Course 01 · Available now · Founder cohort open
Nine modules covering the exact assessment methodology used on production Microsoft 365 tenants. Not theory. Not paraphrased documentation. The actual configuration decisions, click paths, and findings interpretation you need to safely turn Copilot on inside a real organisation.
Lifetime access · downloadable practitioner guide · certification exam · LinkedIn credential
Pricing
Lifetime access · 1 seat · certification included
Team plans from CA$1,499 (5 seats) · Enterprise CA$4,999 (25 seats)
Who this is for
This course assumes you already know M365 exists, know what SharePoint is, and can find your way around the admin centres. It does not spend time explaining what Copilot is or why AI matters. It starts from the assumption that your CIO has decided Copilot is happening and you need to make sure it doesn't leak data on Day 1.
You'll come out able to run a defensible readiness assessment on any M365 tenant, interpret the findings against real risk, sequence the remediation work, and defend the decisions to a compliance auditor. If your job title is M365 admin, IT lead, cloud architect, consulting associate at an MSP, or governance analyst — this is written for you.
Curriculum
Each module includes video walkthrough, written reference, click-path documentation, PowerShell snippets, and a short knowledge-check quiz. Complete all nine plus the final exam to earn certification.
Which SKUs actually include Copilot (M365 Copilot vs Business SMB vs Copilot Pro). SubscribedSkus enumeration. Purview Information Protection detection. Entra ID Premium P1/P2 requirements. Audit Premium presence. How to know before you tell the CIO "yes we're licensed."
Sensitivity labels published vs actually applied — the difference matters. Custom Sensitive Information Types. The single highest-impact question we can ask any tenant: "is Microsoft 365 Copilot a protected workload in your DLP rules?" Why 90% of tenants get this wrong.
The CISO posture before Copilot enables anything. Conditional Access policies for AI apps. MFA enforcement. Global Administrator count and cadence. Guest user ratio. OAuth grants. Privileged Identity Management usage. Break-glass account hygiene.
Click-to-Run update channel breakdown via getM365AppUserDetail. The "we bought licences but half the company can't see the Copilot button because they're on Semi-Annual Channel" problem. How to switch channels without breaking IT change control.
Tenant-wide external sharing capability. Teams lifecycle hygiene. OneDrive Known Folder Move adoption. Catches Copilot value-gap problems (KFM not deployed = Copilot can't see desktop files) and Copilot risk problems (unmanaged external access = Copilot indexes across boundaries).
The oversharing surface Copilot will index. Anyone-link footprint. Edit-vs-view ratios. Links older than 12 months. Restricted Content Discovery (RCD). Restricted Access Control (RAC). SharePoint Advanced Management for at-scale remediation.
Environment strategy for Copilot Studio agents. DLP policy design. Managed environments. Connector control. Maker lifecycle. How to prevent the "shadow Copilot" problem (business users spinning up agents outside IT visibility).
The specific admin-centre settings that gate Copilot behaviour: which users get access, which data sources agents can reach, web-grounding on or off, plugin governance, prompt logging retention, and how to document the choices for a compliance auditor.
The composite 1.0–4.0 score. The four-state pilot verdict (Not Ready, Partially Ready, Mostly Ready, Ready). How to sequence remediation as Must Do Before Copilot, Must Do Before Full Rollout, or Nice to Have. How to write the finding into a report your client will actually act on.
Certification
Exam format. 30 questions. 45 minutes. 75% pass mark. Mix of multiple-choice, scenario-based interpretation, and one "read this finding, write the remediation" long-form question. Two retakes included in the enrolment fee.
Credential. Passing earns you a LinkedIn-shareable digital badge and a PDF certificate you can attach to CVs or client proposals. The credential recertifies every 24 months — because Microsoft doesn't hold Copilot still and neither should the qualification.
What it signals. That you can run a defensible Copilot readiness assessment against a real tenant, interpret the findings, and produce a remediation plan a client will fund. Not a participation badge. A working-practitioner credential.
What's included
Video walkthrough, written reference, click paths, PowerShell snippets, knowledge-check quiz per module.
~50-page Word/PDF reference document covering the full methodology. Downloadable, keep-forever.
All 74 checks, what triggers them, severity, remediation guidance. Print-friendly one-pager per module.
30 timed questions, 75% pass, two retakes. LinkedIn-shareable digital badge on pass.
Buy once, own forever. All course updates included when Microsoft ships changes to the M365 platform.
Access to the CCRP practitioner Slack — ask questions, share findings, learn what other consultants are seeing on live tenants.
Founder cohort pricing available for the first fifty enrolments. Email us to enrol and we'll send payment link + course access within one business day.