Blog
-
Microsoft ISOC: Where Defender and Sentinel Are Heading
Microsoft has announced one of its biggest shifts in security operations strategy in years: the Integrated Security Operations Center (ISOC) in Microsoft Defender. The pitch…
-
Microsoft Purview DSPM: The Data Security Tool Most Organisations Actually Need
If you spend your days in Microsoft 365 security, you’ll recognise this pattern. Most organisations think they understand their data. They don’t. They know where…
-
Moving from Entra Connect Sync to Cloud Sync: what you actually need to know before you touch anything
Let’s start with the headline, because it changes the tone of the rest of this post: Microsoft confirmed in April 2026 that Entra Connect Sync…
-
Intune Enterprise Application Management: is it actually worth the hype?
Microsoft quietly folded several Intune Suite features into Microsoft 365 E5 licensing a while back, and most customers I speak to still haven’t noticed. I…
-
Cloud PKI in Microsoft Intune: Finally, Certificates Without the On-Prem Headache
In my last post, I talked about how a chunk of what used to live only in the Intune Suite has quietly become part of…
-
Deploying Microsoft Intune Endpoint Privilege Management: What Actually Works
Most organisations I work with have been chasing least privilege for years. Strip out local admin rights, shrink the attack surface, limit what a compromised…
-
Microsoft 365 E5 Just Got Considerably More Useful for Endpoint Security
If you’re running Microsoft 365 E5, go and check your tenant. There’s a good chance you’re now licensed for tools you’ve been meaning to buy…
-
Securing AI in Microsoft Cloud Tenants: What Actually Matters
AI is everywhere in the Microsoft stack now. Copilot for Microsoft 365, Copilot Chat, Azure OpenAI, Fabric, Security Copilot, custom agents built in Azure AI…
-
Deploying DLP in Microsoft Purview: What Actually Works
Data protection sounds simple until you sit in front of the Purview admin centre with a blank policy and a business that hasn’t slowed down…
-
Configuring and Tuning Microsoft Purview Insider Risk Management Policies
Insider threats are often among the hardest security risks to detect. Unlike external attackers, insiders already have access to systems, applications, and data. Whether the…