What the assessment covers
We look at six areas before AI is switched on:
- 01 · Access
Oversharing review
We review SharePoint, OneDrive and Teams permissions, “anyone” links and stale sites, so AI tools like Copilot can’t surface files people were never meant to find.
Microsoft 365 - 02 · Data
Data protection
Sensitivity labels and data loss prevention for your most sensitive information, so it stays protected no matter which tool is asking for it.
Labels · DLP - 03 · Identity
Identity & devices
MFA, conditional access and device compliance are checked and tightened before AI is switched on for any user.
MFA · conditional access - 04 · Discovery
Shadow AI
We find which AI tools staff already use, then put controls in place to keep sensitive data out of public AI tools.
AI usage controls - 05 · People
Policy & training
A practical AI acceptable-use policy and short training for your team, so everyone knows what’s allowed and how to use AI safely.
AI usage policy - 06 · Rollout
Tools, licensing & rollout
Which AI tools fit your business, who should get access first, how success will be measured, and a phased plan for extending access across the business.
Phased rollout plan
What you receive
A written readiness report with your risks ranked, the fixes we recommend, and a phased rollout plan — reviewed with your leadership. Fixes are quoted as fixed-fee projects, and many are covered by Managed Care.
Request an AI readiness assessment
Why CAL IT Group
Microsoft 365 built in
Microsoft 365 administration, Intune and Entra security configuration are part of every Managed Care plan.
Security-first
SOC 2 Type II across all five Trust Services Criteria and a 24×7 SOC.
Vetted before recommended
A technical leadership team — co-founders Kevin Nichols and Joe Kemp — that constantly evaluates new technology — including AI — before recommending it.
Clear findings
A written readiness report: what AI tools could see today, what to fix first and the licensing you actually need.



