Playbook
We're rolling out Copilot but Legal is worried about oversharing
The CFO has asked IT to enable Copilot for Finance and Legal next quarter. The CISO has pointed out that SharePoint permissions haven't been audited in years, and Legal is worried that Copilot will surface old merger documents to people who technically have access but shouldn't see them.
Trigger — Copilot pilot approved; permissions have never been audited.
Good outcome — The pilot launches and Copilot answers from the right content for each user — no surprise sightings of M&A drafts in someone's morning email summary. The audit trail shows who saw what.