Your Microsoft 365 tenant has been built layer upon layer for years: inherited permissions, forgotten sites, overly broad sharing. That is exactly what now blocks Copilot, NIS2 and DORA. I work remotely, on clearly scoped projects or as a fractional architect.
Before opening Copilot to your users, you need to know what it will be able to show them. I identify overexposed content, set up the prevention, detection and remediation chain (sharing links, SharePoint Advanced Management reports, Purview DLP, sensitivity labels) and deliver a prioritised plan your teams can follow.
Deliverables: quantified assessment, remediation plan, reusable control scripts, decision memo for management.
SharePoint 2007 to 2019, file shares, Classic sites, on-premises Exchange: I migrate to Microsoft 365 with a scripted, auditable and repeatable method. Pre-migration analysis (volume, duplicates, permissions), batch migration, source-to-target parity checks.
Deliverables: pre-migration analysis, versioned scripts, compliance reports, operations documentation.
Full mailboxes, misconfigured archiving, mass deletions, broken OneDrive sync: I find the real root cause, fix it, and automate monitoring so it does not come back.
Deliverables: diagnosis, fix, least-privilege automated reporting.
Scope, deliverables and timeline agreed before we start. You know what you get and when.
1 to 3 days a week, for organisations without this expertise in-house that want a long-term counterpart.
Working my afternoons and evenings, I cover your morning and early afternoon, and handle sensitive changes outside your office hours.
Recent engagements, anonymised.
In a federal administration, users saw empty folders and believed their data was gone. Real cause: a site far beyond the OneDrive sync threshold. New two-site architecture, tailored permission model, controlled sync.
A shared mailbox emptied within days by serial deletions. Audit log diagnosis, containment, full restore in one hour, then automatic archiving to remove the root cause.
A SharePoint migration under security review: versioned deliverables, compliance measured against a reference state, source-to-target parity probes, permission matrix applied and verified.
A 20-minute video call to see whether I can help. Describe your context in a few lines and I will get back to you within one business day.