Retention labels that exist but never land on a file
A Malaysian finance team had published a full retention schedule in Microsoft Purview. Almost none of the working libraries applied a label. Here is how that gap shows up in an audit.
Journal
Notes from the live system
Short accounts of what we find when we open the application rather than the project pack. Names of clients are withheld; the failure modes are not.
Guest links that outlived the contractor
A construction client in Selangor kept contracts in a vault that allowed anyone-with-the-link sharing. We counted the links still open after the projects had closed.
PDPA access requests and the HR repository that could not search itself
A data access request under the PDPA is a records problem as much as a legal one. If the HR document application cannot find a person across folders, the clock still runs.
Count the objects before you book the migration window
A university wanted to move departmental file shares into a single campus document platform. The first number they were given was ‘about two terabytes’. The useful numbers were different.