Copilot licensed before sharing hygiene is how a phished mailbox reads every contract in SharePoint. SAINT’s AI & Business Automation pillar is readiness and operations — not training a model on your data.
Checklist we actually run
- Entra: MFA, admin roles, guest access, conditional access.
- Oversharing: “everyone except external” sites that are still the whole company.
- Sensitivity labels / DLP where licensed — good enough to turn features on, not a year-long taxonomy project unless you need one.
- License mapping so you’re not paying E5+Copilot for mailboxes that shouldn’t see finance.
- Then enablement and a short user brief. Custom Copilot Studio apps are out of default scope.
Lincoln and Omaha tenants get the same sequence; logistics differ (Hickman-based, no storefront). Deep admin: Microsoft 365 management. Google shops: Workspace AI on the same hub. Call 531-625-2111.