Copilot only shows users what they can already access. The real problem is years of "Everyone except external users", sharing links that never expire and sites without an owner. Copilot suddenly makes all of that visible, and the temporary brake many organizations relied on, Restricted SharePoint Search, is being retired.

In this session I share the four-phase approach I use with customers. Find: with the Data Access Governance reports and Purview data risk assessments. Contain fast: with Restricted Content Discovery and restricted access control, without delaying your Copilot rollout. Fix structurally: with site access reviews, so site owners clean up their own sites. Keep it fixed: with site ownership, inactive site and attestation policies.

You'll also see the pitfalls you only discover in practice, and which of these features come with your Copilot licenses.

Key takeaways:
- A four-phase plan: find, contain, fix, keep it fixed
- What Restricted Content Discovery does and does not do
- How to make site owners part of the solution
- Real-world pitfalls and licensing facts

Level: Intermediate–Advanced (300)
Format: Session, 45 or 60 min, with demos
Audience: IT pros, SharePoint and compliance admins