Copilot Will Hand Your Receptionist The Expansion Plan

Copilot will hand your receptionist the expansion plan, if your folder permissions allow it.

Who can read your salaries, margins, client files and expansion plans? Think about everyone who changed roles, covered for someone or inherited access over twenty years.

In Episode 47 of The Digital Dilemma, I explain why "We've got Copilot, we're totally good" can create a false sense of security. I'm Nick Dreyfus. At twenty-three, two weeks into a new job, I opened the HR folder and could see what everyone earned.

The same problem showed up during a financial services firm's AI readiness review. The receptionist had access to the manager's expansion plans. She wasn't snooping. She didn't know the access existed. Neither did the people preparing to deploy Copilot.

Copilot respects the permissions you give it, including the ones your organization has forgotten. AI can make information much easier to find and connect. A folder that used to take hours of clicking to discover may now become part of an answer to a simple question.

For a CEO or CFO, that raises questions about confidential strategy, employee information, competitive advantage and client trust. Buying an AI license doesn't settle who should be able to see what.

We explore how this happens: IT handoffs, broad department groups, old archives and temporary access that stays forever. Somebody was trying to help. Years later, nobody remembers why access was granted or whether it still makes sense.

We examine two scenarios: an employee joining a competitor with years of accumulated access, and an attacker using a compromised employee account. Both show why access reviews, identity protection and activity visibility matter.

Here's what you'll take away:

• The "newspaper test" for separating everyday files from sensitive information.
• A green, yellow and red approach to reviewing what your team can access.
• Why "give her what Bob has" deserves a second look.
• How outdated folders and forgotten copies can complicate AI readiness.
• What to review when people change jobs, help another department or leave.
• Why an independent review can support your IT team and expose blind spots.
• Where assessment tools help, and where human judgment is still essential.

I also discuss the questions behind choosing an AI solution. Copilot and Fortify AI should be evaluated around the work you need done: connected business systems, model choices, guardrails, activity visibility and ongoing management. Check the capabilities and configuration of the solution you're buying. Every platform, including ours, depends on the permissions underneath it.

Have someone outside your organization review who can access your sensitive folders and ask why. Start with the files that would matter most if the wrong person read them. If you're already using AI, make that review part of the work you're doing now.

This episode is for CEOs, CFOs, owners and nonprofit leaders at organizations with 25 or more employees, especially teams of 50 to 1,000. Bring it to your next leadership meeting and ask: do we know who can read our expansion plan?

Want an outside set of eyes? Let's talk about AI readiness, access permissions and what your business needs.

Book a conversation with Nick Dreyfus:
https://meetings-na2.hubspot.com/ndreyfus

Fortify AI and AI readiness:
https://i-nett.ai

i-NETT managed IT and cybersecurity:
https://www.i-nett.com

Nonprofit technology resources:
https://nonprofit.i-nett.com

Follow The Digital Dilemma for practical AI and cybersecurity conversations for business leaders.

Your team focuses on growth. Our team makes that happen.