Copilot Studio 1 wk POC

What’s included (fixed scope) • Discovery workshop (2 hours): identify and prioritize use cases; select 1 for the POC • Generative Answers configuration: set up a generative answers experience grounded in agreed knowledge sources (e.g., approved websites, SharePoint, Dataverse documents, or other supported sources) to improve response relevance and reduce manual authoring • Up to 3 manual topics (NLU-based) aligned to the selected scenario • Up to 2 Power Automate flows to demonstrate automation value (using agreed standard connectors; Dataverse-focused if required) • Customized fallback experience (e.g., guided escalation and/or generative answers behavior) • Showcase demo session for stakeholders + Q&A • Implementation roadmap (30/60/90-day approach, recommended architecture, governance considerations)

Deliverables • Demo-ready Copilot Studio agent (POC environment) • Brief use-case definition + test scenarios • Configuration summary (topics, knowledge sources, flows, fallback) • Roadmap for production implementation

Prerequisites Customer provides Copilot Studio environment access, required licenses/permissions, and access to chosen knowledge sources.

2. Azure Cloud Security: 1 week Security Assessment (HK$25,000)

Overview Get a clear, data-driven view of your Azure security posture in one week. We assess your in-scope subscriptions using Microsoft Defender for Cloud posture management and Secure Score, then deliver a prioritized remediation roadmap aligned to the Microsoft cloud security benchmark (MCSB) recommendations surfaced in Defender for Cloud.

What we do (1-week fixed scope) • Kickoff + scoping (60 min): confirm subscriptions, critical workloads, and risk priorities • Posture data collection: review Defender for Cloud Secure Score, security controls, and recommendations (including unhealthy resources and key exposure areas) • Targeted configuration review (high level): prioritize common cloud risks (identity/access patterns, network exposure, storage/database protection indicators, logging/monitoring fundamentals) based on available Defender for Cloud signals • Analysis + prioritization: rank actions by risk reduction and practicality; identify quick wins vs. mid-term initiatives

Deliverables • Azure Security Assessment Report (PDF): executive summary, key risks, and top findings • Secure Score baseline + top improvement actions with clear remediation guidance • 30/60/90-day remediation roadmap (quick wins + mid-term plan • Findings playback session (60 min) with Q&A

Prerequisites Reader access to in-scope subscriptions and visibility into Defender for Cloud (Security posture/Recommendations).

Notes This is an assessment (not implementation). Remediation can be delivered as a follow-on sprint.