The challenge

An organisation wanted to switch on Microsoft 365 Copilot but had years of open SharePoint sites, “Everyone” sharing links and unlabelled content — meaning Copilot could surface data to people who should never see it.

What I delivered

• Ran a current-state assessment of SharePoint and OneDrive permissions, sharing links and site ownership
• Used Microsoft Purview DSPM for AI to identify sensitive data exposure and risky AI interactions
• Applied sensitivity labels and restricted access to high-risk sites before licensing users
• Designed a phased Copilot rollout with pilot groups, licensing plan and user enablement
• Defined a secure AI usage policy and governance model for ongoing oversight

Outcome

Copilot was rolled out with confidence: users only reach data they are entitled to, and leadership has a clear governance model for AI.

Technologies

Microsoft 365 Copilot · Purview DSPM for AI · SharePoint Advanced Management · Sensitivity Labels · Entra ID

Planning something similar? Book a discovery call →