1. Licensing and technical prerequisites check
We confirm your Microsoft 365 licensing is eligible for Copilot and validate client requirements, including readiness for the latest Microsoft Teams client experience.
Why readiness matters before you buy licenses
Microsoft removed the 300-seat minimum for Copilot. That opens the door for businesses using Microsoft 365 Business Basic, Standard, and Premium. It also raises an immediate governance question: if users have broad file access today, Copilot can surface that content tomorrow.
Because Copilot uses Microsoft Graph and inherits your existing permissions, weak data hygiene can expose HR records, finance files, and executive communications to unintended audiences.
Our assessment delivers a right-sized, practical roadmap so your organization can adopt AI with clear guardrails.
What is included in your SMB assessment
2. Identity and access security review
We evaluate identity controls with a Zero Trust lens, focusing on multifactor authentication and Conditional Access so every request is explicitly verified.
3. Data oversharing and sprawl audit
We audit Teams, SharePoint, and OneDrive sharing patterns, identify risky "Anyone" and broad org links, and provide concrete remediation guidance.
4. Basic information protection setup
We define a practical data classification approach and assess readiness for Microsoft Purview Sensitivity Labels to protect high-value documents.
5. Clear readiness roadmap
You receive an executive-level risk analysis, prioritized mitigation steps, and a safe pilot rollout strategy before broader deployment.
Service tiers
Essential
$3,500 Fixed price — up to 25 users
Readiness Snapshot
Best for organizations that want a clear picture of where they stand before committing to remediation. Delivered within two weeks with one findings review session.
Timeline: 2 weeks
- Microsoft 365 license eligibility audit
- Identity and MFA coverage check
- Oversharing spot audit (Teams, SharePoint, OneDrive)
- One-page readiness scorecard (Red / Yellow / Green)
- Prioritized remediation recommendations
Not included: Hands-on remediation, Purview setup, DLP policies
Professional Most popular
$8,500 Fixed price — up to 75 users
Full Readiness Assessment
Best for organizations actively evaluating or purchasing Copilot for M365. Covers every readiness dimension with a detailed roadmap and prioritized action plan. Includes 3 live working sessions.
Timeline: 4–6 weeks
- Everything in Essential
- Full data oversharing and sprawl audit
- SharePoint governance assessment
- Conditional Access and Zero Trust review
- Purview sensitivity label readiness check
- 30-page findings report with prioritized roadmap
- Executive summary and safe pilot rollout strategy
Not included: Hands-on DLP or Purview configuration
Transform
$15,000 Fixed price — up to 150 users
Assessment + Remediation
Best for organizations deploying Copilot now or under active compliance pressure. Assessment findings are remediated hands-on, and the environment is certified-ready on exit. Includes 5 live working sessions.
Timeline: 8–10 weeks
- Everything in Professional
- Hands-on oversharing remediation
- DLP policy configuration (Microsoft Purview)
- Sensitivity label deployment and testing
- Conditional Access policy hardening
- Copilot readiness sign-off documentation
- Stakeholder briefing and handover session
SMB pricing benchmark snapshot
| Service Category | SMB Pricing Benchmark (USD) | Service Scope |
|---|---|---|
| Specialized Copilot Readiness Check | $5,000 - $15,000 | Four-week engagement including discovery and roadmap. |
| General M365 Security Hardening | $2,000 - $6,000 | Baseline security and identity management. |
| SharePoint Governance Assessment | $15,000+ | Deep dive into site structure and permission frameworks. |
| Vulnerability Assessment | $1,000 - $5,000 | Systematic examination of security weaknesses. |
| IT Strategy (Under 50 Users) | $2,000 - $8,000 | High-level roadmap and tenant assessment. |
Why work with Jeffrey
Jeffrey McFarland has been working at the intersection of Microsoft 365 security and AI readiness since before Copilot was a product. He has assessed dozens of SMB tenants and seen exactly what happens when organizations buy Copilot licenses without first addressing permissions sprawl, overshared links, and weak identity controls.
His readiness assessments are built for business leaders, not IT departments — every finding is explained in plain language with a clear priority order, so you know what to fix first and why it matters before you spend a dollar on Copilot.
Schedule Your Copilot Readiness AssessmentFrequently asked questions
How can I check if my Microsoft 365 license is eligible for Copilot?
We validate your tenant licensing against current Microsoft eligibility requirements and identify any upgrade steps needed before add-on purchase.
What specific security risks does Copilot pose for small businesses?
The biggest risks come from inherited permissions, overshared links, and weak identity controls. Copilot can surface content users can access, even when access was granted too broadly by mistake.
How do Microsoft Purview Sensitivity Labels help protect sensitive data?
Sensitivity Labels let you classify, encrypt, and restrict sensitive files so only authorized people can open and query that content, including through Copilot prompts.