Playbook
We are rolling out Copilot but Legal is worried about oversharing
The CFO has asked IT to enable Copilot for Finance and Legal next quarter. The CISO has flagged that SharePoint permissions have not been audited in years, and Legal is concerned Copilot will surface old M&A drafts to people who technically have access but should not see them.
Trigger — Copilot pilot approved; permissions never audited.
Good outcome — Pilot launches with sensitivity labels enforced, oversharing reduced, audit trail in place.