Workstream
Week 1 · 18 Sep
Week 2 · 25 Sep
Week 3 · 02 Oct
Week 4 · 09 Oct
Milestones
Kickoff
Baseline signed off
Remediation complete
Pilot validated
Go / No-Go
1. Discovery & Current-State
Kickoff and guided scoping discovery
Governance and acceptable-use policy review
Entra ID and Purview posture assessment
Baseline oversharing scan
Licensing and prerequisite validation
2. Configure & In-Scope Remediation
Conditional Access and PIM configuration
Privileged, service and guest account clean-up
Sensitivity labels, DLP and retention
Oversharing remediation (SharePoint, OneDrive, Teams, Groups)
Audit logging and compliance control checks
3. Readiness Validation & Pilot
Graph indexing and content-access validation
Representative user testing
Pilot group readiness and success criteria
4. Reporting & Go / No-Go
Documentation and handoff pack
Residual-risk register and severity ratings
Executive summary and recommendation
Phase detailIn progress · 43% of tests run
Phase 3 · Weeks 3 to 3.5
Readiness Validation & Pilot
Validates what Copilot can reach for representative user profiles and confirms that the configured controls behave as intended before the pilot begins.
Key activities• Microsoft Graph indexing and content-accessibility checks• Representative testing for standard, privileged and guest users• Content-access behaviour compared with intended permissions• Pilot group defined, with success criteria
DeliverablesGDC input needed• Test accounts across user profiles• Nominated pilot user group• Copilot licences assigned for testing
Copilot Readiness Validation
Readiness for pilot or production use, with validation-test results.
Exit gate
Access behaviour validated against expectations.