Anonymized engagement summary: SharePoint Online and Microsoft Copilot AI governance for a regional bank (2024)
Anonymized engagement summaryRegional bank · 2024
Opening answer. In 2024 a regional bank engaged EPC Group to build an enterprise SharePoint Online governance strategy with Microsoft Copilot and AI governance built in, timed to its move from on-premises SharePoint to SharePoint Online. During 2024 EPC Group delivered a governance model, a 40-question governance working set taken through three client feedback rounds, a Copilot AI governance project plan aligned to the migration, a Copilot readiness document, banking-industry recommendations, an incident-management playbook, a migration checklist and a shadow-IT prevention guide.
This is an anonymized engagement summary published under EPC Group's anonymized-engagement rule: the client is not named, no commercial terms are published, and every statement is EPC-reported. Named, documented engagements are in the Evidence Center.
Problem and scope
| Item | Scope |
|---|---|
| Organization | A regional bank |
| Situation | A move from on-premises SharePoint into a centralized SharePoint Online tenant, with Microsoft 365 Copilot on the roadmap |
| Objective | An enterprise SharePoint Online governance strategy that includes AI and Copilot governance, so the bank can scale its AI use with information security and regulatory requirements identified |
| Scope | Requirements sessions; information architecture and taxonomy design; governance technical architecture covering site configuration, security and administration; Microsoft Entra ID and security-group strategy, including groups that affect Copilot; a governed process for the migration; search, branding and metadata practices; Power Automate and integration elements; managed lists and libraries |
| Timing | Work products delivered during 2024; the project plan aligned governance to the bank's migration window later that year |
| Sign-offs named in the plan | Identity alignment with the bank's Entra ID configuration; the bank's compliance team reviewing governance policies; IT leadership approving them before migration integration |
Not reported: the number of sites, users or content volume, the Copilot licensing decision, whether Copilot was switched on and for whom, and any adoption or risk measurement.
Approach and artifacts
Governance before AI. The work treats Copilot readiness as a governance problem: Copilot surfaces whatever a user can already reach, so permissions, information architecture and metadata come first. The project plan therefore maps AI governance policies into the migration plan itself, rather than adding them afterwards, with identity, compliance and IT-leadership sign-offs as gates.
Iterated with the client. A set of 40 governance questions went through three rounds: EPC Group's first version, the bank's written feedback, and a third version that places each answer in the governance model with banking-industry best practice.
Work products delivered (EPC-reported):
- Governance agenda and first governance working draft
- SharePoint Online and Copilot governance guide — outline and initial version
- 40 follow-up governance questions: version 1, client feedback, version 2, version 3 with best practices
- Microsoft Copilot AI governance project plan (document and spreadsheet)
- Best-practice recommendations from the banking industry
- SharePoint Online tenant-to-tenant pre-migration requirements
- SharePoint governance model, version 2.0 (implementation steps, key recommendations)
- Azure and Microsoft 365 incident-management playbook (identification through post-incident review)
- Migration checklist
- Preparing for Microsoft Copilot integration in the Microsoft 365 deployment (assessment, use cases, training, security and compliance checks, pilot, data strategy, licensing implications)
- Shadow-IT prevention guide for SharePoint Online and Microsoft 365 in banking
- Email-overload issue resolution
What EPC Group delivered and what is not claimed
| Claim | Basis | Status |
|---|---|---|
| EPC Group delivered the governance model, plan, readiness document and guides listed above | EPC delivery record | Work products on file (EPC-reported) |
| The bank reviewed and returned written feedback on the governance questions | Client correspondence on file (2024) | On file (EPC-reported) |
| Governance was adopted, Copilot was deployed, or risk fell | Not reported | Not claimed |
Related services
SharePoint consulting · Microsoft Copilot · AI governance · All case studies · Talk to a senior architect
Last updated by Errin O'Connor, Founder & Chief AI Architect, EPC Group
Author: Errin O'Connor, Founder & Chief AI Architect, EPC Group · Published October 25, 2026 · Project alias EPC-2024-ANON-BANK-COPILOTGOV · Published under the anonymized-engagement rule.