AI · COPILOT READINESS
Microsoft 365 Copilot readiness assessment: see exactly what it would surface through your permissions, before you switch it on.
A fixed-fee assessment that maps what Microsoft 365 Copilot would expose through your existing SharePoint and OneDrive permissions, ranks the oversharing by sensitivity, and hands you a remediation plan so Copilot stays switched on safely.
The deliverable
Copilot Oversharing Trace + Exposure Heat Map, on your desk
A representative deliverable. Yours is built on your own environment, with names and figures redacted here.
This is for you if
Built for the Owner, IT Director, or CISO.
A Copilot rollout is on the table and nobody can say what it would expose. You cannot list who can open your HR and finance files today. You need written proof of what is exposed before you approve switching AI on.
What you receive
Copilot Oversharing Trace + Exposure Heat Map
Where sensitive data lives, who can reach it, and exactly what Copilot would surface today, risk-ranked by site.
Copilot-readiness verdict
A straight verdict you can act on: go ahead, go ahead with limits, or wait until the sharing is fixed.
90-day remediation plan
The oversharing to close first so Copilot can stay on, scoped to what each role should see.
Typical timeline
5 daysIncluded
- A scan of where sensitive files sit and who can open them today
- A check of what is shared company-wide or with outside guests
- Copilot-readiness verdict
- 90-day remediation plan
Assumptions
- Microsoft 365 files and sites only
- No review of the contents of the files, only of who can open them
Not included
- Hands-on remediation of the exposure (scoped separately)
- Copilot licensing or deployment
Scoped separately here: Fix & improve.
Required access
- Read-only access to SharePoint, OneDrive, and Teams sharing permissions
- A list of the sites and folders holding your most sensitive files
- A 30-minute kickoff with a data owner
Engagement complete when
The engagement is complete when the exposure heat map, readiness verdict, and remediation plan are delivered and walked through.
Get a verdict on Copilot and the list of fixes to close first.
One fixed fee, agreed in writing before any access is granted. The timeline above is the whole engagement, and what you keep is documentation your team can act on. One senior engineer scopes and delivers it.
The fee depends on what is actually in your environment rather than your headcount. The scope-fit check tells you where you land →