Reputable AI Consultants: Readiness Assessment
Switching on Microsoft Copilot does not create a single new file permission. It simply makes every document, mailbox and Teams channel a staff member could already open instantly searchable, surfacing years of loose sharing settings on your Microsoft 365 tenant in one afternoon. As reputable AI consultants already managing those tenants for Johannesburg SMEs, we run the readiness audit that finds those gaps first.
What Stops An AI Readiness Assessment Getting Booked
Every leadership team we’ve sat down with has a reason to put this off, and none of them are unreasonable. Before you book, here’s a straight answer to the five that come up most.
The Licence Upsell Worry
The assessment is not a Microsoft licensing pitch in disguise. It scores what you have against what you're picturing, and if the answer is that your current tenant already covers it, we say so.
Will The Report Become A Liability?
A written gap register does create a paper trail, and that's the point: an undocumented exposure is worse in an incident, not safer.
We Are Not Using AI Yet
Staff are almost always using something already, on personal accounts, whether or not it's been approved. The permission gaps this assessment finds exist with or without a formal AI rollout.
Will This Just Become A Shelved PDF?
The deliverable is a scorecard and a prioritised fix list, not a strategy document. It's built to be actioned in weeks, not filed.
Will Staff Get Blamed For Using ChatGPT?
The discovery step reads firewall logs, DNS records and browser extensions, it doesn't rely on anyone confessing.
Most businesses don't fail at AI because the technology doesn't work, they fail because nobody checked whether the data, the access controls, or the processes underneath could actually support it.
That's how a pilot turns into a security incident, or a "quick win" tool gets shelved six months in because it was never fed clean data to begin with. An AI readiness assessment means finding out where the gaps are before you build on top of them, not after a rollout has already gone wrong.
What The AI Readiness Assessment Actually Checks, Step By Step
This runs in a fixed order, the same order for every business, so nothing gets skipped because a meeting overran.
Licensing And Platform Status
We confirm which Microsoft 365 tenant and licensing tier is already paid for against what leadership is actually picturing when they say “AI”.
Permissions And Data Exposure
SharePoint, OneDrive and Teams sharing settings get reviewed against job roles, because a copilot makes every file someone can open searchable.
Data Quality And Structure
We check whether the data an AI tool would draw on is centralised, tagged and current, or scattered across shared drives, personal inboxes and paper files.
Shadow AI Discovery
We check firewall and DNS logs, browser extensions and expense claims for personal ChatGPT, Gemini or Copilot logins staff are already using, before any scoring starts.
Governance Check
We confirm whether an acceptable use policy exists for staff putting client or personal data into AI tools, and whether POPIA obligations are covered for that data.
Use Case Scoring
Candidate use cases are scored against data availability, error tolerance and transaction volume, ranked rather than sold, so the top scoring one becomes the next conversation.
Shown, Not Claimed: The Method Behind Every AI Score
Anyone can claim a methodology. Before you hand over access to a tenant, you should be able to see it, so here’s what that actually looks like.
The Blank Scorecard
The scorecard scores five dimensions before any recommendation gets made: data, permissions, licensing, governance and skills. You see the blank format before you hand over any access.
The Folder Count
A real before-and-after count of overshared sites and exposed folders found on a past engagement, and what got locked down once the review was done, before any Copilot rollout began.
The Actual Checklist
This runs on the same fixed checklist and question set every time, not a guided sales conversation that changes shape depending on who’s in the room.
A Real Client Quote
A real client account of the assessment catching a risk before rollout, in their own words, describing what was found, what it would have meant left unchecked, and why it surfaced before an incident rather than after one.
What Actually Changes The Scope And The Quote
There is no flat per-seat rate, because a five-user consultancy and a forty-user group running three subsidiaries need a different amount of scoping work before we can quote honestly. Every engagement starts with a short scoping call before any access is requested, so you get a fixed figure against a known scope, not an open-ended day rate that grows once we are inside your tenant. It sits alongside the wider work our AI consultants run once you are ready to act on what the assessment finds.
01 Number Of Systems In Scope: Email, Files, Teams, CRM
02 Tenant Complexity: One Entity Or Several Sites And Companies
03 Urgency: Standard Turnaround Or Fast Tracked Before A Rollout
Who this is for
This fits businesses already running Microsoft 365 or Google Workspace, where a real tenant and permission set exists to review, and where invoices, contracts and client records live in digital systems rather than filing cabinets. Still largely paper-based or without a central platform? A cloud readiness assessment comes first, because there is nothing yet to score.
How it works
frequently asked questions
Will you tell us if we're not ready yet?
Yes, and it costs us the booking. If your files are still scattered across shared drives and paper records, or there is no Microsoft 365 or Google Workspace tenant to assess, we say so plainly and point you to a cloud readiness assessment first.
Do you actually check our file permissions, or just interview us?
We pull the real sharing settings from SharePoint, OneDrive and Teams and check them against actual job roles, not job titles. You get a named list of overshared sites and folders, not a summary of a conversation.
What happens to the report if we don't go ahead with you afterwards?
It’s yours either way. The scorecard, the permissions findings and the fix list are handed over as a document you own, free to action yourselves or hand to another provider.
Is this specific to Microsoft Copilot, or does it cover any AI tool?
It covers any AI tool your business is weighing up, not just Copilot. Once the readiness picture is clear, the next step is choosing the right AI tool for what you actually scored well on.
Know Exactly What Copilot Would Expose Before You Switch It On
Get the honest readiness verdict.