Reducing Data Leaks and Enabling Compliance with Microsoft Purview

We helped the university reduce accidental exposure, meet FERPA and HIPAA requirements, and improve awareness.
Overview
One of the top private universities was aiming to upgrade how its community worked and learned together. With almost 500 staff, teachers, and researchers, they rolled out Microsoft 365, bringing in tools like SharePoint, OneDrive, Exchange Online, and Teams to make daily work smoother and more connected. We helped the university gain control over sensitive data without disturbing collaboration. Our team worked closely with IT leaders to reduce accidental data sharing and build a secure, compliant environment.

Challenges 

  • Growing pressure to protect student PII, health records, and sensitive research data without slowing down collaboration. 
  • The environment previously failed to fully meet the strict compliance requirements of FERPA and HIPAA.
  • Frequent accidental data sharing via email, Teams, and cloud storage posed a high risk of exposure. 
  • Faculty and staff lacked awareness of data sensitivity, leading to uncontrolled file sharing. 
  • Collaboration on research sites led to instances of confidential academic data exposure.
  • IT teams had little or no visibility into whether social security numbers, grades, or health details were leaving the system. 
  • The absence of centralized Data Loss Prevention (DLP) controls made it difficult to implement consistent policies across the Microsoft 365 environment.

Our Solutions

Designed a phased approach that balanced compliance, security, and user adoption. The roadmap ensured sensitive data was discovered, policies were aligned to regulations, and staff were guided through proper transition.
Phase 1: Assessment
Worked with IT, compliance, and academic leaders to understand risks and identify sensitive data types like SSNs and health records and used Microsoft Purview tools to map where this data lived.
Phase 2: Policy Design 
Created DLP policies for FERPA and HIPAA compliance, set up sensitivity labels, and built policy tips that educated users before enforcement to encourage awareness.
Phase 3: Pilot
Tested the policies in audit mode with a department, gathered feedback on false positives, and fine-tuned the thresholds and exceptions to ensure accuracy.
Phase 4: Rollout 
DLP policies were expanded across all 500+ users, with blocking for high-risk data, overrides for research collaboration, and training sessions for faculty and staff.
Phase 5: Monitoring & Optimization 
Set up continuous monitoring in the Purview Compliance Portal, quarterly reviews with IT and legal, and added new policies as research and compliance needs evolved.

Business Value Propositions 

  • Clear visibility into sensitive data transactions across Exchange, Teams, SharePoint, and OneDrive.  
  • Accidental data leaks reduced by nearly 80% within the first 3 months.  
  • Faculty and staff awareness strengthened through real-time policy tips. 
  • Compliance readiness achieved for upcoming FERPA and HIPAA audits. 
  • Detailed reporting simplified compliance reviews. 

Final Perspective  

We helped the university move to a safe & compliant environment and helped everyone adapt to audit-only mode and permitting overrides. This solid base allows the university to expand DLP for a safe and secure support system and prepare them for any future research and compliance difficulties. 

Building an Automated Prompt Intelligence System for Enterprise Banking

For a Singapore bank’s event, we built a Copilot Agent for automated testing of prompts.

 

Overview

A leading bank based in Singapore wanted to run an innovation event where people could try prompt writing and see how well their prompts performed in real time using a live Copilot setup. 

The bank needed a smooth, quick, and reliable implementation. Our team stepped in to design a complete Copilot implementation using Microsoft 365 tools and Copilot Agent Flow. They needed a simple implementation that combined automation, quick scoring, and centralized reporting to support their internal teams and event visitors. 

Client Background

The client was one of Asia’s leading financial institutions, known for its focus on digital and customer-first services. For its innovation event, the bank joined hands with us to show how prompt quality can impact real AI results. They wanted an experience that would guide attendees, give them real results instantly, and help the bank collect clean insights without any manual effort. 

Challenges 

  • Slow and manual scoring: Event teams struggled to review prompts quickly as each assessment took time and impacted the quality of engagement during live sessions. 
  • Scattered event data: Prompt submissions, user details, and accuracy results were stored across multiple locations. Hence, it was difficult for teams to analyze patterns, compare inputs, or create a complete view after the event. 
  • Uneven participant experience: Attendees wanted instant scoring, but manual processes could not support it. 
  • Limited visibility for event staff: Teams had no clear way to monitor submission volume or prompt quality. Without a live dashboard, they could not see trends or understand how users interacted with the activity. 

Solutions 

  • Automated Copilot Agent Flow: The entire scoring process was powered by a structured Copilot Agent Flow, hence, the manual scoring was removed and gave consistent results for every participant. 
  • QR-based submission process: Implemented a QR code that captured basic details and the user’s prompt, then stored everything in Excel automatically which reduced turn over time and provided event teams accurate data without any manual handling. 
  • Instant scoring and email delivery: New entry and triggers were automated after form submission through Power Automate. Each participant received a personalized score with improvement suggestions within moments. 
  • Centralized SharePoint and Excel logging: The data was stored in a connected Excel file and SharePoint list. It also created a clean audit trail for future use.

Tech Stack 

  • Microsoft 365 Copilot Agent Flow 
  • Power Automate 
  • SharePoint Online 
  • Excel Online 
  • Power BI 
  • Outlook Connector 

Business Values

  • Speed and efficiency: Processing time dropped from around 5 minutes to 10–15 seconds, and manual effort was reduced by over 90%.
  • Scalability: The system can manage more than 1000 submissions with around a 99% success rate, running each flow in seconds while supporting multiple users at the same time.
  • AI Analysis Quality: Prompts averaged a score of 82, with strong performance in intent and goal setting.
  • Reusable Setup: The same model can support future events or internal teams with minimal changes.

Future Scope 

This setup gives the bank a strong base to build richer AI-driven experiences. The project opened doors for broader AI services adoption across the bank. The next steps include adding real-time Power BI dashboards so teams can see live activity and trends during events. With these additions, the bank plans to support more events, internal programs, and customer interactions, making AI feedback a natural part of daily operations across the bank. 

 

Modern Intranet: How Cincinnati State’s Intranet was Transformed to Meet Evolving Needs

 

Cincinnati State Technical and Community College needed to modernize its outdated intranet platform. The institution faced collaboration challenges due to siloed departments and a gap between current technology and future needs. Krish Services Group developed a modern intranet solution to enhance efficiency, connectivity, and scalability.  

Client Background 

The decision to modernize the intranet was driven by the need for more connectivity and scalability for campus communication in their new environment. Their existing intranet no longer met the needs of the College; Cincinnati State was looking for more than just a technology upgrade – they needed a strategic solution that would enhance how information flowed across campus communities. Faced with an intranet platform that would soon be out of support, Cincinnati State Technical and Community College realized the need to evolve to a modern solution that could support seamless communication and collaboration across its diverse departments. Given their use of Microsoft 365 already, a platform they had familiarity with was the natural fit. Following a deep dive into what the Intranet could look like in M365, Cincinnati State elected to work with Krish to build their new virtual campus hub. 

Problems 

  • Outdated Intranet Technology: The current system lacked integration with new technologies. 
  • Siloed Systems: Departments operated independently without unified communication. 
  • Lack of Collaboration: The outdated system hindered collaboration among staff members. 
  • Limited Access: Employees faced difficulties in accessing important information remotely. 

Solutions 

  • Modern SharePoint Intranet: Krish Services Group implemented Microsoft SharePoint Online as their new platform. 
  • Unified Communication Platform: Integrated various departmental systems into one cohesive unit. 
  • Enhanced Collaboration Tools: Introduced tools like Microsoft Teams for better teamwork. 
  • Remote Access Capability: Enabled secure remote access so employees could work from anywhere. 

Business Value 

  • Increased Efficiency: Built on a platform that integrates seamlessly with other Microsoft products. 
  • Improved Collaboration: Unified communication tools foster better teamwork across departments. 
  • Scalability & Flexibility: Future-proof solution adaptable to evolving needs. 
  • Cost Savings: Reduced maintenance costs associated with outdated systems. 

“The vendor of our previous intranet announced it would reach end-of-life in twelve months. We selected Krish through an RFP process, and their team proved to be the experts we needed. They guided us through reviewing our existing intranet, educated our implementation team on the possibilities of SharePoint, and helped us build a solution that was delivered on time, within budget, and immediately embraced by the campus community.”, said a key stakeholder at Cincinnati State.

 

Cincinnati Case Study

Client: PNC

Challenge

PNC required to migrate their complete data, which consisted to thousands of sites and several terabytes onto a private cloud.

Solution

Krish migrated PNC’s SharePoint 2007 on-premise environment to SharePoint 2013 in a private cloud. We engaged in all phases of the migration, including: planning, analysis, architecture, governance, communications, and scripting. We also issued dashboards to monitor the migration progress and utilized third-party tools like Sharegate.

The Way Forward

  • Private Cloud Migration
  • Customization Migration
  • Fully Automated Scripted Processes
  • Architecture & Governance Guidance
  • Dashboard Implementation

Technology In Use

  • Sharegate
  • SharePoint Server
  • SQL Server
  • Visual Studio
  • Microsoft Project
  • Visio

 

Client: Cuyahoga Community College

Challenge

Ohio’s oldest and largest public community college – Cuyahoga Community College (Tri-C) had a requisite for management of Tri-C’s intranet and extranet.

Solution

Krish provided managed services for Tri-C’s intranet and extranet, both of which are hosted on on-premise SharePoint 2013 farms. In addition to reviewing and resolving event logs, optimizing system utilization, deploying security patches/updates, we also provided overall architecture and governance guidance.

The Way Forward

  • Review & Resolve Logs (event, ULS, IIS, server)
  • Monitor & Optimise System Growth
  • Architecture & Governance Guidance
  • Deploy Security Patches & Updates
  • Project Server Deployment

Technology In Use

  • SharePoint Server
  • SQL Server
  • Visual Studio
  • Microsoft Project
  • Visio

 

Client: Eaton

Challenge

Eaton required consultation for their on-premise and Office 365 SharePoint environment

Solution

Krish provided consulting services and a site provisioning framework for Eaton’s on-premise and Office 365 SharePoint environment. Tenants were evaluated based on business rules and regulatory requirements, such as ITAR. We also provided best practices consulting for designing and developing solutions that leverage on-premise and Office 365 SharePoint services.

The Way Forward

  • SharePoint Site Design
  • SharePoint Application Development
  • Governance Consulting

Technology In Use

  • Office 365
  • SharePoint Server
  • SharePoint Framework (SPFx)
  • Visual Studio
  • SQL Server

Client: The Chas E. Phipps

Challenge

The Chas E. Phipps had a requisite for a solution that allows their employees to effectively collaborate and make informed business decisions.

Solution

Krish designed and developed a new intranet and a custom product evaluation solution on Office 365 for Phipps, catering to their above requisite. We migrated Phipps’ legacy data from an existing SharePoint 2003 intranet to a new intranet on SharePoint Online, designed the information architecture and governance of the new intranet, and configured the hub site structure.

We then worked with Phipps’ sales leadership to design and develop an app for employees to introduce for consideration of new products to stock. The app enables salespeople to share information and their feedback about new products, assign tasks, and track a new product’s sales performance.

The Way Forward

  • Intranet design
  • Information architecture and governance
  • SharePoint Migration
  • Custom app development
  • Office 365 configuration

Technology In Use

  • SharePoint Online
  • PowerApps
  • Microsoft Flow
  • Sharegate