Anonymized engagement summary: SharePoint Online and Microsoft Copilot AI governance for a regional bank (2024)
Work products on file (EPC-reported; documents private)First-pass editionA regional bank (client not named) · 2024 · Project ID EPC-2024-ANON-BANK-COPILOTGOV
Last updated by Errin O'Connor, Founder & Chief AI Architect, EPC Group
Opening answer. In 2024 a regional bank engaged EPC Group to build an enterprise SharePoint Online governance strategy with Microsoft Copilot and AI governance built in, timed to its move from on-premises SharePoint to SharePoint Online. Between August and December 2024 EPC Group delivered a governance model, a 40-question governance working set taken through three client feedback rounds, a Copilot AI governance project plan aligned to the migration, a Copilot readiness document, banking-industry recommendations, an incident-management playbook, a migration checklist and a shadow-IT prevention guide.
Disclosure. This is an EPC-reported anonymized engagement summary. The client is not named. Supporting project records — the statement of work (with the client's edits, accepted by EPC Group) and the dated work products listed below — are retained privately and are not published in the Evidence Center, so this account is outside the Evidence Center's documented-engagement counts. Every engagement fact below is taken from those documents.
Verification class
Work products on file (EPC-reported; documents private). The work products are dated from August to December 2024, and the client's written feedback on the governance questions is on file. No countersigned copy of the statement of work is cited, and no acceptance record or outcome measurement is claimed.
Buyer problem and scope
| Item | What the documents state |
|---|---|
| Buyer | A regional bank (client not named) |
| Situation | A move from on-premises SharePoint into a centralized SharePoint Online tenant, with Microsoft 365 Copilot on the roadmap |
| Objective | An enterprise SharePoint Online governance strategy that includes AI and Copilot governance, so the bank can scale its AI use with information security and regulatory requirements identified |
| Scope (statement of work) | Requirements sessions; information architecture and taxonomy design; governance technical architecture covering site configuration, security and administration; Microsoft Entra ID and security-group strategy, including groups that affect Copilot; a governed process for the migration; search, branding and metadata practices; Power Automate and integration elements; managed lists and libraries |
| Timing | Statement of work dated May 2024; work products August–December 2024; the project plan aligned governance to a migration window running from late September to late November 2024 |
| Sign-offs named in the plan | Identity alignment with the bank's Entra ID configuration; the bank's compliance team reviewing governance policies; IT leadership approving them before migration integration |
Unknowns, not stated in the documents cited: the number of sites, users or content volume, the Copilot licensing decision, whether Copilot was switched on and for whom, and any adoption or risk measurement.
Approach and artifacts
Governance before AI. The work treats Copilot readiness as a governance problem: Copilot surfaces whatever a user can already reach, so permissions, information architecture and metadata come first. The project plan therefore maps AI governance policies into the migration plan itself, rather than adding them afterwards, with identity, compliance and IT-leadership sign-offs as gates.
Iterated with the client. A set of 40 governance questions went through three rounds: EPC Group's first version, the bank's written feedback, and a third version that places each answer in the governance model with banking-industry best practice.
Work products (dated, held privately):
| Work product | Date |
|---|---|
| Governance agenda and first governance working draft | August 2024 |
| SharePoint Online and Copilot governance guide — outline and initial version | August 2024 |
| 40 follow-up governance questions: version 1, client feedback, version 2, version 3 with best practices | August–October 2024 |
| Microsoft Copilot AI governance project plan (document and spreadsheet) | September 2024 |
| Best-practice recommendations from the banking industry | September 2024 |
| SharePoint Online tenant-to-tenant pre-migration requirements | September 2024 |
| SharePoint governance model, version 2.0 (implementation steps, key recommendations) | October 2024 |
| Azure and Microsoft 365 incident-management playbook (identification through post-incident review) | October 2024 |
| Migration checklist | October 2024 |
| Preparing for Microsoft Copilot integration in the Microsoft 365 deployment (assessment, use cases, training, security and compliance checks, pilot, data strategy, licensing implications) | October 2024 |
| Shadow-IT prevention guide for SharePoint Online and Microsoft 365 in banking | October 2024 |
| Email-overload issue resolution | December 2024 |
Results and limitations
| Claim | Basis | Status |
|---|---|---|
| EPC Group delivered the governance model, plan, readiness document and guides listed above | Dated work products | Work products on file (EPC-reported; documents private) |
| The bank reviewed and returned written feedback on the governance questions | Client feedback version, August 2024 | On file (EPC-reported) |
| Governance was adopted, Copilot was deployed, or risk fell | No document cited | Not claimed |
Provenance
- Sources: the statement of work (May 2024; the client's edits accepted by EPC Group, July 2024) and the dated work products above, held privately. Engagement ID: EPC-2024-ANON-BANK-COPILOTGOV, an alias unrelated to the client's name.
- Anonymization: industry and organization type only, under EPC Group's anonymized-case rule; location, staff names and commercial terms are not published.
- Not claimed: client endorsement, Copilot deployment, adoption, or any measured result.
- Author: Errin O'Connor, Founder & Chief AI Architect, EPC Group, the engagement's named project champion.
Revision history
- 2026-10-25: anonymized engagement summary published from the engagement's statement of work and work products.
Related service
Microsoft Copilot consulting · AI governance · Talk to a senior architect
Author: Errin O'Connor, Founder & Chief AI Architect, EPC Group · Published: 2026-10-25.