Your results
Prepared for Sample Regional Insurance Agency · Oklahoma City, Oklahoma · Jordan Mercer · Director of Operations
Tier: Exploration · Next step: Operational audit — map ROI-ready workflows before you buy tools
- Data security & compliance50
- Operational process maturity54
- Technology infrastructure68
- Team & change management57
- Financial & strategic alignment71
First-year net savings (after investment): $28,284 – $47,524
Payback window: 0.6–1 months
Suggested first-year investment range: $2,500 – $2,500
Model uses your industry, headcount, revenue band, and repetitive work hours. Figures are estimates — your PDF includes the same breakdown.
Copilot Purchased, Foundation Not Ready
You've already bought Copilot seats, but your responses suggest the M365 foundation isn't ready to deploy them safely. This is the #1 pattern we see — organizations buy first, then discover Copilot is surfacing the wrong information to the wrong people. The seats are still valid — we just need to fix the foundation before rolling out.
Recommended: Pause any wider rollout. Start with a Security & Governance Foundation engagement to fix permissions and deploy sensitivity labels before expanding users.
SharePoint Permissions Unknown = Copilot Blast Radius Unknown
Copilot will surface any document a user has permission to read. If your SharePoint permissions haven't been audited, you don't know what Copilot will expose. The enterprise average is 340+ overshared sites; the SMB pattern is often worse because permissions were never strictly scoped.
Recommended: Run a SharePoint Advanced Management permissions report before the first Copilot license goes live. If you don't have SAM, this is part of what our Foundation engagement delivers.
AI Can Only Automate What Someone Can Explain
Your process documentation is thin. AI agents, Power Automate flows, and custom GPTs all need the same raw material: a clear SOP. Without one, the pilot stalls at week 3 when the consultant has to reverse-engineer the workflow from scratch.
Recommended: Pick the single highest-volume process and write a 1-page SOP before the pilot starts. This alone typically saves weeks of implementation time and doubles as the prompt spec.
High Document Volume Is a Clear Automation Target
You process 100 – 500/week documents each week. Every repeated template — intake forms, claims packets, proposals — is a place a purpose-built assistant can save hours.
Recommended: A single document-centric pilot (Copilot on SharePoint, or a custom GPT trained on your templates) will almost certainly return 3-5x in the first year. Pick the template with the most repetition and the clearest quality bar.
You Took the First Step — That's Rarer Than It Sounds
Most operators talk about AI. The ones who move on it start where you did: with an honest baseline. That alone separates you from about 80% of your peers.
Recommended: Use this report as a working document. Share it with your leadership team, pick one insight to act on in the next 30 days, and revisit in a quarter.
Blocked — prerequisites not met for Copilot for Microsoft 365 · License context: Unknown / not specified
- Detected SKU posture: unknown — Unknown — verify actual SKU assignments in Microsoft 365 admin center (Billing → Your products).
- Entra ID: Entra tier not confirmed — baseline with Security Defaults or CA templates, then license P1 minimum for regulated tenants.
- Copilot readiness: blocked — prerequisites must be green before spending on the $30/user add-on.
- Insurance: pair Purview DLP with clear retention on policyholder correspondence.
Sample compliance gaps
SharePoint / Microsoft 365 group oversharing (Copilot blast radius)
Risk: critical · Self-reported: SharePoint permissions are unknown; Copilot exposure cannot be bounded.
Producer & customer PII protection (state + NAIC model influences)
Risk: medium · DLP maturity not validated.
Quick wins
- Pause net-new Copilot seats until prerequisites are closed: You reported purchased Copilot with low adoption. Address SharePoint permissions and labels before expanding assignments so Copilot does not scale exposure of sensitive content.
- Turn off anonymous sharing links by default: Stops 'anyone with the link' sprawl — immediate reduction in accidental public exposure before labels land.
Your full PDF report expands this with upgrade paths, Purview alignment, and a 90-day security roadmap.
Complete the assessment to download your own PDF and personalized M365 roadmap.