Master Conditional Access with a Zero Trust, persona-based approach. Learn how to structure policies, avoid security gaps, and keep everything organised with clear naming conventions. From discovery workshops to practical use cases, this guide helps you design scalable, secure policies that work in the real world.

Conditional Access Essentials: Naming conventions, personas, emergency access & design process

Aug 199 min read

Common mistakes you may be making with Data Loss Prevention

Mar 1426 min read

Microsoft Purview permission guide

Feb 1312 min read

Common mistakes you may be making with your sensitivity labels

Nov 25, 202414 min read

FEATURED POST

WELKA WONDERS...

Diagram showing four eligible members linking to "PIM for Groups," which connects to Microsoft Entra ID roles and Azure roles. Arrows indicate flow.

How to Use PIM with RBAC Roles: Purview, Exchange, and More

Discover how to use PIM with RBAC roles to provide just-in-time access for users. Learn setup for Purview, Exchange, and more, plus the pros, cons, and gotchas.

7 days ago9 min read

Hands typing on a laptop with code on screen in a dimly lit room. A blurred window view in the background creates a focused, techy mood.

How to Export Microsoft Purview Permissions (RBAC Roles) Easily

I was recently asked if I knew a way to export Microsoft Purview RBAC roles with members. I couldn’t find a ready solution, so I wrote a PowerShell script. You can get it from my new GitHub Purview repository. Perfect for auditing and managing Purview permissions easily!

Nov 32 min read

Physical Security Cards with an NFC reader to sign in securely to a laptop and access a building.

Physical Security Cards: Phish-Resistant Authentication

Explore how physical security cards combine passwordless login and building access, offering secure, simple authentication for modern workplaces.

Oct 214 min read

A blog explaining how to safely transition Conditional Access policies in Entra ID from report-only mode to enforced mode using ring-based rollouts, What If tool, Policy Impact, Log Analytics, Workbooks, and KQL.

Conditional Access Essentials: From Report-Only to Enforced Mode

Moving Conditional Access policies from report-only to enforced mode can secure your environment - or lock everyone out. This post walks through safe rollout strategies using ring deployments, the What If tool, Policy Impact, Log Analytics, Workbooks, Gap Analyzer, and real KQL queries. Learn how to monitor, test, adjust and confidently turn policies on without breaking access or business operations.

Oct 1410 min read