Risks
3
tracked & owned
Assumptions
3
tracked & owned
Issues
2
tracked & owned
Dependencies
3
tracked & owned
Risks
R-01
Auto-labelling approval delay pushes the wider-rollout gate
Owner · GDC · M. Ortiz – Escalated at the weekly steering meeting. Testing continues on test accounts; wider rollout is held until key-repository coverage reaches the 90% Zertain threshold.
HighOpen
R-02
Owner of the legacy-authentication application not identified; MFA bypass remains
Owner · GDC IT – GDC IT is identifying the application owner. Legacy authentication will be blocked once the owner is confirmed.
MediumOpen
R-03
Broad access on Legal and HR content would be discoverable through Copilot
Owner · Joint – Prioritised in the remediation queue. Site-owner sign-off has been requested before access is removed.
MediumMitigating
Issues
Auto-labelling policy AL-04 approval is 3 working days overdue
I-01 · GDC · M. Ortiz
HighOpen
Copilot DLP policy DLP-04 not yet enforced (CHG-1187)
I-02 · Security & Compliance
MediumIn progress
DependenciesMetPendingPending Go
Delegated administrative access
D-01 · on GDC
Site-owner sign-off – Legal and HR
D-02 · on GDC
Copilot pilot licences
D-03 · on GDC
Assumptions
A-01GDC holds Microsoft 365 E5, so advanced Purview and Entra ID P2 are available
ConfirmedA-02Single tenant of moderate complexity; site count fixed at scoping (168)
ConfirmedA-03GDC procures Copilot and prerequisite licences
HoldsThe RAID log is reviewed at the weekly steering meeting. Open risks and issues drive the sidebar badge; change requests are managed on the Effort & Change screen.