Microsoft 365 Governance Fails as Companies Rush into AI Adoption

A recent survey by Syskit has revealed that many companies are struggling to manage permissions and security within Microsoft 365, with 90% of IT leaders reporting security incidents linked to misconfigurations or over-permissioned access in the past two years.

According to the report, which surveyed over 300 IT and security decision-makers, more than three-quarters of respondents have deployed or piloted an enterprise AI tool on Microsoft 365 data, but less than half completed a thorough review of permissions and oversharing risk first.

Syskit CEO Toni Frankola stated that organizations often believe their permissions are under control, only to discover access they didn't know existed. This is becoming more consequential as partners are increasingly asked to turn on AI and agents for their clients.