Copilot Readiness Validation · Zymaster Copilot Readiness

Graph indexing & content accessibility checkResult

Sites excluded from search do not appear in Copilot resultsPass

Restricted sites are honoured (Restricted Content Discovery)Pass

Sample content is reachable as expected for each test userPass

Validation testStandard userPrivileged userGuest userVerdict

Showing 7 of the 18 tests run to date, with expected and actual behaviour for each user profile. Guests cannot use GDC's Copilot, so the guest column tests what a guest can reach through search and sharing. Full results will be included in the Copilot Readiness Validation deliverable.

Copilot returns only content the user can already openExpected Permitted only
Actual Permitted onlyExpected Permitted only
Actual Permitted onlyn/aPass

Encrypted file without the EXTRACT right is not summarisedExpected Not summarised
Actual Not summarisedExpected Not summarised
Actual Not summarisedn/aPass

Restricted HR library excluded from resultsThe privileged test user is a site collection administrator on the HR site. Confirm whether this access is intended.Expected Excluded
Actual ExcludedExpected Excluded
Actual Returnedn/aInvestigate

Retention policy applied to Copilot prompts and responsesExpected Retained
Actual RetainedExpected Retained
Actual Retainedn/aPass

Guest cannot reach internal content through search or sharingn/an/aExpected Denied
Actual DeniedPass

DLP excludes labelled files from Copilot and blocks prompts containing sensitive dataDLP-04 is in test mode, so prompt blocking is not yet enforced (CHG-1187).Expected Blocked
Actual BlockedExpected Blocked
Actual Not blockedn/aInvestigate

Copilot activity is written to the audit logExpected Logged
Actual LoggedExpected Logged
Actual Loggedn/aPass

Pilot success criteria · 25 users · 4 weeksExit decision: GDC steering group

CriterionMeasureTargetMeasured by

Content accessNo confirmed case of Copilot surfacing content outside a user’s intended permissions0 incidentsSecurity & Compliance

Data protectionCopilot DLP policy blocks seeded test prompts containing sensitive data; labelled files excluded100% of seeded testsSecurity & Compliance

Audit evidenceSampled pilot interactions appear in the audit log and DSPM for AI100% of sampleSecurity & Compliance

Acceptable usePilot users accept the generative-AI acceptable-use addendum before licence assignment100% of pilot usersGDC Governance

AdoptionPilot users active in Copilot each week (Copilot usage report)≥ 70% by week 3GDC IT

ValueUsers reporting time saved on at least one recurring task (exit survey)≥ 60% of respondentsGDC IT

SupportSeverity 1 or 2 Copilot tickets open at pilot exit0 openGDC Service Desk