Who is writing this
About
Information protection and compliance in Microsoft 365, with a focus on Swedish public sector organisations.
I work with information protection and compliance in Microsoft 365 — Purview, data loss prevention, sensitivity labels, and the controls that sit behind them.
Most of that work comes down to one question, asked in different ways: can you show that this control is doing what you say it does? Organisations can usually answer it for the day of the audit. Far fewer can answer it for the eleven months in between.
This site is where I write that up — how the controls are built, how they quietly stop working, and what evidence a supervisory authority will actually accept.
What I write about
- Microsoft Purview — DLP policies, sensitivity labels, retention, and the gap between what the portal shows and what is actually enforced
- Configuration as evidence — baselines, change history, scheduled comparison, and drift reporting
- Automation that can be trusted — including the failure modes that report success while checking nothing
- Compliance in practice — what auditors and supervisory authorities ask for, and what satisfies them
Elsewhere
- LinkedIn — alexander-vik
If you would like to know what your Purview configuration actually looks like today — written down, in full, in one place — that is usually where we start.