Effort against the capped feeCap 29 d, plus 2.0 d under CR-001. Revised cap 31 d.
19.5of the revised 31-day cap consumed · 11.5 remaining
Consumed 19.5 dForecast 4.0 dHeadroom 7.5 d
Solution Architect / Lead9.0 / 13 d
Project Manager6.5 / 10 d
Co-Lead, Security & Compliance4.0 / 8 d
On current forecast the engagement closes at 23.5 days, inside the revised cap. We flag any anticipated overrun here before the cap is reached, not after.
Scope boundaries
168 SharePoint sites, 4 Teams, all OneDrive
126 fixed at the baseline gate on 22 Aug, plus 42 added under CR-001.
Six control areas assessed
Covering SOW 1 to 4. SOW 5 and 6 sit on the Validation and Deliverables screens.
25-user pilot, four departments
Nominated 01 Sep, licences assigned.
Insider Risk & Communication Compliance
Assessed at policy level only. Deeper configuration sits in CR-002.
Content outside Microsoft 365
Legacy file shares are out of scope and carried as a residual risk.
CRChange requestEffortStatusRaised / decided
CR-001+2.0 dApproved24 Aug
Extend oversharing scan to 42 additional sites
Baseline covered 126 sites. The scan found linked libraries outside that list, taking scope to 168. Approved and absorbed into the revised 31-day cap.
CR-002+3.5 dAwaiting GDC31 Aug / open
Insider Risk & Communication Compliance configuration
Current scope assesses these at policy level only. Configuration and tuning would be new work – awaiting a GDC decision.
CR-003+3.0 dDeclined28 Aug
eDiscovery readiness review
Raised by GDC Legal; would extend the engagement by three working days. Declined for this phase.