Microsoft 365 Copilot Pre-Rollout Security Readiness Assessment Service

The buyer requires a Microsoft 365 Copilot pre-rollout security readiness assessment service. The vendor must evaluate SharePoint data-access governance reports and tooling, organization-wide access grants, public SharePoint sites, Microsoft 365 Groups, guest access, anonymous links, direct sharing, and broadly scoped security groups. Scope also includes reviewing privileged administrative roles, AI disclaimers, responsible AI protections, tenant controls, web search, web grounding, Microsoft Graph connectors, and third-party integrations that expand information access. To qualify, vendors must be a USA-only onshore organization. The contractor will perform all work offsite. The buyer seeks proposals to establish the budget, but the text provides no specific evaluation criteria or key dates.