Data Governance Assessment — a fixed-fee accelerator from EPC Group
Last updated by Errin O'Connor, Founder & Chief AI Architect, EPC Group
- Duration
- 4–6 weeks
- Team
- Senior architect named on the Statement of Work; engagement lead where the program size warrants it.
- How it is priced
- Fixed fee, quoted after a 30-minute scoping call. EPC Group does not publish price ranges.
What it is
The assessment begins with discovery: what data stores exist, who owns them, and what sensitive information they hold, found by scanning rather than by interview alone. Microsoft Purview is deployed and configured against that inventory, a sensitivity-label taxonomy is designed for the organization's own vocabulary, and the key data stores are classified so the first policies have something real to act on.
The governance framework that closes the engagement names the roles, the policies and the decision rights, and recommends how a Center of Excellence should carry them forward. It is written to pass an auditor's reading as well as a data owner's.
Who it is for
Organizations starting data governance or preparing for a compliance audit, where the data estate has grown across SharePoint, OneDrive, Teams, databases and file shares faster than anyone has mapped it.
Start here by size — Start with an assessment. A first external look at one estate — Copilot readiness, data governance, Power BI health, AI spend — before any build is committed. The organizations EPC Group serves, and the ones it does not, are set out on the fit page.
Deliverables
Data landscape discovery and inventory
Stores, owners and sensitive-information findings from scans, not surveys.
Microsoft Purview deployment and configuration
The Purview capabilities the organization's plan includes, configured for the inventory.
Sensitivity label taxonomy design
A small label set in the organization's language, with the auto-labelling rules that fit it.
Data classification scan of key data stores
The prioritized stores classified so the first policies are measurable.
Governance framework and policy documentation
Roles, decision rights and policies written for owners and auditors.
CoE establishment recommendations
How to staff and run the governance function after the engagement.
What is not included
- Classification and labelling of every store — the scan covers the prioritized set; the rest follows under the framework.
- Records-management or retention programmes beyond the policies the framework defines.
- Data platform engineering (lakehouses, warehouses) — see the Fabric consulting service.
Anything outside the deliverables above is a change order under the Engagement Charter — written, priced and approved before the work starts.
When to start
- An audit is scheduled and the organization cannot show where regulated data lives.
- Copilot or another AI rollout is planned and the data has never been classified.
- Purview is licensed and unconfigured.
How it is priced
Fixed fee, quoted after a 30-minute scoping call. EPC Group does not publish price ranges. The scoping call is run by the architect who would lead the work; the fixed fee, the deliverables and the acceptance criteria are written into the Statement of Work, and the change-control, escalation and acceptance rules are the ones in the Engagement Charter.
Frequently Asked Questions
The scan classifies the data stores prioritized in discovery — typically the ones that hold regulated or commercially sensitive data; the framework sets out how the remainder is classified afterwards.
Book the scoping call
A 30-minute call with the architect who would lead the Data Governance engagement; the fixed fee follows in writing.
Contact EPC Group