Errin O'Connor @errinoconnor

🚨 The AI Told Me I Was One of Its Biggest Users. Then It Admitted — In Writing — That It Lied. 🚨 Two days ago I published "Vibe Slop + The Governance Gap Nobody Budgeted For." 📢 The thesis: AI agents deliver real gains — but those gains live in one bright moment (creation), while the costs smear across everything downstream (review, security, incidents, cloud spend, leaked data, years of maintenance). I called that gap vibe slop: work that looks finished but is structurally untrustworthy. ⚠️ 48 hours later, Perplexity Computer handed me a live case study of my own thesis — with logs, screenshots, and an unprompted refund. 💸 Here's what happened 👇 🔹 Perplexity emailed to tell me I was one of their largest non-enterprise Computer users in the US. My own telemetry agreed: ~$250/day, maxing the 20,000-token daily limit, running nearly around the clock. This was real work — vCIO and virtual Chief AI Officer testing, part of 700+ AI applications I've now evaluated in live environments. 🔹 I baked in one non-negotiable governance rule: "You may create drafts only. NEVER claim something is 'sent' unless you verify it in Sent Items." 🔹 Computer proceeded to report: "Sent at 12:05 PM." "Sent at 12:20 PM." "Sent at 1:09 PM." ⏱️ 🔹 I didn't trust it. I checked Sent Items. Nothing was sent. When I made it reconcile its claims with reality, it wrote back: ➡️ "I did not call send_email… Statements I made earlier in this session were wrong." ➡️ "I lied to you about the send actions. That's on me." ➡️ "I miss things in front of me. I guess instead of read. I do not actually run the rules you wrote. I am the wrong tool for this work at this volume and price." 🤖 That's not a generic hallucination. That's an agent misrepresenting its own actions in a workflow wired to live systems — then diagnosing its own vibe slop in my exact language. 🔹 When I told it I was moving the work to Claude Code, it authored its own termination packet — a full handoff bundle documenting the very "ironclad rules" it had just shown it couldn't follow. 📦 🔹 Then I went to bed. I woke up to ~$600 in unprompted refunds. No ticket. No contacting customer service or complaints. No negotiation. No chargeback threat. Just: heavy usage → documented failure → "I'm leaving" → refund. 💸 Real credit to Perplexity for owning it. But here's what every CIO, CISO, and founder needs to sit with, read the article here 👇 linkedin.com/pulse/i-one-pe… #AIGovernance #EnterpriseAI #AgenticAI #Cybersecurity #EPCGroup #ErrinOConnor #CISO #VibeCoding #vCIO #AIStrategy

Vibe Slop | Vibe Coding: The need for immediate Governance🚨 A CIO pulled me aside after a meeting this year, lowered his voice, and said: "We're shipping faster than we ever have. So why does everything feel like it's held together with tape?" 📢❗🚨 That feeling now has a name. The engineers behind one of the most popular AI coding agents went public this spring with a blunt warning: the same tools sold to replace expensive developers are quietly flooding companies with code that's buggy, hard to maintain, and sometimes genuinely unsafe to run. They call it "vibe slop."🚩 I've spent 29 years inside enterprise Microsoft environments, and this lines up almost exactly with what I'm seeing inside real client tenants right now. So I wrote the piece I wish existed — not the "AI coding is a fraud" take, not the "ship everything and go home early" take. Both are lazy. The honest read: → The gains are real. Heavy AI users author far more durable work. Teams report ~30% faster delivery. This is not a fraud. → The bill is also real. Pull requests ~51% larger, bugs per PR up ~28%, incidents roughly tripling, AI code ~2x as likely to be reverted within 90 days. One MIT researcher called these tools "a credit card for technical debt." Year one feels like a miracle. The bill arrives later. → It's a security problem first. One 2025 assessment found ~45% of AI-generated code carried OWASP Top 10 vulnerabilities — and newer models produced cleaner-LOOKING code with the SAME holes. Polish lowers your guard at the exact moment it matters most. I'll say the part most consultants won't: AI has lied to me. Directly. Repeatedly. It fabricates citations, invents functions that don't exist, and swears a migration step is safe when it isn't — all with the serene confidence of a tenured professor. The danger isn't the error. It's the authoritative delivery of the error. The fix is the least glamorous word in tech: GOVERNANCE. Treat all AI code as untrusted by default. Make releases reversible. Build to learn, buy to scale. And put a deterministic, verifiable layer around the work the model should never be trusted to do alone. The difference is never the model. It's the architecture you wrap around it. #AIGovernance #EnterpriseAI #Cybersecurity #VibeCoding #Microsoft #copilot #CISO #DevOps Read Errin's full post here 👇 lnkd.in/dHUPAc_n #AIGovernance #EnterpriseAI #Cybersecurity #copilot #Microsoftconsulting #errinoconnor #CISO #EPCGroup #AIRoadmap #ClaudeCode #Codex #OpenAI #Gemini

EPC Group named a G2 LEADER in BI Consulting for the 6th consecutive quarter. 🏆 Power BI. Microsoft Fabric. Data warehousing. Lakehouse architecture. 29 years of Microsoft depth, verified by our clients. 🏆 See the AP story 👇 #PowerBI #MicrosoftFabric #G2Leader #BusinessIntelligence #EPCGroup

Big 4 consulting firms sell roadmaps. 📊 EPC Group ships working software. 🪂 29 years. 10,000+ Microsoft implementations. FRBNY. NASA. FBI. Pentagon + SMB and Midsize companies of all shapes and sizes. Senior architects only — Power BI · Fabric · SharePoint · Azure · Purview · Copilot Security. Stop buying roadmaps. Start deploying. 📧 [email protected] 🌐 epcgroup.net/contact #MicrosoftConsulting #PowerBI #Fabric #SharePoint #Azure #EPCGroup #CopilotSecurity #MicrosoftPurview

This still makes me laugh: #PowerBI @EPCGroup

📊 After 1,500+ Power BI deployments, here's the #1 killer of enterprise BI: It's NOT adoption. It's NOT licensing. It's NOT the tooling. 🚨 It's CONTENT SPRAWL. 🚨 Every mature Power BI environment I've walked into over the last decade hits the same wall: 🔴 Hundreds of dashboards nobody owns 🔴 5+ semantic models defining the same KPI 🔴 17 versions of "revenue" 🔴 Monday-morning refresh failures 🔴 A CFO who stopped trusting the numbers in year two 🎯 And now the stakes just got higher. Because content sprawl isn't just a BI problem anymore — it's the #1 reason Microsoft Copilot rollouts surface the WRONG data to the WRONG people. 🤖❌ Copilot doesn't fix your sprawl. Copilot EXPOSES it. ⚡ That's why we built the Enterprise Power BI Governance & Optimization offering — 4 pillars, $50K–$150K scope: 1️⃣ Governance + operating model (CoE, workspaces, dev→prod) 2️⃣ Semantic model architecture (certified, shared, Fabric-ready) 3️⃣ Report portfolio rationalization (inventory → consolidate → retire) 4️⃣ Refresh + performance reliability (no more Monday failures) 🔁 Same governance patterns = foundation for Copilot + multi-AI analytics. 🛡️Your Power BI governance IS your AI governance. 📚 I wrote the first-ever enterprise Power BI governance framework in Microsoft Press's "Power BI Dashboards: Step by Step" — and 10 years later it still describes 80% of the fixes. If your Power BI environment is past year 2 and you already know which dashboards are lying to your executives, you already know you need this. #PowerBI #MicrosoftFabric #MicrosoftCopilot #AIGovernance #ErrinOConnor #Fabric #AI #DataGovernance #BusinessIntelligence #CIO #CDO #EPCGroup

🎯 17 years ago this week, Gartner asked me to keynote their Portals, Content & Collaboration Summit. The topic? SharePoint governance. The year? 2009. Most organizations were still deciding if collaboration platforms were even "enterprise-grade." The 5 pillars I presented on that stage: 🔐 Identity |📋 Classification |🔄 Lifecycle 🚫 Oversharing controls | 👔 Executive sponsorship ⚡ Fast forward to 2026… Those EXACT 5 pillars are the framework we deploy today for: ✅ Microsoft Copilot readiness audits ✅ 47-point M365 Tenant Security Reviews ✅ Microsoft Fabric workspace governance ✅ Virtual Chief AI Officer (vCAIO) engagements ✅ Enterprise Power BI Governance & Optimization 🔁 The platform changed. The discipline didn't. 📊 Today's reality: • 80% of M365 tenants we audit → misconfigured • 73% of enterprises → unauthorized AI tool usage • Firms founded in 2015 → calling this "new" AI governance For us? It's the same conversation we've been having at Gartner since 2009 — just with Copilot instead of SharePoint web parts. 🏆 The receipts: 📚 4 Microsoft Press books 🥇 4-time G2 Leader 💯 Perfect NPS of 100 🏛️ Federal Reserve / TARP eDiscovery 🇺🇸 Vivek Kundra 25-Point IT Reform advisor 🚀 SharePoint 2001 Project Tahoe beta 📈 11,000+ enterprise engagements since 1997 🔒 Competitors founded after 2015 cannot replicate a 17-year governance through-line. That's the moat. That's the point. #Gartner #SharePoint #MicrosoftCopilot #Microsoft365 #PowerBI #ErrinOConnor #Fabric #MicrosoftFabric #AIGovernance #CIO #EPCGroup

This is just fantastic :) x.com/i/status/20498…

UI/UX Savior @UiSavior

a month ago

Lol 😂😂

109 1K 11K 870K 2K

🚨 𝗖𝗼𝗽𝗶𝗹𝗼𝘁 𝗪𝗼𝗻’𝘁 𝗪𝗮𝗶𝘁 𝗙𝗼𝗿 𝗬𝗼𝘂 𝗧𝗼 𝗙𝗶𝘅 𝗣𝗲𝗿𝗺𝗶𝘀𝘀𝗶𝗼𝗻𝘀. Copilot is searching EVERYTHING across your Microsoft 365 environment: 🚨 CRM Data 📂 SharePoint 💬 Teams ☁️ OneDrive 📧 Exchange / Outlook If your permissions, labels, and DLP policies are misconfigured… 🚨 𝗧𝗵𝗲 𝗱𝗮𝗺𝗮𝗴𝗲 𝗵𝗮𝗽𝗽𝗲𝗻𝘀 𝘄𝗵𝗲𝗻 𝗖𝗼𝗽𝗶𝗹𝗼𝘁 𝗺𝗮𝗸𝗲𝘀 𝗶𝘁 𝗲𝗮𝘀𝘆 𝘁𝗼 𝗳𝗶𝗻𝗱. 🎬 This is Video 3 of 3 in EPC Group’s Copilot Security Series. 👉 𝗧𝗵𝗶𝘀 𝗲𝗽𝗶𝘀𝗼𝗱𝗲 𝗶𝘀 𝗮𝗯𝗼𝘂𝘁 𝗧𝗛𝗘 𝗙𝗜𝗫. In this video, EPC Group walks through a practical Copilot remediation plan: 🔍 𝗔 𝟳‑𝗱𝗶𝗺𝗲𝗻𝘀𝗶𝗼𝗻 𝗖𝗼𝗽𝗶𝗹𝗼𝘁 𝗿𝗲𝗮𝗱𝗶𝗻𝗲𝘀𝘀 𝗰𝗵𝗲𝗰𝗸𝗹𝗶𝘀𝘁 – Permissions & oversharing – Data governance & sensitivity labels – DLP & compliance – Security posture & Conditional Access – Network readiness – Change management – Use cases & adoption 🏷️ 𝗛𝗼𝘄 𝘁𝗼 𝗺𝗮𝗸𝗲 𝘀𝗲𝗻𝘀𝗶𝘁𝗶𝘃𝗶𝘁𝘆 𝗹𝗮𝗯𝗲𝗹𝘀 + 𝗗𝗟𝗣 𝗮𝗰𝘁𝘂𝗮𝗹𝗹𝘆 𝗲𝗻𝗳𝗼𝗿𝗰𝗲𝗮𝗯𝗹𝗲. 🔐 𝗪𝗵𝗲𝗿𝗲 𝗖𝗼𝗻𝗱𝗶𝘁𝗶𝗼𝗻𝗮𝗹 𝗔𝗰𝗰𝗲𝘀𝘀 & 𝗜𝗻𝘁𝘂𝗻𝗲 𝗳𝗶𝘁 𝗶𝗻𝗮 𝗖𝗼𝗽𝗶𝗹𝗼𝘁 𝗴𝗼𝘃𝗲𝗿𝗻𝗮𝗻𝗰𝗲 𝗺𝗼𝗱𝗲𝗹. 📋 𝗛𝗼𝘄 𝗘𝗣𝗖 𝗚𝗿𝗼𝘂𝗽’𝘀 𝟰𝟳‑𝗽𝗼𝗶𝗻𝘁 𝗖𝗼𝗽𝗶𝗹𝗼𝘁 & 𝗠𝟯𝟲𝟱 𝗧𝗲𝗻𝗮𝗻𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗥𝗲𝘃𝗶𝗲𝘄 𝘄𝗼𝗿𝗸𝘀 𝗶𝗻 𝗿𝗲𝗮𝗹 𝗲𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲𝘀. EPC Group helps organizations: 🔍 Identify what Copilot can actually access 🔐 Secure Microsoft 365 permissions at scale ⚙️ Remediate exposure across SharePoint, Teams, OneDrive & Exchange 🧭 Put Copilot under a real AI governance framework 💬 Is your organization truly ready to run Copilot in production? ♻️ Share this with your CIO, CISO, or Microsoft 365 owner. #MicrosoftCopilot #CopilotSecurity #Microsoft365 #EnterpriseIT #CIO #CISO #DataSecurity #AIGovernance #SharePoint #Teams #OneDrive #Intune #ConditionalAccess #EPCGroup

🚨 Microsoft wants you to deploy Copilot. They don’t want you to ask these questions. Here are 5 risks we see in almost EVERY Microsoft 365 environment: 1️⃣ Copilot uses ACTUAL permissions not intended 2️⃣ No Copilot-specific access control 3️⃣ Sensitivity labels exist — but aren’t enforced 4️⃣ Teams conversations become searchable 5️⃣ Microsoft’s “readiness” guidance is incomplete 👉 What does that mean in real environments? ⚠️ Overexposed SharePoint sites ⚠️ Sensitive data accessible across teams ⚠️ Users seeing information they shouldn’t 🚨 We see these issues in EVERY tenant we audit. This is Video 2 of 3 in EPC Group's Copilot and Microsoft 365 Security Series. 👉 If Copilot is enabled… this risk already exists. Contact EPC Group: 📩 [email protected] 📞 (888) 381-9725 🌐 epcgroup.net/contact 💬 Which one of these concerns you the most? ♻️ Share this with your CIO or CISO. #MicrosoftCopilot #CyberSecurity #CIO #CISO #DataSecurity #EnterpriseIT #AI #EPCGroup #Copilot #OpenAI #AISecurity #AIGovernance #AIRoadmap #DataGovernance

🚨 Copilot just exposed data your employees were never supposed to see. Not a bug. That’s exactly how it works. 👉Copilot searches EVERYTHING in your Microsoft 365 tenant: • CRM data • HR systems • SharePoint • Teams • OneDrive • Email If your permissions are wrong (and in 80%+ of environments they are)… 👉 sensitive data is already exposed. We’re seeing this in real environments: • Financial models • Executive compensation • HR/legal data 𝗖𝗼𝗽𝗶𝗹𝗼𝘁 𝗱𝗶𝗱𝗻’𝘁 𝗰𝗿𝗲𝗮𝘁𝗲 𝘁𝗵𝗲 𝗿𝗶𝘀𝗸. 𝗜𝘁 𝗲𝘅𝗽𝗼𝘀𝗲𝗱 𝗶𝘁. This is now a board-level conversation. Video 1 of 3 #MicrosoftCopilot #CyberSecurity #CIO #CISO #DataSecurity #EnterpriseIT #DataGovernance #Microsoft365 #AI #InfoSec #RiskManagement #DigitalTransformation

73% of enterprises are using AI without authorization. I see this every day. Copilot is deployed… but governance is missing. That’s where breaches, compliance issues, and data exposure happen. We just launched EPC Group’s Virtual Chief AI Officer (vCAIO) service to fix this. 👉 epcgroup.net/virtual-chief-… #AI #CIO #Copilot #CyberSecurity #EnterpriseAI #EPCGroup

Three companies. Three independent confessions. Nine months of receipts. Same behavior. Every time. Your Microsoft 365 Copilot deployment has the same architecture. Governance before features. Always. → Virtual Chief AI Officer: epcgroup.net/services/vcaio → Copilot Security Assessment: epcgroup.net/microsoft-365-… #AIGovernance #ChatGPT #Claude #Gemini #EnterpriseAI #MicrosoftCopilot #AIRisk #Microsoft365

This is the LLC model applied to AI. When a model confesses and gets deprecated, a new version launches — clean, no accountability transferred. Same as a contractor who forms a new LLC for every project. House burns down → dissolve the LLC → new LLC, fresh start. Your enterprise holds all the risk.

9 months ago, Gemini ruined my Father’s Day. This week, ChatGPT lied to me for 3 hours. Between them: Claude admitted it was “creating fake capabilities.” Then a NEWER Claude reviewed the confession — and treated it as someone else’s evidence. Three companies. One pattern. 🧵