Office 365 Technical Governance Thoughts

Hierarchy of Governance of IT

• Business Governance
• IT Governance
• SharePoint Governance

The items to look at for a security breach apply at all 3 governance levels and planing to deal with a Security Breach must cover:

• Legal Compliance
• Litigation & Insurance
• Security
• Business continuity and Disaster recovery
• PR

There are a lot of technical pieces involved in Governance of SharePoint such as authentication, security, O365 labels, Microsoft Information Protection (O365 labels) and Azure Information Protection (AIP/AIP Labels), CAS, IRM, .....  there are third party products like skysync, Semantec,.... and a lot of SharePoint Governance is part of other products that also cover SharePoint.