Effort against the capped feeCap 29 d, plus 2.0 d under CR-001. Revised cap 31 d.
19.5of the revised 31-day cap consumed · 11.5 remaining
Consumed 19.5 dForecast 4.0 dHeadroom 7.5 d
Solution Architect / Lead9.0 / 13 d
Project Manager6.5 / 10 d
Co-Lead, Security & Compliance4.0 / 8 d
On the current forecast, the engagement will close at 23.5 days, within the revised cap. Any anticipated overrun will be raised here before the cap is reached.
Scope boundaries
168 SharePoint sites (including Teams- and Group-connected sites), all OneDrive accounts and Microsoft 365 Groups
126 sites fixed at the baseline gate on 25 Sep, plus 42 added under CR-001. Group membership is reviewed alongside each connected site.
Six control areas assessed
Readiness validation and the Go / No-Go are covered on the Validation and Deliverables screens.
25-user pilot across four departments
Nominated on 02 Oct. Five test licences are assigned; pilot licences are held pending the Go decision.
Insider Risk, Communication Compliance and eDiscovery
Readiness is reviewed within scope. Configuration and tuning are covered by CR-002; case and hold setup by CR-003.
Content outside Microsoft 365
Legacy file shares are out of scope and are recorded as a residual risk.
CRChange requestEffortStatusRaised / decided
CR-001+2.0 dApproved28 Sep
Extend the oversharing scan to 42 additional sites
The baseline covered 126 sites. The scan identified linked libraries outside that list, which increased scope to 168 sites. The change was approved and absorbed within the revised 31-day cap.
CR-002+3.5 dAwaiting GDC01 Oct / open
Insider Risk and Communication Compliance configuration
The current scope covers a readiness review of these capabilities. Configuration and tuning would be additional work and are awaiting a GDC decision.
CR-003+3.0 dDeclined29 Sep
eDiscovery case and legal-hold setup
eDiscovery readiness for Copilot content (prompts and responses are searchable and can be placed on hold) is reviewed within the current scope. GDC Legal requested the setup of cases and holds for live matters, which would add three working days. GDC declined the request for this phase.