This session is the compliance anchor of the SharePoint day. It turns the broad idea that "SharePoint should be secure" into a concrete set of controls you can point to and defend. Security in Microsoft 365 is not one setting - it is a stack of overlapping layers (identity, permissions, labels, DLP, retention, auditing) that only works when the layers are configured together and mapped to a real legal obligation.
The through-line is the link between security and law. Every control in Microsoft Purview and Microsoft Entra ID exists to help meet a duty - most importantly, for South African organ
