This guide explains the ten essential Microsoft 365 security controls we recommend for charities to reduce cyber risk, improve governance and strengthen long-term resilience.
Bunker Snapshot - SharePoint & Teams Governance at a glance
Estimated reading time 🕒 45 seconds
Everything you need to know about this security control in under 60 seconds.
Business impact
🔴 Security improvement
🔴 Risk reduction
🟢 Operational impact
High
High
Low
Related Controls
Next Steps
Review your Microsoft Teams and SharePoint environment, identify unnecessary sharing and permissions, and implement governance policies to control collaboration securely.
Charity Insight
Many charities create new Teams and SharePoint sites for every project or department, but over time this can lead to duplicated content, excessive permissions and sensitive information being shared more widely than intended. A clear governance strategy helps keep your digital workplace secure, organised and easy to manage.
What it does
Ensures Microsoft Teams and SharePoint are securely configured, organised and governed by controlling permissions, sharing, site creation and data lifecycle.
Why it matters
Without proper governance, sensitive information can be overshared, duplicated or left accessible to the wrong people. Good governance keeps collaboration secure while maintaining productivity.
Time to implement
⏱ 4–8 hours
(Depending on the number of Teams, SharePoint sites and governance policies.)
Who it affects
All Microsoft 365 users who create, share or collaborate using Microsoft Teams, SharePoint and OneDrive.
Implementation difficulty
Licensing
Core governance capabilities are included with Microsoft 365 Business Premium. Advanced lifecycle management, retention and compliance features may require Microsoft Purview or Microsoft 365 E5 licensing.
Business benefit
Improves control over organisational information, reduces the risk of accidental data exposure, supports compliance with UK GDPR and enables staff and volunteers to collaborate securely and confidently.