Highest-impact workstream for Copilot safety168 sites scanned · target: 0 broadly-shared before pilot
142 / 168sites clear of broad access · 26 still open
Copilot surfaces whatever a user can already reach – instantly, at scale. Removing broad access on high-value content is what makes the tenant safe to enable. Advance each site through the queue; the dashboard and Copilot-exposure funnel update as you go.
SiteExposureItemsTop sensitivityOwnerStatusAction
Legal – MattersEveryone except external512Highly ConfidentialLegalOwner sign-off
HR – PersonnelEveryone except external388Confidential (PII)HROwner sign-off
Finance – ReportsAnonymous link512ConfidentialFinanceIn remediation
Projects – Hudson TunnelBroad group · All Staff1204InternalPMOIn remediation
Exec – Board packBroad group96Highly ConfidentialExecIdentified
Procurement – VendorsAnonymous link240ConfidentialProcurementIdentified
Comms – MediaEveryone except external610InternalCommsRemediatedDone
IT – RunbooksBroad group355ConfidentialITRemediatedDone
18 additional lower-risk sitesBroad group membershipsInternalVariousBatch remediation
Findings F-001 (Legal / HR / Finance) and the Copilot-exposure funnel are driven by this queue. Sensitivity is read from the Purview labels in the previous screen.