What you walk away with
Tenant truth
A five-domain readiness scorecard across M365 tenant, Entra ID, Intune, Defender and Purview
A gap register with severity and a named owner on every line
An oversharing exposure map for the sites Copilot will index
Sensitivity label coverage against the content Copilot can reach
Controls to set
Access and content control recommendations, written as changes rather than principles
Retention and audit settings mapped to your own policies
A connector and integration governance baseline
Guardrails your security team can put their name to
A decision
Go, remediate first, or hold, with the reasoning written down
A remediation plan sized in effort if the answer is remediate
A clean handoff into AI Deployment
Fee credits in full into deployment
How the week runs
Days 2 and 3 - Assessment across the five domains
Day 4 - Findings triage with IT and security
Day 5 - Readout, scorecard and gap register
Built for
Organizations licensed for Microsoft 365 Copilot, or about to be
An established IT function with a managed identity provider
Anyone switching Copilot on beyond a pilot group
Regulated industries where oversharing is an audit finding rather than an inconvenience
At a glance
One week, fixed fee
Five domains: M365 tenant, Entra ID, Intune, Defender, Purview
Ends in a gap register your security team can act on
Fee credits in full into AI Deployment
Where it leads.
Hands off to AI Deployment with the gap register already written, so deployment starts from a known state rather than a hopeful one.
Check it before you switch it on.
One week. A gap register your security team can stand behind.