Jeroen Bijdevier
Security Architect | Microsoft Purview, SharePoint & Copilot Governance
Security Architect | Microsoft Purview, SharePoint & Copilot Governance
Tilburg, The Netherlands
Actions
I'm a Security Architect at AVK Training & Coaching in the Netherlands. I specialize in the intersection of security, compliance and data. I help organizations get their information under control with Microsoft Purview and SharePoint, so they can adopt Microsoft 365 Copilot and agents safely.
I believe compliance is driven by the business, not by IT. That's why I keep the human side central: governance only works if it fits the way people work.
I share what I learn in the field. I co-organize the Dutch Data Security & Compliance Community (DDSCC) and co-host its podcast, and together with Willem Jonkers I write a free Dutch blog and vlog series on Microsoft 365 governance (30+ posts). I've spoken at DIWUG, DDSCC and CollabDays Bletchley Park.
Expect practical sessions: real settings, real pitfalls, no sales pitch.
Ik ben Security Architect bij AVK Training & Coaching in Nederland. Mijn specialisme ligt op het snijvlak van security, compliance en data. Ik help organisaties grip te krijgen op hun informatie met Microsoft Purview en SharePoint, zodat ze Microsoft 365 Copilot en agents veilig kunnen inzetten.
Ik geloof dat compliance wordt gedreven door de business, niet door IT. Daarom staat de menselijke kant bij mij centraal: governance werkt alleen als het past bij hoe mensen werken.
Wat ik in de praktijk leer, deel ik graag. Ik ben mede-organisator van de Dutch Data Security & Compliance Community (DDSCC) en co-host van de podcast. Samen met Willem Jonkers schrijf ik een Nederlandstalige blog- en vlogserie over Microsoft 365 governance (30+ posts). Ik heb gesproken bij DIWUG, DDSCC en CollabDays Bletchley Park.
Verwacht praktische sessies: echte instellingen, echte valkuilen, geen verkooppraatjes.
Links
Area of Expertise
Topics
Get control of your data before Microsoft 365 Copilot does. Archive, remove and govern en
Microsoft 365 Copilot does not change your permissions, but it can make existing oversharing easier to discover. Forgotten SharePoint sites and outdated documents can become sources for answers simply because users already have access. How do you tackle years of redundant, obsolete, and trivial (ROT) data without deleting content people still need?
In this practical, demo-driven session, Jeroen Bijdevier and Pieter Kops explore three decisions:
• Which content should Copilot discover and use?
• Which content should be preserved but excluded from Copilot responses?
• Which content should be retained, archived, or deleted according to policy?
Jeroen demonstrates how Data Access Governance reports and SharePoint Advanced Management help identify oversharing and inactive sites, and how Microsoft Purview Data Lifecycle Management supports retention and deletion decisions.
Pieter demonstrates site-level and file-level archiving with Microsoft 365 Archive, showing how to reduce Copilot noise while preserving content for future retrieval. Together, we explain where Restricted Content Discovery fits while access and content are reviewed.
You will leave with a phased approach you can start applying on Monday: assess exposure, involve content owners, and choose the right action.
Level: Intermediate. Working knowledge of Microsoft 365, SharePoint, Teams, and permissions is recommended. No specialist Purview knowledge required.
Saying Yes to Copilot: 10 Questions Every CISO Should Ask Before Go-Live en
Most Copilot sessions are about settings. But the decision to go live often sits with a CISO or leadership team who never open an admin center. They want to know: are we ready, and how can I tell?
In this session I translate Copilot and agent governance into ten questions a CISO should ask their team. From "Do we know where our sensitive data lives?" to "What happens to an agent when its maker leaves?" For each question I show what a good-enough answer looks like, which report or evidence to ask for, and what the business itself has to own. Because governance only works if it fits the way people work.
No sales pitch, just a list you can use in your next meeting.
Key takeaways:
- Ten questions, each with a good-enough answer
- Which evidence to ask your team for
- How to place ownership with the business, not just IT
- A one-page summary for your board
Level: Introductory (100–200)
Format: Interactive session, 45 min
Audience: CISOs, technical and business decision makers
Every Switch, Every Portal: Getting Copilot and Agent Governance Right en
You can't govern Copilot and agents from a single screen. One agent touches six admin portals: the Microsoft 365 admin center, Entra, the Power Platform admin center, SharePoint, Purview and Defender. Many organizations switch Copilot on and keep the defaults, or don't know which setting covers which risk.
In this session we walk through every portal live. For each setting I show the default, what I recommend to my customers, and who should own it: IT, security or the business. We cover who can use, share and publish agents, how to block, delete and reassign them, how agents get their own identity, and how Purview and SharePoint Advanced Management keep an agent away from the wrong information. Throughout, I separate what is available today from what is still in preview.
You leave with a free baseline checklist you can run through in your own tenant the next morning.
Key takeaways:
- A map of all six portals and the question each one answers
- Every key Copilot and agent setting: default versus recommended
- An ownership model: which setting belongs to IT, security or the business
- A free baseline checklist on GitHub
Level: Intermediate–Advanced (300)
Format: Session, 45 or 60 min, demo-heavy
Audience: IT pros, security and compliance admins, architects
Copilot Doesn't Overshare, Your Permissions Do: Fix It with SAM and Purview en
Copilot only shows users what they can already access. The real problem is years of "Everyone except external users", sharing links that never expire and sites without an owner. Copilot suddenly makes all of that visible, and the temporary brake many organizations relied on, Restricted SharePoint Search, is being retired.
In this session I share the four-phase approach I use with customers. Find: with the Data Access Governance reports and Purview data risk assessments. Contain fast: with Restricted Content Discovery and restricted access control, without delaying your Copilot rollout. Fix structurally: with site access reviews, so site owners clean up their own sites. Keep it fixed: with site ownership, inactive site and attestation policies.
You'll also see the pitfalls you only discover in practice, and which of these features come with your Copilot licenses.
Key takeaways:
- A four-phase plan: find, contain, fix, keep it fixed
- What Restricted Content Discovery does and does not do
- How to make site owners part of the solution
- Real-world pitfalls and licensing facts
Level: Intermediate–Advanced (300)
Format: Session, 45 or 60 min, with demos
Audience: IT pros, SharePoint and compliance admins
Old Data, Confident Answers: Clean Up with Purview and SAM Before Copilot en
Copilot can't tell whether a document is current or five years old. It answers just as confidently from both. The more outdated and duplicate information you have, the worse the answers get.
In this session I share a 90-day cleanup plan. We find inactive and ownerless sites with SharePoint Advanced Management, handle the OneDrives of people who left, decide per type of content between retention, records or deletion, and archive what you must keep but no longer use with Microsoft 365 Archive. I also show what disposition review can and can't do, and where the built-in features stop.
Cleaning up isn't a one-off job. You'll see how to set it up so it keeps working.
Key takeaways:
- A 90-day cleanup plan with SAM and Purview
- When retention is enough and when you need records management
- How to archive without losing information
- The honest limits of the built-in features
Level: Intermediate (200–300)
Format: Session, 45 or 60 min, with demos
Audience: IT pros, records and information managers
Je omgeving op orde voor veilig en optimaal Copilot gebruik nl
Copilot ziet het verschil tussen achterhaalde en recente informatie niet. Die zal je dus een beetje moeten helpen. Rechten zijn vaak niet (in detail) op orde. Manueel deze zaken vinden is lastig en tijdrovend. Natuurlijk wil je rapportages hebben van het gebruik. Ergo dataveiligheid op orde en inzicht in het gebruik met Purview.
Meer Copilot agents als collega’s? nl
Met inzet van Copilot agents kun je werkprocessen vereenvoudigen of zelfs volledig automatiseren. Door repetitieve taken uit handen te nemen ontstaat er ruimte voor werk dat écht waarde toevoegt.
Tegelijkertijd brengt de groei van verschillende agents een nieuwe uitdaging met zich mee. Wanneer teams hun eigen varianten ontwikkelen met subtiel afwijkende prompts, kunnen antwoorden uiteenlopen en ontstaat er al snel ruis, verwarring en risico op inconsistentie.
In deze sessie geef ik inzicht hoe je grip houdt op de groei van deze ‘digitale collega’s’.
From Digital Chaos to Cloud Clarity: A People-First Approach to Information Mastery en
We’ve all had that moment, staring at a screen full of files and folders, wondering how things got so messy. We were told the cloud would make our lives easier, but for many of us, it feels like we just took our old office clutter and moved it into a bigger, more expensive digital attic. If you’ve ever felt like you’re losing the battle against your own data, you are definitely not alone.
In this interactive and high-energy session at ESPC, we’re stepping away from the complex technical jargon to focus on what makes the cloud work: the people and the purpose.
What’s the Big Idea?
Managing information in the cloud isn’t just an IT project, it’s a cultural shift. We’ve seen organizations struggle with the same recurring hurdles, and we’re here to unpack them with you. We’ll dive deep into the "human" side of data, exploring:
The Art of Organizing: How do we move beyond endless folders to a structure that actually makes sense for the way we work today?
The "Who Owns What?" Puzzle: Identifying data owners isn’t just about assigning a name to a file; it’s about empowering people to take pride in and responsibility for their digital neighborhood.
Adoption by Design: Why "building it" doesn't mean they will come. We’ll discuss how to weave change management into the very fabric of your setup so that your team feels supported, not overwhelmed.
Security for the Rest of Us: Information protection is vital, but if it's too hard to use, people will find a workaround. We’ll talk about how to make staying safe feel like second nature for every user.
A Session Where You Drive the Conversation
Forget everything you know about "death by PowerPoint." This session belongs to you. We are ditching the lecture in favor of a lively, community-driven dialogue.
How it works:
The Great Debate: We’ll present real-life scenarios and tough cloud dilemmas.
Yes or No? You’ll be asked to take a stand. Is "Change Management" more important than "Technical Configuration"? Is "Data Ownership" a myth? You decide!
Share Your 'Why': We’ll invite participants to share the stories behind their choices. Whether you’re a seasoned pro or just starting your journey, your perspective is what makes this session valuable.
Your Topics, Your Voice: We’ve left plenty of room to pivot to the topics you care about most.
Why Should You Attend?
You’ll walk away not just with a list of "best practices," but with a fresh perspective and a sense of community. This isn't a competition to find the "right" answer; it’s a fun, inspiring space to learn from each other's successes and "happy accidents."
Join us for a session filled with insight, laughter, and actionable ideas that will help you turn your cloud chaos into a clear, collaborative success story!
DDSCC Meetup User group Sessionize Event
DIWUG Meetup User group Sessionize Event
Jeroen Bijdevier
Security Architect | Microsoft Purview, SharePoint & Copilot Governance
Tilburg, The Netherlands
Links
Actions
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top