Risks
3
tracked & owned
Assumptions
3
tracked & owned
Issues
2
tracked & owned
Dependencies
3
tracked & owned
Risks
R-01
Auto-labelling approval delay pushes the wider-rollout gate
Owner · GDC · M. Ortiz – Escalated at weekly steering. Pilot proceeds on test accounts; rollout held until 90% coverage.
HighOpen
R-02
Legacy-auth app owner unidentified – Conditional Access bypass persists
Owner · GDC IT – Owner hunt in progress; legacy auth blocked once the owning application is confirmed.
MediumOpen
R-03
Broad access on Legal / HR reachable by Copilot at scale
Owner · Joint – Prioritised in the remediation queue; owner sign-off requested before links are removed.
MediumMitigating
Issues
Auto-labelling policy AL-04 approval 3 days overdue
I-01 · GDC · M. Ortiz
HighOpen
DLP not yet extended to Copilot interactions (CHG-1187)
I-02 · Security & Compliance
MediumIn progress
DependenciesMetPendingPending Go
Delegated administrative access
D-01 · on GDC
Site-owner sign-off – Legal, HR
D-02 · on GDC
Copilot pilot licences
D-03 · on GDC
Assumptions
A-01GDC holds Microsoft 365 E5 – advanced Purview and Entra ID P2 available
ConfirmedA-02Single tenant, moderate complexity; site count fixed at scoping (168)
ConfirmedA-03GDC procures Copilot and prerequisite licences
HoldsRAID is reviewed at the weekly steering checkpoint. Open risks and issues drive the badge in the sidebar; change requests are on the Effort & Change screen.