Microsoft Copilot promises to transform how your team works — drafting emails, summarising meetings, analysing data, and generating presentations with AI. But activating Copilot licenses without proper preparation is like giving everyone a sports car without checking if the road is safe to drive on.
At Sakal Network, we’ve assessed dozens of Singapore businesses for Copilot readiness. Here’s what we check — and what you should check before spending $30 per user per month.
1. Licensing Requirements
Copilot isn’t available on all Microsoft 365 plans. You need one of these as a prerequisite:
- Microsoft 365 Business Premium — for SMEs up to 300 users
- Microsoft 365 E3 — for mid-market and enterprise
- Microsoft 365 E5 — includes advanced security and compliance
Business Basic and Business Standard do not support Copilot. If you’re on these plans, you’ll need to upgrade before Copilot can be activated. The Copilot add-on license is approximately US$30 per user per month on top of your existing plan.
Key question: Are you on a Copilot-compatible plan, and have you budgeted for the per-user add-on cost?
2. Data Governance & Permissions
This is where most deployments go wrong. Copilot can access everything your users can access — including files they shouldn’t have access to. Years of accumulated permission sprawl suddenly becomes visible when Copilot starts surfacing documents in responses.
What to audit:
- SharePoint site permissions — are there sites with “Everyone except external users” access?
- OneDrive sharing — are files shared via “Anyone with a link”?
- Teams channels — are private channels truly restricted?
- Stale permissions — do former employees still have access via old group memberships?
- Sensitivity labels — are confidential documents (HR, legal, financial) properly classified?
Key question: If Copilot searches your entire Microsoft 365 tenant right now, would it find anything that shouldn’t be broadly accessible?
3. Security Posture
Copilot operates within your existing security framework. If that framework has gaps, Copilot inherits them.
- Multi-factor authentication (MFA) — is it enforced for all users, not just admins?
- Conditional Access — are sign-ins restricted by location, device compliance, and risk level?
- Microsoft Defender for Office 365 — is anti-phishing, Safe Attachments, and Safe Links enabled?
- Microsoft Secure Score — what’s your current score, and what are the quick wins to improve it?
- Device management — is Intune enforcing device compliance policies?
Key question: What is your Microsoft Secure Score today? (If you don’t know, that’s already a red flag.)
4. PDPA Compliance
For Singapore businesses, Copilot introduces specific PDPA considerations:
- Data residency — where is your Microsoft 365 data stored? Copilot processes data in the same region as your tenant.
- Consent and purpose limitation — does your data protection policy cover AI-assisted processing of personal data?
- Audit logging — is Microsoft 365 audit logging enabled to track Copilot interactions?
- Retention policies — are retention policies in place for Copilot-generated content?
Key question: Does your organisation’s data protection policy explicitly address AI tools processing personal data?
5. User Readiness & Adoption
Technology without adoption is waste. 44% of Copilot users stop using it within months because they don’t trust the answers or don’t know how to prompt effectively.
- Pilot group selection — start with 20-50 power users who are enthusiastic and will provide feedback
- Training plan — live sessions on prompting techniques for Word, Excel, PowerPoint, Teams, and Outlook
- Prompt library — curated, role-specific prompts for sales, HR, finance, marketing, and operations
- Champion network — internal advocates who help peers adopt Copilot
- Success metrics — define what “good” looks like before you start: adoption rate, time saved, quality improvements
Key question: Do you have a plan for user training and adoption, or are you just planning to activate licenses and hope for the best?
6. ROI Framework
At $30 per user per month, Copilot costs $360 per user per year. For a 50-person deployment, that’s $18,000 annually. Can you justify that spend?
- Time savings — estimate hours saved per user per week on email, meetings, document creation
- Quality improvements — better meeting notes, more consistent documents, faster analysis
- Opportunity cost — what would your team do with the time Copilot saves them?
- EDG grants — Singapore businesses may qualify for the Enterprise Development Grant via the SME Copilot Programme, which can offset a significant portion of deployment costs
Key question: Can you measure and demonstrate a positive ROI within 6 months?
Next Steps
If you answered “no” or “I don’t know” to more than two of the key questions above, your business isn’t ready for Copilot yet — but it can be. A structured readiness assessment takes 2-4 weeks and gives you a clear picture of what needs to be fixed before deployment.
Sakal Network provides free Copilot readiness assessments for Singapore businesses. We audit your environment, identify gaps, and build a remediation roadmap — so you can deploy Copilot with confidence.