leadforensics

AI-Powered Phishing Is Here: Why Your Staff Are Still Your First Line of Defence

AI cyber threats

Leadership at Midlands businesses is asking about Copilot and similar AI tools, and staff are often trying them out already, without approval. That puts someone in IT in the position of working out what’s safe to use and where permissions need tightening, on top of the day job. Co-managed IT gives an in-house team extra hands and specific technical knowledge to work through that list, without handing the systems over to someone else.

Why AI adoption is adding pressure to in-house IT teams

Most Midlands businesses aren’t chasing a formal AI strategy. Staff are already trying tools like Copilot and free chatbots for everyday tasks, without anyone approving them first. Nobody’s checked what those tools can see or where the data they’re given goes.

For an in-house IT team, that’s a new item on an already full list. Someone has to work out which tools are safe to use and whether Microsoft 365 permissions need tightening as a result. The government’s Cyber Security Breaches Survey 2025/2026 found that around a third of UK businesses (31%) are using, adopting or considering AI, and only around a quarter of that group (24%) have cyber security practices in place to manage the risks. Closing that gap takes time most in-house IT teams don’t have spare, on top of the helpdesk and everything else already on their plate.

 

Why your in-house IT team doesn’t need a full-time AI specialist

Bringing in a dedicated AI or security specialist looks like the obvious fix, but it’s a big commitment for one problem. Recruitment takes months, and salaries for that kind of skill set are high. Once the immediate list of AI questions is dealt with, that person needs something else to do.

Most in-house IT teams already have solid technical skills. What’s usually missing is a few hours a month of expertise or extra capacity during a busy stretch. That’s a different problem to solve, and it doesn’t need a full-time answer.

 

Where co-managed IT fits alongside your in-house IT team

Co-managed IT means an external partner works alongside your existing team, without replacing it. Your team keeps ownership of priorities and the day-to-day running of your systems. The external partner adds skills or extra hands when things get busy.

Our own co-managed IT support works this way. Your IT manager still sets the direction and makes the calls. We fill in around that, whether it’s Microsoft 365 administration or a specific AI project that needs focused attention. There’s no long-term contract, and your team stays in control of the systems it already knows well. Co-managed IT support extends in-house IT support so your team keeps its remit intact.

 

What co-managed IT support covers for AI adoption

For AI specifically, that support tends to cover four areas.

Assessing AI tools before rollout

Not every AI tool is worth the risk it introduces. The NCSC’s guidance for managers and senior executives sets out questions worth asking before a tool is adopted, including what happens to the data it’s given and whether a supplier can answer for their own security. A co-managed partner can work through that kind of assessment against your existing policies before staff start relying on a tool day to day.

Reviewing Microsoft 365 security and permissions

Tools like Copilot only ever show a user what they already have permission to see. The catch is that most Microsoft 365 environments have accumulated broad SharePoint permissions and forgotten external shares over the years, so a co-managed partner can review who has access to what and tighten it up before AI makes old oversharing easy to surface.

Preparing Microsoft 365 and Copilot environments

Microsoft’s own guidance on Copilot readiness recommends adjusting SharePoint and OneDrive sharing settings before rollout, since Copilot inherits whatever permissions are already in place. A co-managed partner can carry out that groundwork, alongside checking licensing, before anyone in the business starts using the tool.

Ongoing AI and Microsoft 365 support

Once a tool is approved, someone needs to manage updates and keep an eye on how it’s being used. That ongoing work can sit with a co-managed partner, which frees the in-house team to focus on the rest of the business.

 

Co-managed IT support that scales with your AI use

AI use in most businesses starts with one or two tools and grows from there. Co-managed support can grow at the same pace. Many businesses start with a single piece of work, such as a Microsoft 365 permissions review or an assessment of one tool, then add ongoing support once they know what they need.

That keeps costs proportionate to what’s happening in the business, and it means your in-house team stays in control of how much outside support comes in and when.

 

What a co-managed IT relationship looks like in practice

A working co-managed IT arrangement is quiet in day-to-day operation. Your in-house IT team continues to run day-to-day support and holds the relationships with the business. A partner sits behind them, on hand for the specific things it doesn’t make sense to build in-house, such as Microsoft 365 tenant hardening, Copilot readiness work, or a security review of a new AI tool being considered.

The rhythm tends to be a mix of standing time each month for planned work, plus availability for anything urgent that lands mid-cycle. Reporting stays with the in-house team, so leadership hears one clear voice on IT. Over time, the partner becomes an on-demand resource the team pulls in when specific projects or capacity gaps call for it.

If your team could use some extra capacity as you explore AI, we’d be glad to talk through where co-managed support could fit. We work with in-house IT teams across the Midlands, including IT support in Birmingham and IT support in Tamworth. Get in touch for a no-obligation chat about where your team’s gaps sit.

 

Frequently asked questions

Does co-managed IT mean losing control of our systems?

No. Your in-house team keeps ownership of decisions and system access. A co-managed partner works within that structure rather than replacing it, and any changes to permissions still go through your team.

How is co-managed IT different from fully outsourcing IT support?

Full outsourcing means an external provider runs your IT altogether. Co-managed IT adds skills or capacity around your existing in-house IT support team, so most day-to-day running stays where it already is.

Can co-managed IT support help specifically with AI tools like Copilot?

Yes. A co-managed partner can assess AI tools and review Microsoft 365 permissions before rollout, then support Copilot or similar tools once they’re live.

1732024282120
Neil Norton

Went to Birmingham City University and achieved his BSc. (Hons) from 1989-1992 in Industrial Information Technology.