A scored seven-domain review with a written report and prioritized remediation roadmap, before Copilot is turned on.
Provided by Bradley C., Owner/Senior Security Consultant — Compliance-Native MSP | PCI DSS, CMMC, HIPAA | CISSP, CISA, PCI QSA | Retired USAF Cyber Operations
Microsoft 365 Copilot only shows people what they can already access. If your SharePoint, Teams, and OneDrive permissions have grown loose over the years, Copilot will surface that data in seconds. This assessment shows you where you stand before anything is turned on.
I review your Microsoft 365 tenant and score it across seven domains: Licensing Identity hygiene (MFA, Conditional Access, admin roles, guest access) Data governance (oversharing, permissions sprawl, stale content) Sensitivity labels and DLP Audit and logging configuration Adoption readiness Use-case ROI What you receive: A written AI readiness report with findings explained in plain English A scored result: Ready, Ready After Remediation, Conditional, or Not Ready A prioritized remediation roadmap you can hand to your IT team or have us execute A readout call to walk through the results and answer questions Who it’s for: regulated small and mid-sized businesses in healthcare, retail, hospitality, and professional services that want Copilot productivity without putting HIPAA, PCI DSS, or client data obligations at risk.
What I need from you: read-only administrative access to your Microsoft 365 tenant and a short intake call about how your team works and which data matters most. No changes are made to your environment during the assessment. Important to know: this is an assessment and advisory service.
It supports your compliance program but does not guarantee compliance or certify your environment. Copilot licensing is not sold standalone, and if you move forward with a rollout, licensing is passed through at no markup.
Delivered by Peregrine Data Solutions, led by a retired USAF cyber operations Master Sergeant with CISSP and CISA credentials.
Up to 25 Microsoft 365 users in one tenant.
Required: read-only review of your tenant across seven domains: licensing, identity hygiene, data governance, labels and DLP, audit configuration, adoption readiness, and use-case ROI Written AI readiness report in plain English - Scored result: Ready, Ready After Remediation, Conditional, or Not Ready - Prioritized remediation roadmap - Readout call to walk through the results Not included: remediation work, Copilot licensing, or Copilot rollout, which are available as separate engagements.
Larger tenants: message me for a scoped quote.
Heelr is the cybersecurity services marketplace by Cyberr. Buyers scope work, compare verified providers and pay through protected payments.