Copilot Readiness Assessment — a fixed-fee accelerator from EPC Group

What it is

Copilot answers from whatever a user can already reach. The assessment therefore starts with the tenant, not the license: how SharePoint permissions have drifted, where sites are shared with everyone, whether sensitivity labels exist and are applied, and which data stores would be exposed through a natural-language prompt. Each surface is scored and the blockers are separated from the maturity gaps.

The output is a rollout plan the organization can act on: the remediation that must precede licenses, the pilot cohort that proves value with the least exposure, the licensing position (Copilot add-on against the Microsoft 365 plan the organization holds) and the measurement baseline the business case will need. The full service description sits on the Copilot readiness service page; this accelerator is its fixed-scope form.

Who it is for

Organizations evaluating a Microsoft 365 Copilot deployment: IT and security leaders who have been asked to approve licenses and need to know what Copilot will surface, to whom, before the first license is assigned.

Start here by size — Start with an assessment. A first external look at one estate — Copilot readiness, data governance, Power BI health, AI spend — before any build is committed. The organizations EPC Group serves, and the ones it does not, are set out on the fit page.

Deliverables

• SharePoint permissions and oversharing audit

  Every site collection scored for broad sharing, broken inheritance and orphaned access, with the remediation order.

• Sensitivity label deployment readiness

  Whether labels exist, where they are applied, and the gap between labelled content and what Copilot will index.

• Data governance gap analysis for Copilot

  Purview, DLP and retention settings read against the questions Copilot will be asked.

• Copilot licensing and ROI projection

  The license path for the plan the tenant holds and a measurement model the business case can carry — a model, not a promise.

• Pilot group selection and rollout plan

  A pilot cohort chosen for value and low exposure, with the success criteria written before licenses are assigned.

• 30-day post-delivery support

  Questions answered and the plan adjusted as the remediation lands.

What is not included

• The remediation itself — permission fixes, label deployment and DLP changes are scoped separately once the assessment has sized them.
• Copilot license procurement or tenant configuration beyond the pilot plan.
• Custom agents or Copilot Studio work — see the Copilot Studio agent governance service.

Anything outside the deliverables above is a change order under the Engagement Charter — written, priced and approved before the work starts.

When to start

• Copilot licenses are being requested and nobody can say what the tenant would expose.
• A pilot stalled because users saw content they should not have.
• The business case for Copilot needs a baseline before budget is approved.

How it is priced

Fixed fee, quoted after a 30-minute scoping call. EPC Group does not publish price ranges. The scoping call is run by the architect who would lead the work; the fixed fee, the deliverables and the acceptance criteria are written into the Statement of Work, and the change-control, escalation and acceptance rules are the ones in the Engagement Charter.

Related

• Full service: Microsoft 365 Copilot Readiness Assessment (TAR-8)
• Related accelerator: Microsoft 365 Governance Framework (4–6 weeks)
• Related accelerator: AI Governance Framework (6–10 weeks)
• All accelerators: the fixed-fee accelerators hub
• Documented engagements: case studies and the Evidence Center