
Copilot readiness
Microsoft Copilot readiness assessment
A Copilot readiness assessment for organisations on Microsoft 365: find what Copilot would surface, contain the risks and design a measurable pilot.
The risks before rollout
Oversharing
Sites shared with everyone, and links nobody remembers.
Sensitive files exposed
HR, payroll and board papers easier to find.
Licences before readiness
Rollout dates set before permissions are reviewed.
No baseline
No way to prove Copilot was worth it.
What the assessment delivers
Oversharing risk register
SharePoint, OneDrive and Teams content ranked by risk.
Containment plan
Fixes for the highest-risk sites first.
Sharing defaults
Recommended settings for your Microsoft 365 environment.
Labels and data loss rules
A Purview sensitivity label approach.
Pilot design
Cohort, measures and baseline before rollout.
How we deliver it
Discover
Admin reports on sharing and permissions.
Prioritise
Exposure ranked by sensitivity.
Contain
Riskiest sites fixed with their owners.
Pilot
A measured rollout to a first group.
Systems we work with
We connect to the platforms you already run. You keep your licences and your data.
- Microsoft 365
- SharePoint
- OneDrive
- Microsoft Teams
- Microsoft Purview
- Microsoft Entra ID
- Microsoft Copilot

Privacy Act due diligence, documented
APP 11 requires reasonable steps to protect personal information, including from staff opening records they have no reason to see. A documented permissions audit and containment plan is direct evidence of that care.
- Written record of due diligence
- Ready for your auditors
- An owner named for every site
Questions
What is a Copilot readiness assessment?
A Copilot readiness assessment checks what Microsoft 365 Copilot would surface for each user before you switch it on, then ranks and contains the risks. Solve8's assessment ends with a risk register, a containment plan and a measured pilot design.
What does a Copilot data readiness assessment check?
Sharing links, site and team permissions, sensitivity labels, data loss rules and retention across SharePoint, OneDrive and Teams, ranked by how sensitive the exposed content is.
Does Copilot let staff open files they could not open before?
No. Microsoft states that Copilot only surfaces data a user already has permission to view. The risk is access people hold without realising it, which Copilot makes far easier to find.
How long does a Copilot readiness assessment take?
It depends mostly on how many SharePoint sites and Teams you run and how quickly site owners complete access reviews. The discovery reports come first, and Solve8 confirms a timeline once they show how much oversharing needs to be contained.
Do you provide Microsoft Copilot readiness services beyond the report?
Yes. Solve8 can fix permissions with your administrators and run the pilot, or hand your team a ranked plan to work through.
Related
AI strategyWhat to fix first, and the business case.
Private AI infrastructureAI that runs inside your own environment.
Team augmentationOur engineers working inside your team.
Professional servicesMatter, document and billing work.
CanberraSolve8's AI consulting and AI services help Canberra agencies meet the Commonwealth AI policy and help suppliers answer agency AI questions in writing.
SecurityYour data stays in your environment.

Check before the licences arrive
We will scope a readiness assessment around your Microsoft 365 environment.
Fixed-fee phases, agreed before we start. Stop after any phase.