SecurityGovernance_Session_Post_Event_Resources.xlsx

	A	B	C
1	Data and AI Security and Governance in Microsoft Fabric — Post-Event Resources
2	Session 3 of the Microsoft Fabric Location Intelligence & Security User Group Data Days series
3
4	Session Overview
5	Host	Philippa Burgess, MA, MS, MSL
6	Speaker	Nandini Pajgade
7	Moderators	Lehlohonolo Mofula and Muhammad Usman Khan
8	Date	Tuesday, July 7, 2026
9	Time	7:30–9:00 AM PT \| 10:30 AM–12:00 PM ET \| 2:30–4:00 PM GMT \| 3:30–4:30 PM WAT \| 8:00–9:30 PM IST
10	Format	YouTube Livestream, full replay available
11	Event / Registration Page	https://luma.com/16aewof4
12	YouTube Replay	https://www.youtube.com/watch?v=hndF_CWVjzA
13	Fabric Portal (sign in)	https://app.fabric.microsoft.com
14
15	What This Session Covered
16	Microsoft Fabric gives organizations a powerful unified platform for data, analytics, and AI, but a platform is only as trustworthy as the security and governance built around it. This session explored what it actually takes to secure a Fabric environment, govern data and AI systems responsibly, and build the kind of trusted data foundation that regulators, executives, and AI agents can rely on. Security and governance are not separate concerns in Microsoft Fabric, they are the same conversation.
17
18
19
20
21	Topics Covered
22	• Security Architecture in Microsoft Fabric: how security is modeled through Entra ID, workspaces, and items; RBAC, row-level and object-level security; service principals and managed identities; Zero Trust principles; network security and private endpoints
23	• Identity as the Control Plane: why identity is the foundation of Fabric security; Conditional Access, MFA, and Privileged Identity Management; guest access and cross-tenant scenarios; service principal governance for pipelines and AI automation
24	• Data Governance with Microsoft Purview: how Purview connects to Fabric; data lineage from source to report to AI output; sensitivity labels and information protection; data catalog and business glossary; endorsement and certification as governance signals
25	• Responsible AI and AI Governance in Fabric: what responsible AI means in a Fabric context; governing AI inputs and outputs; Microsoft's responsible AI principles; prompt injection and model security; the emerging SC-500 framework; privacy law considerations
26	• Practical Patterns and Takeaways: a security and governance checklist for Fabric practitioners; common gaps organizations find when auditing their Fabric environments; certification paths combining governance and Fabric skills
27
28	Data Days Series Arc
29	• Jun 23 — Location Intelligence with Maps and GeoAnalytics in Microsoft Fabric
30	• Jun 30 — Get to Know Esri: From Living Atlas to Spatial Analysis for Fabric Users
31	• Jul 7 — Data and AI Security and Governance in Microsoft Fabric (Today)
32	• Jul 21 — Fabric IQ for Data Professionals
33	• Aug 4 — KQL for Data and Security Professionals (Closing Session)
34
35
36	Security Architecture in Microsoft Fabric
37	Resource	Notes	Link
38	Microsoft Fabric security overview	The layered security model, end to end	https://learn.microsoft.com/en-us/fabric/security/security-overview
39	Workspace roles in Fabric	Admin / Member / Contributor / Viewer capabilities	https://learn.microsoft.com/en-us/fabric/fundamentals/roles-workspaces
40	Fabric permission model (item permissions)	Read, ReadData, ReadAll, Build, Execute, Reshare	https://learn.microsoft.com/en-us/fabric/security/permission-model
41	Get started with OneLake security	Roles, supported items, ReadWrite, enabling on SQL endpoint	https://learn.microsoft.com/en-us/fabric/onelake/security/get-started-onelake-security
42	OneLake data security overview	Control plane vs. data plane; DefaultReader role behavior	https://learn.microsoft.com/en-us/fabric/onelake/security/get-started-security
43	OneLake security access control model	How roles, RLS/CLS, shortcuts, and workspace roles interact	https://learn.microsoft.com/en-us/fabric/onelake/security/data-access-control-model
44	Table and folder security (OLS)	Object-level security on tables, schemas, and folders	https://learn.microsoft.com/en-us/fabric/onelake/security/table-folder-security
45	OneLake security best practices	Hub-and-spoke reference pattern	https://learn.microsoft.com/en-us/fabric/onelake/security/best-practices-secure-data-in-onelake
46	SQL analytics endpoint: identity modes	User's identity vs. delegated identity mode	https://learn.microsoft.com/en-us/fabric/onelake/security/sql-analytics-endpoint-onelake-security
47	OneLake security for external engines	Authorized engine model, enforcement beyond Fabric	https://learn.microsoft.com/en-us/fabric/onelake/security/onelake-security-integrations-overview
48	Private links for Fabric	Tenant-level Azure Private Link, blocking public access	https://learn.microsoft.com/en-us/fabric/security/security-private-links-overview
49	Managed private endpoints	Outbound private connections from Spark/notebooks	https://learn.microsoft.com/en-us/fabric/security/security-managed-private-endpoints-overview
50	Trusted workspace access	Shortcuts/pipelines to firewall-enabled ADLS	https://learn.microsoft.com/en-us/fabric/security/security-trusted-workspace-access
51	Zero Trust guidance	Verify explicitly, least privilege, assume breach	https://learn.microsoft.com/en-us/security/zero-trust/zero-trust-overview
52
53	Identity as the Control Plane
54	Resource	Notes	Link
55	What is Microsoft Entra ID	The identity perimeter for the whole Microsoft estate	https://learn.microsoft.com/en-us/entra/fundamentals/whatis
56	Conditional Access overview	MFA, device/location/risk conditions, policy scoping	https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview
57	Continuous Access Evaluation (CAE)	Near-real-time token revocation on risk signals	https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-continuous-access-evaluation
58	Privileged Identity Management (PIM)	Just-in-time, time-boxed, logged elevation	https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure
59	Entra B2B collaboration	Guest access model and cross-tenant settings	https://learn.microsoft.com/en-us/entra/external-id/what-is-b2b
60	Fabric workspace identity	Secret-less managed service principal per workspace	https://learn.microsoft.com/en-us/fabric/security/workspace-identity
61	App objects & service principals	External SPs for automation and REST API access	https://learn.microsoft.com/en-us/entra/identity-platform/app-objects-and-service-principals
62
63	Data Governance with Microsoft Purview
64	Resource	Notes	Link
65	Use Purview to govern Fabric	The master map of every Purview capability that touches Fabric	https://learn.microsoft.com/en-us/fabric/governance/microsoft-purview-fabric
66	Governance & compliance in Fabric (overview)	Built-in Fabric governance features + Purview integration	https://learn.microsoft.com/en-us/fabric/governance/governance-compliance-overview
67	Sensitivity labels (Purview)	Label taxonomy, scopes, publishing policies	https://learn.microsoft.com/en-us/purview/sensitivity-labels
68	Information protection in Fabric	Labels on Fabric items; protection through export paths	https://learn.microsoft.com/en-us/fabric/governance/information-protection
69	Protection policies in Fabric	Access control on labeled items via Purview policies	https://learn.microsoft.com/en-us/fabric/governance/protection-policies-overview
70	DLP for Fabric and Power BI	Policy tips, detection, and restrict-access actions	https://learn.microsoft.com/en-us/purview/dlp-powerbi-get-started
71	Lineage in Fabric	Impact analysis from source to report	https://learn.microsoft.com/en-us/fabric/governance/lineage
72	Endorsement (Promoted / Certified)	Certified content as sanctioned AI grounding sources	https://learn.microsoft.com/en-us/fabric/governance/endorsement-overview
73	Insider Risk Management	Fabric/Power BI exfiltration indicators and sequence detection	https://learn.microsoft.com/en-us/purview/insider-risk-management
74	DSPM overview	Posture view across M365, Azure, and Fabric	https://learn.microsoft.com/en-us/purview/data-security-posture-management-learn-about
75	DSPM deployment considerations (Fabric setup)	The one-time Fabric scanning configuration	https://learn.microsoft.com/en-us/purview/data-security-posture-management-considerations
76	Track user activities in Fabric (Purview Audit)	Audit log coverage of Fabric operations	https://learn.microsoft.com/en-us/fabric/admin/track-user-activities
77	Compliance Manager	Framework assessments and improvement actions	https://learn.microsoft.com/en-us/purview/compliance-manager
78
79	Responsible AI and AI Governance
80	Resource	Notes	Link
81	Microsoft Responsible AI	The six RAI principles and the Responsible AI Standard	https://www.microsoft.com/ai/responsible-ai
82	Purview protections for generative AI apps	How labels, DLP, audit, and retention extend to AI	https://learn.microsoft.com/en-us/purview/ai-microsoft-purview
83	DSPM for AI	Discovering sensitive data in prompts/responses; one-click policies	https://learn.microsoft.com/en-us/purview/dspm-for-ai
84	DSPM for AI deployment considerations	Collection policies for Copilot in Fabric	https://learn.microsoft.com/en-us/purview/dspm-for-ai-considerations
85	Securing AI agents end-to-end (MS Security blog)	Purview DSPM + agent identity + AI security dashboard	https://techcommunity.microsoft.com/blog/microsoft-security-blog/securing-ai-agents-end-to-end-connecting-purview-dspm-agent-365-and-the-ai-secur/4521155
86	OWASP Top 10 for LLM Applications	Prompt injection, poisoning, disclosure, the threat taxonomy	https://owasp.org/www-project-top-10-for-large-language-model-applications/
87	NIST AI Risk Management Framework	Common AI risk vocabulary	https://www.nist.gov/itl/ai-risk-management-framework
88	EU AI Act (European Commission)	Risk-tiered obligations for AI systems	https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai
89
90	Certifications & Vouchers
91	Exam	Focus	Link
92	SC-300	Identity & Access Administrator, Entra ID, Conditional Access, PIM	https://learn.microsoft.com/en-us/credentials/certifications/identity-and-access-administrator/
93	SC-401	Information Security Administrator, Purview information protection, DLP, insider risk	https://learn.microsoft.com/en-us/credentials/certifications/information-security-administrator/
94	SC-500	Cloud and AI Security Engineer Associate, new exam, AZ-500 successor path	https://learn.microsoft.com/en-us/credentials/certifications/cloud-and-ai-security-engineer-associate/
95	SC-100	Cybersecurity Architect (Expert), Zero Trust architecture capstone	https://learn.microsoft.com/en-us/credentials/certifications/cybersecurity-architect-expert/
96	DP-600	Fabric Analytics Engineer Associate, Fabric platform depth	https://learn.microsoft.com/en-us/credentials/certifications/fabric-analytics-engineer-associate/
97	DP-700	Fabric Data Engineer Associate, pipelines, lakehouses, Real-Time Intelligence	https://learn.microsoft.com/en-us/credentials/certifications/fabric-data-engineer-associate/
98	All Microsoft credentials	Full searchable catalog of Microsoft certifications	https://learn.microsoft.com/en-us/credentials/browse/
99
100	Note: free DP-600/700/800 exam voucher program ran through Fabric Data Days, requested through the Microsoft Fabric Community after attending 2 sessions and completing 3 Learn modules. Summer 2026 vouchers have already been distributed, but it's a great time to start preparing for the next round.