A Copilot readiness check before switching Copilot on

Copilot can reach anything a user is allowed to open

The client wanted to roll out Microsoft 365 Copilot. Copilot can find and summarize anything a user is allowed to open, so loose sharing, identity or data protection settings matter far more once it is switched on. The client wanted to know where it stood first.

65 checks, ranked into a plan

1. 1

   Scope

   Confirmed tenant access, scope and the 6 Microsoft 365 services to cover.

2. 2

   Assessment

   Ran our Copilot Readiness Assessment across Entra ID, Exchange Online, Microsoft Purview, Teams, OneDrive and SharePoint, 65 settings in all, plus a license check.

3. 3

   Classification

   Sorted every result by severity, from critical to informational, and by area: security, governance and best practice.

4. 4

   Priorities

   Separated the critical and high items that had to be fixed before Copilot from the medium and low ones.

5. 5

   Roadmap

   Set out a 4-step plan: fix critical items, then high, then medium and low, then check again and pilot Copilot with the 33 eligible users.

A clear order of work before Copilot goes live

The client did not switch Copilot on blind. It has a ranked list of what to fix first, starting with MFA coverage, Conditional Access, data loss prevention and sensitivity labels, and a plan to pilot Copilot with its 33 eligible users once those are in place.

• Copilot held back until critical and high items are fixed
• MFA, Conditional Access, data loss prevention and labels first
• 33 eligible users identified for the pilot
• A second check built into the plan before rollout

• Copilot Readiness Assessment
• Microsoft 365 Copilot
• Entra ID
• Microsoft Purview
• SharePoint