Microsoft Copilot Deployments Delayed Over Security Concerns

CoreView’s State of Microsoft 365 Security and Governance 2026 survey reports that two-thirds of organizations have delayed or cancelled Microsoft Copilot rollouts over fears the AI assistant could surface confidential SharePoint data and expose longstanding access/permission issues; C-level executives are most likely to pause deployments. The report links this hesitation to past Microsoft 365 security incidents caused by missing controls (administrator MFA, privileged access management, configuration tamper detection) and recommends applying PAM to user and Copilot accounts and reviewing SharePoint application permissions to reduce data-exfiltration risk.