The client
Robidus is a Dutch organisation specialising in social security and sustainable employability services. The organisation helps clients manage complex workforce, absence and social security challenges. This work involves large volumes of sensitive employee and regulatory data, so strong information protection, governance and compliance are part of everyday business.
The challenge
Robidus wanted to explore the opportunities offered by AI, including Microsoft Copilot, but needed to do so in a secure, responsible and well-governed way.
The organisation already had a mature approach to information security, but AI raised new questions around data visibility, access control and information governance. Before adopting AI more widely, Robidus needed greater confidence that sensitive data was properly classified, protected and managed across its Microsoft 365 environment.
Robidus wanted to build the right foundations, validate its approach with external expertise and create a clear roadmap for secure AI adoption.
Key challenges:
Strengthening governance before wider AI adoption.
Preparing for secure and responsible Microsoft Copilot adoption.
Improving visibility into data access and sharing practices.
Using Microsoft Purview to support classification, retention and Data Loss Prevention.
Applying data protection controls consistently across Microsoft 365
Strengthening identity and access management through Microsoft Entra.
The solution
CWSI worked alongside Robidus and Microsoft Netherlands to assess the organisation’s Microsoft environment and develop a clear security and compliance roadmap.
The partnership began with a Data Security Envisioning workshop, which identified practical opportunities to strengthen data security and governance across the organisation.
Following the workshop, Robidus upgraded 625 users to Microsoft 365 E5 to gain access to advanced security and compliance capabilities that better protect sensitive data. CWSI supported the deployment of Microsoft Purview and other Microsoft 365 E5 security workloads, enabling Robidus to implement a comprehensive set of data security and identity controls. This included sensitivity labels, retention policies, Data Loss Prevention and strengthened identity controls through Microsoft Entra.
Solution components:
Data Security Envisioning workshop.
Microsoft 365 E5 roadmap and rollout for 625 users.
Microsoft Purview deployment for data security and governance.
Microsoft Entra identity and access management.
AI readiness planning for Microsoft Copilot and future AI use cases.
The result
With Microsoft Purview in place, the organisation has better visibility of sensitive data and stronger controls for how that information is classified, retained and protected. This has created a more secure foundation for Microsoft Copilot, including early use cases such as knowledge management, where employees can access years of organisational expertise more quickly.
The partnership has also moved beyond initial AI readiness. Robidus and CWSI are now exploring the next phase of AI, including agentic AI and future Microsoft capabilities, with the same focus on security, governance and control.
Key outcomes:
1
Upgraded 625 users to Microsoft 365 E5.
2
Improved visibility and control over sensitive information.
3
Implemented consistent classification, retention and Data Loss Prevention policies.
4
Enhanced identity and access management controls.
5
Established a secure foundation for Microsoft Copilot adoption.
6
Built an ongoing roadmap for agentic AI and future AI use cases.
Why CWSI
CWSI helped Robidus turn AI ambition into a secure and well-governed AI strategy.
By combining Microsoft security expertise, data governance knowledge and a repeatable AI readiness approach, CWSI helped Robidusstrengthen the foundations needed for secure Copilot adoption and future AI initiatives.
The work was not just about deploying tools. It was about ensuring they were properly understood, effectively governed and embedded into everyday operations.
