Capability
Identity Readiness
Conditional Access, MFA, and a clean Entra ID estate — the floor a Copilot deployment stands on. Without it, the assistant inherits whatever identity hygiene you already have, including the bad parts. Practical baseline: MFA enforced for all users, legacy authentication blocked, Conditional Access policies covering risky sign-ins, and Privileged Identity Management for admin roles.
An organisational capability that the journey relies on.