Workstream
Week 1 · 18 Aug
Week 2 · 25 Aug
Week 3 · 01 Sep
Week 4 · 08 Sep
Milestones
Kickoff
Baseline signed off
Remediation complete
Pilot validated
Go / No-Go
1. Discovery & Current-State
Kickoff & guided scoping discovery
Governance & acceptable-use policy review
Entra ID & Purview posture assessment
Baseline oversharing scan
Licensing & prerequisite validation
2. Configure & In-Scope Remediation
Conditional Access & PIM configuration
Privileged, service & guest account cleanup
Sensitivity labels, DLP & retention
Oversharing remediation (SharePoint, OneDrive, Teams)
Audit logging & compliance control checks
3. Readiness Validation & Pilot
Graph indexing & content-access validation
Representative user testing
Pilot group readiness & success criteria
4. Reporting & Go / No-Go
Documentation & handoff pack
Residual-risk register & severity ratings
Executive summary & recommendation
Phase detailIn progress · 43% of tests run
Phase 3 · Weeks 3 to 3.5
Readiness Validation & Pilot
Rather than take the configuration on trust, we test what Copilot can actually reach for real user profiles and confirm the controls behave the way they should before anyone pilots it.
Key activities• Microsoft Graph indexing & content-accessibility checks• Representative testing for standard, privileged & guest users• Content-access behaviour vs. intended permissions• Pilot readiness group defined with success criteria
DeliverablesGDC input needed• Test accounts across user profiles• Nominated pilot user group• Copilot licences assigned for testing
Copilot Readiness Validation
Readiness for pilot or production use, with validation-test results.
Exit gate
Access behaviour validated against expectations.