Stay informed with the latest IT tips
Cybersecurity advice and exclusive resources from the Andisa team, straight to your inbox.
Are you like the 80% of businesses already using SharePoint or OneDrive in Microsoft 365?
For many organisations, the next step is to start using Microsoft Copilot or ChatGPT to give faster access to data and create reports — not just find results or notes.
That all sounds great.
But here’s the real question:
Is your network and data actually ready for AI?
Most businesses start the same way.
A bright member of staff logs into Microsoft 365 and switches SharePoint on.
It’s easy. You just log in and start using it.
Folders are created. Files are uploaded. Teams begin collaborating.
But did anyone check the structure?
Were permissions reviewed?
Was sensitive data secured properly?
Or was it simply turned on and left to grow organically?
Here’s the part many businesses overlook.
Copilot will read all data it has access to — just like an inquisitive employee.
If your SharePoint or OneDrive permissions are too broad, AI will surface information that technically exists in the system — even if it was never intended to be easily accessible.
Why not try asking AI:
“What are the director salaries in our business?”
If that information is stored somewhere in SharePoint and permissions allow access, you might be surprised what appears.
AI doesn’t understand internal sensitivity or hierarchy.
It simply works with the access it has been given.
That’s why AI data governance and Microsoft 365 security are now business-critical.
In our experience supporting businesses across Harrogate and Yorkshire, many Microsoft 365 environments have:
Before rolling out Microsoft Copilot or encouraging staff to use AI tools, it’s essential to review your SharePoint security, OneDrive permissions and overall network structure.
AI amplifies both good and bad data practices.
Before enabling Copilot or integrating AI into your workflows, consider the following:
Does everyone really need access to everything?
Applying the principle of least privilege ensures staff only see the data they genuinely need.
Payroll, HR records, contracts and financial data should have clearly restricted access.
If AI can see it, users can too.
Microsoft 365 includes tools to classify confidential, internal and public data — but they must be configured properly.
Set clear guidance around:
If AI processes personal data, your governance framework must align with UK GDPR requirements.
There’s no doubt that AI can:
But if your SharePoint environment was simply switched on without proper structure or security planning, introducing AI could expose weaknesses.
Getting your network, security and data governance foundations right ensures AI becomes a competitive advantage — not a liability.
At Andisa IT, we help businesses across Harrogate and Yorkshire review their Microsoft 365 environments, tighten permissions and prepare their networks for secure AI adoption.
If you’re considering Microsoft Copilot or wider AI tools in your business, now is the time to check your foundations.