Protect the tenant
Zero Trust, Conditional Access, Defender, Microsoft Purview and the practical work of keeping a Microsoft 365 tenant secure and compliant.
41 field guides
Purview DLP or session controls: which layer, signal and user action each one governs, the documented ceilings, and what happens when both cover the same event.
10 September 2026 · 39 min read
Retention policy, retention label or record in Microsoft Purview: what each one does, where the scope traps are, what becomes irreversible, and how to prove it worked.
28 August 2026 · 42 min read
Compare Standard, Strict and custom Defender for Office 365 policies: six setting differences, precedence, scoping, licensing and configuration drift.
27 August 2026 · 38 min read
A decision matrix for Microsoft Purview: which problem sensitivity labels solve, which DLP solves, which retention solves, and the traps in between.
11 August 2026 · 21 min read
Map NIS2 Article 21 to Microsoft 365 tools you already own: MFA, Defender, Intune, Purview, backup. Plus the 24/72-hour reporting reality and a 90-day plan.
13 July 2026 · 20 min read
Microsoft 365 Backup honestly reviewed: 10-minute restore points, 1-year retention cap, per-GB cost model, restore gotchas and when a third party still wins.
10 July 2026 · 19 min read
SharePoint OTP retirement is breaking external access now: find exposed guests, create Entra B2B accounts in bulk, fix Conditional Access before 31 August.
9 July 2026 · 18 min read
Move Microsoft Sentinel to the Defender portal before March 2027: unified RBAC, automation rule fixes, incident changes and a lean-team migration runbook.
8 July 2026 · 22 min read
Practitioner runbook for validating Microsoft Purview DLP policies before enforcement: Simulation, Audit, Block-with-override, Block, metrics, readiness checklist.
30 June 2026 · 23 min read
Practitioner runbook for the first 60 minutes after a compromised Microsoft 365 account: triage, containment, blast radius, evidence and communication.
30 June 2026 · 24 min read
The 25-check Microsoft 365 renewal review (2026): inactive users, over-assigned SKUs, Copilot + Agent 365 usage, NCE rules, per-licence evidence pack.
29 June 2026 · 22 min read
The 24-control Microsoft 365 Business Premium security baseline for 2026: SKU-aware checklist for SMBs, gaps vs E5, and a week-by-week rollout cadence.
15 June 2026 · 24 min read
The 30-check Microsoft 365 security assessment for SMBs (2026): identity, email, devices, data, monitoring and governance — with evidence pack and cadence.
11 June 2026 · 24 min read
2026 NIS2 framework for Microsoft 365 admins in SMBs: scope check, 10 Article 21 measures mapped to M365, gaps, 24h/72h reporting, governance.
9 June 2026 · 18 min read
2026 EU AI Act framework for Microsoft 365 admins: what the May Omnibus changed, Microsoft Purview mapping, gaps, and an interactive self-assessment.
3 June 2026 · 16 min read
2026 decision framework: Microsoft 365 Backup vs third-party tools. Scope, pricing, gaps, hybrid pattern, and when each makes architectural sense.
2 June 2026 · 13 min read
Interactive sensitivity labels decision builder for 2026. Design label taxonomies for Microsoft Purview, configure encryption and rights management, set up container labels for sites and teams, plan auto-labeling policies, align labels with DLP, prepare for Copilot, and roll out labeling with user adoption. Includes a 10-input scoring engine, baseline taxonomies, rollout phases, and 16 common labeling mistakes from real tenants.
13 May 2026 · 40 min read
Build a least-privilege Microsoft 365 admin role model using PIM, Conditional Access, break-glass accounts, scoped roles and regular access reviews.
12 May 2026 · 46 min read
Build a practical SharePoint external sharing policy covering tenant and site controls, guest access, anonymous links, sensitivity labels, DLP and Copilot risk.
10 May 2026 · 47 min read
Interactive Microsoft Defender for Office 365 policy builder for Microsoft 365 admins, Exchange Online admins and security teams. Design email security policies with a 7-input protection scoring engine, Standard vs Strict vs Custom decision framework, persona-based baselines for executives, finance, HR and customer-facing users, anti-phishing and impersonation recommendations, Safe Links and Safe Attachments guidance, quarantine workflow, Tenant Allow/Block List review, mail flow alignment, safe rollout phases, and 18 common Defender mistakes from real tenants.
8 May 2026 · 42 min read
Interactive Microsoft Purview DLP policy builder for Microsoft 365 admins and security teams. Design DLP policies with a 7-input risk scoring engine, baseline policies for Exchange, SharePoint, OneDrive, Teams and Endpoint, location-specific tuning guidance, safe rollout phases, policy naming conventions, sensitivity labels integration, Copilot readiness alignment, and 18 common DLP mistakes from real tenants.
7 May 2026 · 34 min read
Interactive Microsoft 365 licensing decision builder for IT admins. Compare Business Premium, E3, E5 and add-ons by scenario. Persona-based licensing, feature decision matrix, security and compliance licensing, Copilot readiness, and practical field-tested advice for 2026.
6 May 2026 · 71 min read
Interactive Conditional Access policy builder for Microsoft 365. Decision tool with six inputs, ten baseline policies, naming convention, phased rollout sequence, and field-tested advice from real deployments.
5 May 2026 · 42 min read
Score your Microsoft 365 tenant across 40 checkpoints in four pillars: identity, device, data protection, and operations. Interactive assessment based on real tenant reviews — not Secure Score.
4 May 2026 · 21 min read
Right-size your Zero Trust implementation for your org. Phased SMB approach, enterprise framework, complexity thresholds, what not to copy, and recommendations by org size.
4 May 2026 · 15 min read
How Conditional Access evaluates identity, device, and session signals. Authentication strength, compliance, sign-in frequency, CAE, token protection, and policy stacking.
4 May 2026 · 15 min read
Every Zero Trust deployment has gaps. BYOD browser access, legacy apps, IoT devices, VPN bypass, service accounts, and guest lifecycle. Honest assessment with mitigations.
4 May 2026 · 14 min read
How Conditional Access evaluates identity, device, and session signals. Authentication strength, compliance, sign-in frequency, CAE, token protection, and policy stacking.
3 May 2026 · 18 min read
Zero Trust is everywhere — in vendor pitches, compliance checklists, and security strategies. But most organisations treat it as a product to buy rather than a model to implement. This article cuts through the marketing: what Zero Trust actually is (and is not), the six technology pillars mapped to your Microsoft 365 stack, why Conditional Access is the policy engine that connects everything, why MFA alone does not equal Zero Trust, and what the 2026 "All resources" enforcement change means for your tenant. Includes a visual mental model and a practical framework for getting started.
30 April 2026 · 16 min read
Build a Privileged Access Workstation for Microsoft 365 with Intune, Conditional Access, PIM, WDAC, and Windows LAPS. Practical PAW guide for SMB and mid-market tenants.
22 April 2026 · 21 min read
The new Password Protection page in Microsoft Defender XDR consolidates password risk across Active Directory, Entra ID and Okta into four tabs — leaked credentials, exposed passwords, weak policies and hygiene gaps. Currently in Preview.
14 April 2026 · 8 min read
A practical guide to Microsoft 365 Secure Score — how to read it, which recommended actions genuinely reduce risk, which to deprioritise, and how to use it as an operational tool rather than a vanity metric.
8 April 2026 · 17 min read
Learn how to configure Microsoft Purview Insider Risk Management from scratch. This guide covers licensing, prerequisites, privacy settings, policy templates, indicators, alert triage, and case investigation.
7 April 2026 · 16 min read
Microsoft Defender for Office 365 Plan 1 is being added to Office 365 E3 and Microsoft 365 E3. See what changes, what Plan 1 includes, and the key settings to configure first.
31 March 2026 · 11 min read
Learn how to connect Microsoft Purview DLP with Power Automate to trigger automated responses to policy violations across Exchange Online, SharePoint, OneDrive, and Windows devices.
29 March 2026 · 14 min read
A practical Microsoft 365 security checklist for SMBs using Business Premium. Prioritize identity, Conditional Access, email security, endpoints, and monitoring to reduce real tenant risk.
20 March 2026 · 8 min read
Security Drift silently weakens Microsoft 365 email security. Learn how Configuration Analyzer detects misconfigurations and restores Microsoft baselines.
17 February 2026 · 6 min read
A complete, practical guide for SMBs to build and deploy secure Conditional Access policies in Microsoft Entra ID. Includes Zero Trust baselines, step-by-step configuration, planning strategy, and real-world best practices.
3 December 2025 · 7 min read
Learn how to configure Microsoft Purview Data Loss Prevention (DLP) for small businesses using Microsoft 365 Business Premium. A clear, practical, step-by-step guide to protect sensitive data, meet compliance, and secure your SMB environment with minimal disruption.
20 November 2025 · 6 min read
Learn how to require MFA for all users using Conditional Access in Microsoft Entra ID. A practical Zero Trust guide with setup steps, best practices, and pitfalls to avoid.
15 November 2025 · 6 min read
Discover how Microsoft 365 Business Premium empowers small businesses with enterprise-grade security and compliance. Learn about new Defender and Purview add-ons that bring identity protection, DLP, and endpoint defense — all for just $15 per user per month.
7 November 2025 · 2 min read