Practical AI governance and M365 security from inside a law firm, where it isn't optional.