{"id":38887,"date":"2025-09-10T02:57:41","date_gmt":"2025-09-10T02:57:41","guid":{"rendered":"https:\/\/www.insentragroup.com\/nz\/insights\/uncategorized\/get-your-ia-right-before-you-go-too-far-in-ai\/"},"modified":"2025-09-10T04:36:03","modified_gmt":"2025-09-10T04:36:03","slug":"get-your-ia-right-before-you-go-too-far-in-ai","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/nz\/insights\/geek-speak\/modern-workplace\/get-your-ia-right-before-you-go-too-far-in-ai\/","title":{"rendered":"Get Your IA Right Before You Go Too Far in AI"},"content":{"rendered":"\n<p>Artificial Intelligence (AI) is the hottest topic in the workplace right now. From Microsoft Copilot to intelligent agents and custom AI-driven applications, organisations everywhere are rushing to enable AI, enticed by the promise of productivity, efficiency, and innovation. But amid this enthusiasm, one critical factor often gets overlooked \u2013 Information Architecture (IA).&nbsp;<\/p>\n\n\n\n<p>Before going too far down the AI journey, organisations need to take a step back and get their information architecture in Microsoft 365 (M365) \u2013 particularly in SharePoint Online (SPO) and Teams \u2013 in order. Without the right foundations, AI could inadvertently expose sensitive information, leading to compliance breaches, reputational risks, or worse.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is Information Architecture (IA)?<\/h2>\n\n\n\n<p>At its core, Information Architecture is about structuring, organising, and managing your data so that it is accessible, usable, and secure. In the context of M365, this means:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Defining how documents and data are stored and categorised in SharePoint and Teams.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Designing a logical SPO site structure that mirrors organisational needs, avoids sprawling, ad hoc sites, and helps users intuitively find what they need.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Establishing the right permissions model, ensuring access is granted on a least-privilege basis and consistently applied across sites and Teams.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Making sure metadata, labels, and content types are in place to drive better navigation and search experiences, helping users avoid the all-too-familiar \u201cneedle in a haystack\u201d hunt.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>Think of IA as the blueprint for your digital workplace \u2013 without it, AI will be working in a cluttered warehouse rather than a well-organised library.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why is IA so important before AI?<\/h2>\n\n\n\n<p>AI thrives on data. When you prompt AI tools like Copilot to build a business case presentation or summarise a report, it doesn\u2019t just look at your immediate files. It can surface data from across the organisation \u2013 even information users didn\u2019t realise was accessible.&nbsp;<\/p>\n\n\n\n<p>Consider this scenario: A business analyst asks AI to create slides for a new business case. Instead of pulling from recent project documents, Copilot surfaces a snippet from a confidential client proposal tucked away in a poorly secured SharePoint site. Suddenly, sensitive client information finds its way into an internal draft presentation \u2013 an unintended but very real risk.&nbsp;<\/p>\n\n\n\n<p>This isn\u2019t about employees being careless. It\u2019s about AI removing the barriers of discoverability \u2013 if sensitive data exists and permissions allow access, AI can use it. That\u2019s why IA must come first.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Common Pitfalls Without IA&nbsp;<\/h2>\n\n\n\n<p>Without a well-designed IA, organisations often stumble into the same traps:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Site sprawl:<\/strong> Hundreds of SharePoint sites and Teams created without a strategy, leaving users confused about where to store or find documents. For AI, this means it may surface irrelevant or outdated content because the system cannot distinguish which site holds the current truth.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Broken permissions<\/strong>: Over-reliance on sharing links or inherited permissions, giving more people access than intended. AI doesn\u2019t second-guess permissions \u2013 if someone has access, it will happily serve up sensitive content, whether or not they should realistically be using it.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Poor navigation and search:<\/strong> Documents buried in poorly labelled folders, leaving employees to waste time searching or recreating work. AI amplifies this problem by drawing on whatever it can find \u2013 including misfiled or draft versions \u2013 and presenting them as authoritative.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Shadow IT:<\/strong> Teams bypassing official sites and processes, leading to data silos and duplicated information. AI can\u2019t tell the difference between the \u201cofficial\u201d source and the copy in a rogue location, which risks surfacing the wrong information.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>In short, these pitfalls don\u2019t just slow people down \u2013 they directly undermine AI adoption. What was once \u201chard to find\u201d suddenly becomes \u201cimpossible to miss,\u201d and without the right IA, the wrong content could be what gets exposed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Protecting Sensitive Data<\/h2>\n\n\n\n<p>A robust IA strategy ensures that sensitive data is identified, labelled, and protected. Key elements include:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Data Loss Prevention (DLP): Preventing accidental sharing of sensitive data.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Information Protection Labels: Classifying and controlling access to confidential documents.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Governance Policies: Establishing rules for lifecycle management, retention, and access.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>These guardrails ensure that when AI interacts with organisational data, it doesn\u2019t inadvertently compromise compliance or security.&nbsp;<\/p>\n\n\n\n<p>These guardrails ensure that when AI interacts with organisational data, it doesn\u2019t inadvertently compromise compliance or security. For a deeper dive into how Microsoft Purview and a DSPM (Data Security Posture Management) framework secure your AI journey, check out Hambik\u2019s blog on <a href=\"https:\/\/www.insentragroup.com\/nz\/insights\/geek-speak\/modern-workplace\/dspm-for-ai-with-microsoft-purview-securing-your-ai-journey\/\" target=\"_blank\" rel=\"noreferrer noopener\">DSPM for AI<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Real-World Example<\/h2>\n\n\n\n<p>Imagine a marketing team working on a new campaign. They ask Copilot to \u201ccreate a pitch deck based on past proposals.\u201d Copilot obliges \u2013 but in doing so, it pulls confidential pricing details from a restricted finance folder that happened to be mislabelled. The marketing team, unaware of the source, shares the deck widely. What started as a small oversight in IA snowballs into a compliance issue.&nbsp;<\/p>\n\n\n\n<p>This is why information protection can\u2019t be an afterthought. The strength of AI lies in its ability to connect dots \u2013 but without strong IA, it may connect the wrong ones.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The Role of Governance<\/h2>\n\n\n\n<p>Governance goes hand-in-hand with IA. Without proper governance, even the best architecture will deteriorate over time. Establishing governance frameworks means:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Clear ownership of data and sites.<\/li>\n\n\n\n<li>Defined processes for access requests and permissions.<\/li>\n\n\n\n<li>Ongoing audits to maintain compliance.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>Governance ensures IA remains a living system, evolving with the business and its data needs.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Start with Discovery: Know Your Data<\/h2>\n\n\n\n<p>At Insentra, we often say: \u201cKnow your data before you know your AI.\u201d That starts with a discovery exercise:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Identify where your sensitive data lives.<\/li>\n\n\n\n<li>Map data flows across SPO and Teams.<\/li>\n\n\n\n<li>Highlight gaps where governance, site structure, or labelling is missing.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>This process forms the foundation for protecting data and preparing for safe AI adoption.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"523\" height=\"593\" src=\"https:\/\/www.insentragroup.com\/nz\/wp-content\/uploads\/sites\/18\/2025\/09\/image-1.png\" alt=\"\" class=\"wp-image-38888\" srcset=\"https:\/\/www.insentragroup.com\/nz\/wp-content\/uploads\/sites\/18\/2025\/09\/image-1.png 523w, https:\/\/www.insentragroup.com\/nz\/wp-content\/uploads\/sites\/18\/2025\/09\/image-1-265x300.png 265w\" sizes=\"(max-width: 523px) 100vw, 523px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Governance and Continuous Improvement<\/h2>\n\n\n\n<p>Governance goes hand-in-hand with IA. Without proper governance, even the best architecture will deteriorate over time. Establishing governance frameworks means:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Clear ownership of data and sites.<\/li>\n\n\n\n<li>Defined processes for access requests and permissions.<\/li>\n\n\n\n<li>Ongoing audits to maintain compliance.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>Governance ensures IA remains a living system, evolving with the business and its data needs. It also ties directly into continuous improvement. A practical starting point is an <strong>Information Architecture Implementation or Advisory Engagement<\/strong>, where experts help design a scalable structure, apply governance, and set up protection policies. From there, organisations can iterate, building maturity in data management while enabling AI safely and effectively.&nbsp;<\/p>\n\n\n\n<p>Learn more about our <a href=\"https:\/\/www.insentragroup.com\/nz\/services\/advisory-services\" target=\"_blank\" rel=\"noreferrer noopener\">Advisory Services<\/a> \u2013 designed to help organisations discover, classify, and govern their data before embarking on their AI journey.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Strong IA, Smarter AI<\/h2>\n\n\n\n<p>AI represents a transformative opportunity, but only if organisations put the right foundations in place first. Information Architecture in M365 \u2013 especially SPO and Teams \u2013 is that foundation. By designing clear site structures, strengthening permissions, improving navigation and search, knowing your data, protecting sensitive information, and establishing governance, you safeguard your organisation from unintentional data exposure and position yourself for long-term AI success.&nbsp;<\/p>\n\n\n\n<p>So before you sprint into AI, make sure your IA is ready to run alongside it.\u00a0<br>\u00a0<br>Join our <strong><a href=\"https:\/\/www.insentragroup.com\/nz\/services\/generative-ai-series\/sprint-1\/\" target=\"_blank\" rel=\"noreferrer noopener\">Generative AI Sprint 1<\/a><\/strong> and learn how to build the right foundations in Microsoft 365 for safe, effective AI adoption.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Strong Information Architecture in Microsoft 365 ensures AI is secure, compliant and effective before you scale adoption.<\/p>\n","protected":false},"author":136,"featured_media":38890,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[19],"tags":[],"class_list":["post-38887","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-modern-workplace","entry"],"_links":{"self":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts\/38887","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/users\/136"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/comments?post=38887"}],"version-history":[{"count":2,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts\/38887\/revisions"}],"predecessor-version":[{"id":38892,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts\/38887\/revisions\/38892"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/media\/38890"}],"wp:attachment":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/media?parent=38887"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/categories?post=38887"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/tags?post=38887"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}