Copilot Readiness

Assessment

v1.0.3
Sample Data

Copilot Readiness Assessment

Contoso Corporation · 95 active users · July 12, 2026(5 disabled excluded)

Sample data — randomised tenant for exploration. Click refresh to generate a new scenario.

CRITICAL

2 Privileged Accounts Without MFA

Administrator(s) with no MFA — highest severity risk. 10-point penalty applied to overall score.

Nancy Scott (Global Administrator)David Wilson (Security Administrator)
HIGH

High Governance Exposure

1058 items shared broadly + 421 anonymous links. Copilot may surface sensitive content.

HIGH

21 Users Without MFA

Significant MFA coverage gap — account compromise risk remains elevated.

Readiness Bands

Recommended threshold: 75+

Not Ready

049

Partially Ready

5074

Ready

75100

53%Partially Ready

Tenant Copilot Readiness Score based on Identity, Licensing, Applications & Governance

What's Impacting Readiness?

Top factors pulling the score down and estimated lift if remediated

Potential: 53% → 73%
Governance & Compliance

1058 items are shared with Everyone, creating data over-exposure risk that Copilot can surface to unintended audiences.

Everyone links: 1058 · Public items: 999

+9
pts if
remediated
Office Applications

46 users are not on Current Channel and will miss Copilot features and monthly security patches.

Not on Current Channel: 46 users

+6
pts if
remediated
Identity & Access

21 users have no MFA protection. Enforcing MFA and completing Entra ID sync are prerequisites for Copilot deployment.

MFA Disabled: 21 users

+5
pts if
remediated
Warning

Identity

72/ 100
Weight: 30%
Pass

Licensing

77/ 100
Weight: 30%
Warning

Applications

52/ 100
Weight: 20%
Fail

Governance

41/ 100
Weight: 20%

Identity & Access

MFA adoption & Entra ID sync status

MFA Distribution

Enforced (54)
Enabled (20)
Disabled (21)

MFA Adoption

67%

weighted rate

Entra ID Sync

82%

synced

License Distribution

Copilot-eligible vs ineligible users

EligibleIneligible

73

Eligible Users

22

Ineligible Users

Governance Risk Heatmap

Items shared with Everyone and publicly accessible, per SharePoint site

Risk Level:Low (0–10)Medium (11–50)High (51+)

Training Materials

80

Engineering Wiki

69

HR Policies

66

Executive Board

55

Finance Reports

50

Project Alpha

50

Customer Data

46

Company Portal

44

Sales Resources

41

Marketing Assets

25

1058

Shared with Everyone

999

Publicly Accessible Items

Recommended Upgrades & Cost Estimate

Based on your current licence mix · Upgrade to M365 E3 for Copilot eligibility

Current Monthly Cost

£2,823.30

Total Monthly

£2,877.70

Monthly Uplift

£531.20

Annual Total

£34,532.40

Current licence mix

M365 E5 ×29M365 E3 ×29Business Premium ×15Business Standard ×15F3 ×7
DescriptionQtyPer user/moMonthlyAnnual
License UpgradeUpgrade Business Standard → M365 E315£23.70£355.50£4,266.00
License UpgradeUpgrade F3 → M365 E37£25.10£175.70£2,108.40
Upgrade subtotal£531.20/mo£6,374.40

Estimated list pricing in GBP · Excl. VAT · Excl. EA/CSP discounts · As at 2026

Remediation Checklist

Prioritized actions with owner, effort, and score lift

Critical1 action

CRITICAL: Enable MFA for 2 privileged account(s) with MFA Disabled

Eliminates the Privileged MFA Penalty and closes the highest-risk account compromise vector

IdentityOwner: Identity / SecurityEffort: S+10 pts
High Priority3 actions

Enable MFA for 21 users without MFA

Blocks 99.9% of password-based account compromise

IdentityOwner: Identity / SecurityEffort: M+5 pts

Upgrade 22 users to M365 E3 or E5

Required for Copilot deployment

LicensingOwner: Licensing / ProcurementEffort: L+7 pts

Review 1058 'Shared with Everyone' items

Prevents Copilot surfacing sensitive content

GovernanceOwner: SharePoint / ComplianceEffort: L+12 pts
Medium Priority4 actions

Enforce MFA via Conditional Access for 20 users on 'Enabled' only

Consistent MFA enforcement across the tenant

IdentityOwner: Identity / SecurityEffort: S+2 pts

Complete Entra ID sync for 17 accounts

Unified identity and seamless SSO

IdentityOwner: Directory ServicesEffort: M+3 pts

Migrate 46 users to Current Channel

Access to monthly Copilot feature releases

ApplicationsOwner: Endpoint EngineeringEffort: M+10 pts

Remove or review 421 anonymous sharing links

Reduces external data exposure

GovernanceOwner: SharePoint / ComplianceEffort: M+4 pts

Scoring Methodology

Identity (30%)

MFA adoption (70%) + Entra ID sync (30%). Enforced=100%, Enabled=50%, Disabled=0%.

Licensing (30%)

% of active users on Copilot-eligible licenses (M365 E3, E5 or Business Premium).

Applications (20%)

% of active users on Current Channel. Unknown confidence users included in denominator.

Governance (20%)

Inverted risk score per 100 users — Everyone links (35%), public items (30%), anonymous links (20%), external sharing (15%).

Privileged MFA Penalty: −10 pts applied if any privileged account has MFA Disabled. Disabled accounts excluded from all scoring denominators.
75–100: Ready 50–74: Partially Ready 0–49: Not Ready