Benchmark your Microsoft 365 governance and AI readiness.
The teams most confident in their governance reported the most exposure incidents in our study. This benchmark trades the confidence for estate and AI governance scores plus where each lands against teams like yours.
12 QUESTIONS · SKIP ANYTHING · PEEK AT RESULTS ANYTIME
93%
Are confident their governance framework can support AI responsibly
29%
Have had AI expose sensitive data it shouldn’t have had access to
10%
Had their governance workload decrease after deploying AI. See what they’re doing differently.
See ShareGate
in action
The hands-off way to manage Microsoft 365 sprawl, security, and governance at scale.
What is the Microsoft 365 Governance Index?
The M365 Governance Index scores two things separately: how well you run your estate and whether anyone can say what AI is reaching inside it. 12 questions give you both scores, your position against the IT pros in our 2026 studies, and the gaps worth closing first. It’s free, and there’s nothing to connect.
Tell us about your tenant
Answer questions about things like your region, industry, and company size. This decides who you're measured against, so your position reflects teams working under the same constraints, not a global Microsoft 365 average.
Answer 12 governance questions
These questions are about how you govern your tenant in general and for AI. Skip anything you're not sure about. You can change any answer afterward and watch your score move.
See where you land
Get governance scores for your tenant and AI, your position on the grid, and how you compare to teams in your industry. You'll also get three gaps worth closing first, based on what separated teams with fewer AI exposures.
Built on research. Backed by an MVP.
Your scores are benchmarked against two independent studies fielded in 2026.
Your estate governance maturity is scored against a survey of 943 IT pros in the US, Canada, UK, Germany, France, Japan, and Australia. While your AI governance readiness is scored against a separate survey of 851 IT leaders in the US, UK, Canada, France, Germany, the Netherlands, and Ireland.
The two are never combined. Each score is compared only against the study it came from. Both studies are published in full in The State of Microsoft 365 2026.
The dimensions, scoring, and maturity bands of the Index was built by Microsoft MVP Richard Harbridge.
Frequently asked questions
Twelve questions produce two scores out of 100, one for estate governance maturity, one for AI governance readiness. The Index score is the average of the two. Each score is compared only against the study it came from. The two samples are never blended.
Ten dimensions, five on each axis. Estate governance maturity covers visibility, tenant control, incident resilience, cloud footprint, and governance posture. AI readiness covers AI exposure, AI ownership, AI maturity, AI cleanup, and AI monitoring. Each dimension is scored separately and compared against the study average and against teams in your industry.
Each axis runs 0 to 100 and falls into four bands: Reactive, Developing, Managed, and Optimized. The band and the percentile answer different questions. The band tells you whether your practice is adequate on its own terms. The percentile tells you whether a gap is yours or the whole category's.
Partly. AI governance readiness measures how prepared your tenant is for Copilot and other AI tools—whether AI has already surfaced something it shouldn't, whether anyone owns AI governance, and whether AI usage is monitored. The Index also scores the estate underneath, because Copilot inherits whatever permissions are already there. A Copilot readiness check that ignores the estate misses where most of the exposure comes from.
Microsoft Secure Score rates your security configuration against Microsoft's recommended controls, based on settings it reads in your tenant. The M365 Governance Index measures practice rather than configuration—who owns governance, how lifecycle is handled, whether problems get caught by monitoring or after the fact—and compares you against what other IT teams report doing.
Secure Score tells you which settings to change. The Index tells you where your operating model sits against the field.
Microsoft Purview is a set of tools for data governance and compliance—retention, sensitivity labels, DLP, eDiscovery. The Index doesn't assess your Purview configuration. It measures the governance practice around it: whether anyone owns AI governance, whether sharing and access get reviewed on a cadence, whether issues surface through monitoring or after the fact.
Purview gives you the controls. The Index tells you whether the practice around them holds up.
Microsoft 365 admins, IT managers, and IT directors responsible for governance, particularly the ones now being asked about Copilot and AI.
The studies behind it sampled 1,794 IT leaders across nine countries, so the comparison holds for mid-market and enterprise tenants. You don't have to be the person who fixes the gaps. Plenty of people run it to show someone else where the gaps are.
Get a number you can defend. And three fixes that actually move it.
