Your worksheet is on its way

We have sent it to the address you gave us, and it should arrive within a couple of minutes. If it does not, check your junk folder, or download it straight from here.

Set aside 75 minutes and use the Word version, because you will be typing findings into the table as you go. You will need read access across the Microsoft 365, SharePoint,
Teams, Purview and Entra ID admin areas. The first page of the worksheet explains what that means.

Everything in the worksheet is read only. You are looking, not fixing. There is one clearly flagged exception in Step 4c, which saves a report file but changes no permissions. Resist the urge to start removing access as you find things, because permissions in Microsoft 365 are inherited and interlinked, and the quickest way to turn a governance problem into an outage is to remove a group somebody depended on.

Step 2. Microsoft adds the group “Everyone except external users” to the Members group of public Teams and SharePoint sites by default, and Members carries edit rights, not just read. So your list of public teams is usually also your list of sites the whole company can open and change. Most people have never looked.

Half an hour on a call. Adam will talk you through how we approach AI data security, what we would put in place and why, and what we would be watching for in a business like yours. 

Bring your findings table if you want to go through anything specific.

No charge and no expectation that you buy anything.