Visit the crayon.com enterprise site
Crayon Channel APAC

Search

Become a Partner Partner Login
Crayon Channel APAC

Search

Security and Data Governance are key to building trust in Generative AI

Security and Data Governance are key to building trust in Generative AI

Generative AI like Microsoft Copilot offer powerful transformative potential to businesses.  The underpinning cloud infrastructures and integrations required to harness Gen AI is also driving a new boom cycle for IT services. Yet, one of the greatest barriers to AI adoption and success for implementations is risk, and much of this is around the use of data. 

Data is the fuel that powers every AI, and this fuel is highly combustible!  It needs to be stored, managed and accessed the right way by those developing and training AIs, and those using AI tools like Copilot. When it is not, businesses are at increased risk of catching regulatory, financial and reputational fire.

For partners, there is a considerable opportunity to respond to the many ‘data readiness’ requirements that underpin safe, secure and successful use of Copilot. 

In the video and article below, I’ll go into some further detail.

Key Points

Key Points

Data Readiness is the bedrock of Copilot success

AI’s value comes from accessing corporate information — documents, CRM data, emails, and more. Depending on the nature of the business, data stores that may need to be accessible by AI could include customer/consumer information.

Generative AI tools like Copilot don’t “know” anything by default — they learn from, and work with, the data they can access in an organisation’s environment. That means:

  • Good data in = valuable, accurate insights out
  • Poor data in = unreliable, risky, or non-compliant outputs

There is a raft of considerations to be factored in around how data is classified, secured, managed and accessed before it is ingested by an AI.  Well-considered and defined governance frameworks reduce the risk of unintended and sometimes damaging outcomes.

Data Readiness is AI Risk Reduction 101.

Data readiness isn’t about how much data you have — it’s about:

  • Accuracy – Is it correct, up-to-date, and relevant?
  • Structure – Is it well-organised and easy for AI to interpret?
  • Security – Can only the right people access the right data?
  • Compliance – Does data handling align with privacy and industry regulations?

Businesses are rightly concerned about the risk posed if AI tools:

  • surface confidential files inappropriately
  • pull outdated or incorrect data into business decisions
  • breach compliance or data privacy regulations

Crayon’s own recent study into SMB operations across the APAC region shows SMBs

  • place critical priority on improving security and privacy and reducing enterprise and IT risk
  • are aware they lack the internal skillsets and resources to get their data and information management structures in shape for AI adoptions.

These findings correlate closely with our own data, shown below and reinforces the importance of addressing data and information management risk early.

 

Real-world examples I have personally seen occur include:

  • Copilot surfacing confidential salary information from poorly governed SharePoint files.
  • AI agents generating customer emails that unintentionally disclose sensitive data — like private health records or personal details clients never consented to share.

Without clear data governance, these risks become business-critical issues.

 

Governance goes beyond technology.

Risk management isn’t just about data classification — it’s also about compliance, ethics, and responsible AI use.  How AI use aligns with organisational values and regulatory/compliance requirements is an important topic to canvass, whether you’re working with a small business owner or a board.

Helping clients frame AI policies, design ethical guidelines, and create compliance guardrails will become core parts of every AI engagement.

Opportunity goes beyond the license.

The growth potential for partners goes so much further than selling Copilot licenses.  AI adoption is a journey of digital uplift that intersects with cloud infrastructure, cybersecurity, continuity, digital workplace systems and business applications.

However, the starting point is always data.

For customers to achieve sustained value from Copilot, they’ll need a data readiness roadmap. You don’t need deep AI expertise to deliver value here.  Start with what you know and extend it.  If you have solid capabilities in backup, or security or M365 management, consider using Microsoft Purview to classify and govern data access or applying Microsoft Defender to secure data pathways.

The table below outlines seven key readiness steps, aligned to potential service opportunities and vendor/tool options. This is a practical framework for engaging customers through what’s needed to get their data house in order, ahead of AI adoption.

 

 

 

Silver bullets still come from smoking guns.

Getting the data foundations in place for sustained success with Copilot will take time and investment for your clients.  Some will bridle at this and look to you for silver bullets that provide shortcuts through this stage of the AI adoption journey.

They’ll only end up shooting themselves in the foot.

By starting with data readiness, you’ll be guiding your customers to

  • drive more value from their business data, across the board
  • overcome internal concerns and barriers to AI adoption
  • have a higher rate of success with AI pilots and POCs
  • reduce the emergence of AI-related risk in their operations, once it is in use
  • benefit from quality, trustworthy AI outputs and a faster time-to-value for their investment.

In the next chapter of our Copilot Insight Series, I’ll offer some thoughts on successful pilot projects, which will further highlight the importance of getting solid data foundations in place.

 

 

 

 

 

 

Next Up!

Next Up!

AI Pilot Projects

Learn More

About the Author

About the Author

Dr. Sweeney is a principal advisor and industry analyst at IBRS. He is a recognised thought leader in Future of Work, digital innovation, workforce transformation, and organisational change strategy. His fields of expertise include Microsoft, Google, AWS, VMware and Citrix.

Related