The technology is ready. The bigger question is whether your organisation is.

The arrival of Microsoft Cowork marks a significant shift in how organisations will use AI. Up until now, most AI conversations have focused on assistance — helping write an email, summarise a meeting, analyse a document or generate content. The human remained firmly in control of the process and ultimately responsible for the outcome.

Cowork changes that model. We are now entering the era of agentic AI — where systems can execute tasks on behalf of people, interact across multiple systems, analyse large volumes of information, make recommendations and complete work with minimal human intervention.

Over the past twenty years I have worked with organisations implementing SharePoint, Microsoft 365, information management frameworks, governance models and digital workplace solutions. One thing I have learned is that technology rarely fails because of technology. It fails because organisations underestimate the importance of governance, structure, ownership and accountability.

AI is about to expose those weaknesses at a scale we have never seen before.

The Conversation We Should Be Having

Most discussions about Copilot and Cowork focus on features, licensing and costs. These are important considerations — but they are not the strategic questions leadership teams should be asking.

The real questions are:

• What work should be performed by AI?
• What work should remain human?
• Who owns AI governance?
• How much autonomy should AI be given?
• What controls need to exist before AI can operate safely?
• How do we ensure AI works within organisational boundaries?

For decades, organisations have been built around people, processes and technology. AI introduces a fourth element that sits somewhere between technology and labour. It is neither a traditional system nor a traditional employee. It has the ability to access information, perform tasks and influence outcomes. That means organisations need a new framework for decision making.

The New Enterprise Framework: People, Technology, Governance and AI

As organisations adopt agentic AI, every decision should be evaluated across four dimensions. The challenge is achieving balance between all four.

Too much focus on technology without governance creates risk. Too much governance without innovation creates stagnation. Too much reliance on AI without human oversight creates accountability issues. The organisations that succeed will deliberately design how these four elements work together.

Why Information Management Has Suddenly Become Critical

For years, information management has often been viewed as a compliance exercise. Metadata, content types, retention schedules, governance frameworks and information architecture have not always been strategic priorities.

AI changes that completely. The effectiveness of AI is directly influenced by the quality of the information it can access.

Poor permissions, duplicate content, unmanaged sites, inconsistent metadata and unclear ownership all impact the quality of AI outcomes. This is why organisations should not be treating Copilot or Cowork as an AI project. They should be treating it as a governance and information management project supported by AI.

A Decision Framework For Copilot And Cowork

One of the most common questions I hear is whether everyone should receive Copilot licences or access to Cowork. The answer is no. Different tools solve different problems.

Copilot is best suited to people whose roles involve creating, analysing, communicating and consuming information — executives, project managers, consultants, business analysts, communications professionals and knowledge workers.

Cowork should be approached differently. Rather than assigning it broadly, assess whether the work itself is suitable for delegation. Before enabling Cowork, ask:

• Is the process clearly defined?
• Is the information trustworthy?
• Is the outcome measurable?
• Is the activity repetitive?
• Is there a clear return on investment?

Building Guardrails Into The Environment

One of the biggest mistakes organisations make is relying on policies alone. Policies are important, but they depend on people remembering them. Modern governance should be built directly into the environment.

When governance is embedded into the platform, users do not need to remember every rule. The environment itself helps guide behaviour and creates boundaries for both people and AI. This becomes even more important as agentic AI begins operating within Microsoft 365 environments.

Without answers to these questions, organisations risk implementing technology without the framework required to govern it effectively.

The Road Ahead

The organisations that gain the greatest benefit from AI will not necessarily be those with the largest AI investment. They will be the organisations with the strongest foundations.

Strong governance. Strong information management. Strong accountability. Strong leadership.

For years we have focused on helping people work with technology. The next challenge is designing organisations where people, technology, governance and AI work together in a deliberate and sustainable way.