tenants and workloads: Review

A client needed help sorting out their M365 security, and this path seemed like a good way to get a map of the territory. It's mostly a massive collection of documentation pages stitched together with quizzes. You read about Entra ID, you read about Defender for Office 365, you read about Purview, and then you answer multiple-choice questions that mostly check if you remember the product names. There are no real labs. I didn't have to configure a single conditional access policy or set up a real data loss prevention rule.

The content itself is current, which is a huge plus. It uses the new Entra and Purview branding, unlike a lot of older material floating around. It gives you a complete overview of the M365 security world, which is valuable if you're starting from zero. I now know what all these different admin centers are supposed to do, and I can explain the difference between information protection and data lifecycle management.

But the 'AI-native company' angle felt tacked on. The advice—secure identities, protect data, manage access—is the same for any company. The path never gets into the specific governance challenges posed by, say, fine-tuning models on internal data or managing Copilot prompts. It just mentions AI in the intro and then proceeds with standard M365 admin content. Use this as a catalog to figure out what you need to learn, but you'll have to go find other resources (or get a trial tenant) to actually learn how to do it.