Highest-impact workstream for safe Copilot use168 sites scanned · target: 0 unintended broad access on sensitive sites; exceptions owner-approved
142 / 168sites clear of broad access · 26 still open
Copilot can surface any content a user is already able to open. Removing broad access from high-value content is the key step in preparing the tenant for Copilot. Advance each site through the queue; the dashboard and Copilot exposure measures update accordingly.
Source: SAM data access governance reportSiteCopilot exposureExternal sharing exposureItemsTop sensitivityOwnerStatusAction
Legal – MattersEveryone except external users–512Highly ConfidentialLegalOwner sign-off
HR – PersonnelEveryone except external users–388Confidential (PII)HROwner sign-off
Finance – ReportsEveryone except external usersAnonymous link512ConfidentialFinanceIn remediation
Projects – Hudson TunnelBroad group · All Staff–1204InternalPMOIn remediation
Exec – Board packBroad group–96Highly ConfidentialExecIdentified
Procurement – Vendors–Anonymous link240ConfidentialProcurementIdentified
Comms – MediaEveryone except external users–610InternalCommsRemediatedDone
IT – RunbooksBroad group–355ConfidentialITRemediatedDone
18 additional lower-risk sitesBroad group memberships–InternalVariousBatch remediation
Copilot exposure is internal broad access – Everyone, Everyone except external users, broadly assigned groups. Copilot can surface any content a signed-in user can open. External sharing exposure is anonymous links, a data leakage risk outside Copilot that is tracked here as part of the oversharing assessment. Finding F-001 (Legal, HR and Finance) and the Copilot exposure measures are driven by this queue; sensitivity is taken from the Purview labels.