Framework and ISMS basics
Onboarding & access to the tenant — incl. a short introduction, where AI appears in the course (from ISMS design to agents on Friday).
NIS2 and ISO 27001 in practice — what NIS2 (264/2025 Coll.) and ISO 27001:2022 actually require from the organization; NÚKIB role, reporting deadlines, sanctions.
Mapping requirements to Microsoft 365 — mapping matrix requirements › M365 capabilities, licensing reality across pillars.
ISMS design in Microsoft 365 — target state, information architecture for controlled documentation, incl. brief mentions of AI as a design assistant
lab: establishing the ISMS workspace structure.
Managed ISMS documentation in SharePoint Online and Lists
Libraries as a repository of managed documentation — versioning, approval, access control
lab: managed documentation library with versioning and approval.
Content Type Hub and policy standardization — content types for policies and records, centralization across the tenant, incl. Autofill columns as practical AI tools for consistent metadata.
Lists as live evidence and workflow — Asset Register, Risk Register, SoA, incident log
lab: Asset Register and Risk Register with revision workflow, incl. Copilot Skills concept as a complement to workflow and registries.
Classification and Information Protection
Classification and sensitivity labels in Purview — label taxonomy, manual vs. auto-labeling
lab: design a label taxonomy and apply it to the ISMS library.
Data Loss Prevention across M365 — policies, simulation mode, incidents
lab: DLP policy in simulation mode.
Retention, lifecycle and advanced protection — retention policies and labels, records management, comparison with SharePoint Advanced Management
lab: retention policy for ISMS records.
Identity, detection and incidents
Conditional Access and access control — policy design, MFA, break-glass accounts
lab: set of CA policies incl. MFA pilot.
Privileged access and identity protection — PIM, Identity Protection
lab: PIM configuration for privileged roles.
Incident detection, audit and reporting — Unified Audit Log, 24-hour reporting process to NÚKIB
lab: event tracking and reporting documentation.
AI and compliance proofing
AI agents within the tenant — Copilot data boundary vs. Shadow AI, declarative agents
lab: simple compliance agent over ISMS library.
Ready-made agent from Microsoft Marketplace — installation and demo of Normiqa Navigator reference agent, comparison of "build your own" vs. "install ready-made".
Copilot governance and AI risk management — Purview DSPM for AI, labels and DLP for Copilot, admin consent for installed agents.
Compliance Manager and capstone — assessments, improvement actions, compliance score; capstone: linking course artifacts to compliance checks and reporting.
