BDO has been named Microsoft’s 2026 Data Security and Governance Partner of the Year, recognizing its work helping organizations strengthen data protection and governance as they adopt and scale artificial intelligence. The award, selected from more than 4,500 nominations across Microsoft’s global partner ecosystem, puts a spotlight on the growing role of cybersecurity, data management and responsible AI controls in enterprise transformation. BDO says its work with Microsoft spans data governance, AI-ready foundations built with Microsoft Fabric and emerging approaches to governing AI agents.
Microsoft’s official awards directory lists BDO USA as the winner in the Data Security & Governance category, while BDO’s announcement presents the recognition under the wider BDO network. That distinction matters because BDO operates as a network of legally separate member firms.
A timely development adds context: Microsoft has also announced a shift in its data-governance strategy, placing Fabric’s OneLake catalog at the center of data governance while retaining Purview for data security and compliance. This makes the award’s focus on AI-ready data foundations especially relevant.
BDO has been named Microsoft’s 2026 Data Security and Governance Partner of the Year, recognizing its work helping organizations strengthen data protection and governance as they adopt and scale artificial intelligence. The award, selected from more than 4,500 nominations across Microsoft’s global partner ecosystem, highlights the growing role of cybersecurity, data management and responsible AI controls in enterprise transformation.
The recognition comes as businesses move beyond generative AI experimentation toward deploying AI agents and embedding automated decision-making into operational workflows. That shift is increasing demand for reliable data foundations, consistent access controls and governance frameworks that can account for both human users and AI systems.
BDO’s Microsoft Partnership Focuses on AI Governance
According to BDO, the award recognizes customer engagements across industries and global regions, combining Microsoft technologies with the firm’s cybersecurity, data governance and advisory capabilities.
Eskander Yavar, BDO’s Global Head of Advisory, said AI transformation requires organizations to rethink how they govern data, manage risk and empower employees to innovate. The recognition, he said, reflects BDO teams’ work helping clients establish governance foundations for broader AI adoption.
Rocco Galletto, BDO’s Global Cybersecurity Leader, described the collaboration as extending beyond technology implementation. The firm’s work includes helping organizations protect sensitive information, strengthen controls and establish accountability as AI becomes more deeply integrated into business operations.
Microsoft also highlighted BDO’s approach to what it calls frontier transformation. Deb Cupp, Microsoft’s Executive Vice President and Chief Revenue Officer for Global Enterprise, said BDO is applying lessons from its own internal AI transformation to develop approaches that can be repeated across client organizations.
The award is part of Microsoft’s 2026 Partner of the Year program, which recognizes partners delivering customer solutions across Microsoft Cloud, AI, services and devices. Microsoft reported receiving more than 4,500 nominations worldwide.
Data Security Becomes a Prerequisite for Enterprise AI
AI systems depend on access to organizational information, including customer records, financial data, employee information, internal documents and operational databases. If that information is poorly classified, inconsistently permissioned or exposed through uncontrolled integrations, introducing AI can create additional security and compliance risks.
This challenge becomes more complex with agentic AI. Unlike systems that only generate responses, AI agents can potentially retrieve information, invoke tools, modify records and execute multi-step tasks. Organizations therefore need to understand what data an agent can access, which actions it can perform and how those actions are monitored.
For companies adopting Microsoft technologies, this can involve several connected capabilities:
- Data classification and protection: Identifying sensitive information and applying appropriate labels, access restrictions and data-loss prevention policies.
- Identity and access management: Ensuring users and AI agents receive only the permissions required for their tasks.
- Activity monitoring: Maintaining records of data access, AI interactions and administrative changes.
- Compliance management: Aligning information-handling practices with applicable regulatory and contractual requirements.
- AI governance: Establishing oversight for AI models, agents, prompts, outputs and automated actions.
These controls are not interchangeable. Data protection, information governance, identity security and AI risk management address different parts of the enterprise risk landscape.
Microsoft Fabric and the AI-Ready Data Foundation
BDO identified Microsoft Fabric as a central part of its work helping clients prepare data environments for AI.
Microsoft Fabric brings together data engineering, data integration, analytics and business intelligence capabilities in a unified platform. Its OneLake architecture provides a shared data foundation, while governance capabilities help organizations discover and manage information across supported workloads.
This is relevant to AI adoption because agents and analytical applications need access to data that is understandable, appropriately governed and reliable. An AI-ready data foundation requires more than moving information into a cloud platform. Organizations must also address data quality, lineage, ownership, access policies and the context needed to interpret information correctly.
Microsoft’s November 2026 data-governance strategy update adds further context. The company said the OneLake catalog in Fabric would become the central experience for governing data across the enterprise. Microsoft Purview will continue to focus on data security and compliance, including classification, protection, data-loss prevention and audit-related capabilities.
Microsoft also announced that Purview Data Governance will be retired on November 12, 2027, with customers being supported through a transition to Fabric’s governance capabilities. This is a significant platform change for organizations planning long-term Microsoft data architectures.
For BDO and other Microsoft consulting partners, such changes create demand for architecture reviews, governance strategy, migration planning and implementation services. However, the announcement does not disclose specific BDO customer deployments or quantify the business outcomes achieved through its Fabric engagements.
Governing AI Agents Adds a New Security Challenge
BDO also identified AI-agent governance as a growing area of client work.
Enterprise agents may interact with business applications, databases, collaboration platforms and internal knowledge repositories. Their usefulness depends partly on the permissions and tools they receive, but those same capabilities can create risks if they are not properly controlled.
Organizations need policies covering agent identity, authorization, data access, human approval, monitoring and accountability. They also need to determine how agents behave when instructions conflict, when information is incomplete or when an action could have significant business consequences.
Traditional cybersecurity controls remain important, but organizations may need to extend existing frameworks to account for non-human identities and autonomous workflows. An agent that can access a document repository or update a business system should be governed according to the sensitivity of the information and the potential impact of its actions.
Microsoft’s Fabric and Purview capabilities provide elements of this governance architecture, including data discovery, protection and audit functions across supported workloads. The effectiveness of a complete AI governance program, however, also depends on organizational policies, implementation choices, application-level controls and ongoing oversight.
What the Award Signals for Enterprise AI Services
The recognition reflects a broader shift in the professional services market. As companies expand AI deployments, demand is growing for consulting services that connect technology implementation with cybersecurity, compliance, data architecture and organizational change.
Firms including Accenture, Deloitte, EY, PwC and KPMG compete across overlapping areas of enterprise AI transformation, cloud modernization and risk advisory. Microsoft partners also operate within a wider ecosystem of specialist cybersecurity and data-management providers.
BDO’s award gives the firm recognition in a specific Microsoft partner category. It does not establish that BDO is the exclusive provider of Microsoft data security and governance services, nor does it independently demonstrate superior customer outcomes across the market.
The practical issue for enterprises is how to move from AI pilots to operational systems without losing control of sensitive information or creating unclear accountability. That requires coordination between IT, cybersecurity, data teams, legal departments and business leaders.
BDO’s recognition highlights the importance of that work as Microsoft customers prepare for more extensive use of AI agents and unified data platforms. With Microsoft Ignite scheduled for November 17–20, 2026, the award also arrives as Microsoft and its partner ecosystem prepare to showcase the next stage of enterprise AI adoption.
For organizations evaluating AI deployment, the message is straightforward: scaling AI requires more than access to models and cloud infrastructure. It also requires trusted data, enforceable permissions, monitoring and governance processes that evolve alongside the technology.
Market Landscape
The award arrives at a point when enterprise AI governance is becoming a major consulting and technology market.
Top Insights
- BDO USA is listed as Microsoft’s 2026 Data Security and Governance Partner of the Year, recognizing work supporting secure enterprise AI adoption.
- The award reflects demand for data protection, governance and cybersecurity as organizations expand AI deployments.
- BDO identifies Microsoft Fabric and AI-agent governance as important areas of its future client work.
- Microsoft’s November 2026 strategy update places OneLake at the center of Fabric data governance while retaining Purview for security and compliance.
- The award recognizes partner achievement but does not independently establish measurable customer ROI or technical superiority.
Power Tomorrow’s Intelligence — Build It with TechEdgeAI
