If Microsoft is a core part of your estate, there is a good chance the platform is changing faster than anyone can comfortably keep up with.
That was my main takeaway from a useful Microsoft security session with Softwerx at Babraham Research Campus.
The session did not convince me to buy anything. It did something more useful: it showed me parts of the Microsoft ecosystem I either had not seen before or had not been using properly.
For admins, these are practical resources. For security and technology leaders, they are a reminder that owning Microsoft does not mean you automatically understand everything now sitting inside it.
Here are the five things I came away wanting to keep close.
1. Microsoft Adoption resources
The Microsoft Adoption site is much more useful than I had realised.
It brings together implementation guidance, role-based learning, adoption material and practical resources for Copilot and agents.
The Copilot Studio resources are particularly useful because they split guidance by role, including leadership, makers, IT admins and adoption teams, with downloadable packs for each.
This is the kind of material that is easy to miss if you go straight from licence purchase to deployment.
2. Security Dashboard for AI
The Microsoft Security Dashboard for AI was one of the more useful discoveries for me.
It gives a consolidated view of AI assets, posture, risks and recommended actions across Microsoft security services, including signals from Entra, Defender and Purview.
The portal is available at ai.security.microsoft.com.
For leaders, that gives a much cleaner way to ask basic questions such as: what AI is actually in the environment, where is the risk, and where do we need to act?
For admins, it gives a practical place to work from rather than trying to assemble the picture manually.
3. Frontier
Frontier is Microsoft’s early-access area for emerging Copilot capabilities.
Eligible users can try experimental agents and preview features before they become generally available, subject to licensing, availability and admin settings.
I like this less as a shiny-feature playground and more as a way to see what is coming.
If the business is going to ask for new Copilot and agent capability in a few months, it is useful for security and IT teams to understand it before the demand arrives.
4. Zero Trust Assessment
Microsoft’s Zero Trust Assessment is another capability worth knowing about.
It checks tenant configuration and produces recommendations across areas including identity, devices, network and data.
It is not a substitute for independent assurance or engineering judgement. But as a structured way to challenge configuration and surface areas worth reviewing, it is useful.
It also contains sensitive tenant information, so the output needs to be treated accordingly.
5. Purview deserves proper attention
Then there is Microsoft Purview.
Purview is a beast in its own right. It now spans data security posture, information protection, DLP, audit, insider risk, compliance and controls around AI use.
The important point for me is that it should not be treated as a single product checkbox.
There can be a large gap between having Purview entitlements and genuinely understanding which parts are configured, useful and producing evidence you trust.
How I would keep on top of it
The harder problem is not finding one useful dashboard. It is keeping up as Microsoft keeps moving the furniture.
A few things are worth making routine:
- check the Microsoft 365 Copilot release notes rather than relying only on announcements;
- keep the Adoption and Learn resources bookmarked by the people who actually administer the platform;
- periodically compare what your licences include with what is genuinely enabled and used;
- make somebody accountable for understanding material platform changes, not just administering yesterday’s configuration.
Exact capability will always depend on licence, geography, configuration and rollout status. That is part of the challenge.
Closing perspective
The useful lesson from the session was not that Microsoft has another five things to switch on.
It was how easy it is to miss useful capability inside a platform you already use every day.
For admins, that means knowing where to look.
For leaders, it means asking a better question than “Do we have Microsoft?”
What can the platform actually do for us today, and who knows?