SMS codes were a reasonable second factor ten years ago. Today they are the weakest method most tenants still allow, open to SIM swapping, phone number porting and simple phishing pages that ask for the code. Moving
When a staff member calls to say their laptop was stolen from a car or left on a train, the first hour matters more than anything you do the following week. A written lost laptop Intune response
A USB stick is still one of the easiest ways for data to leave a business and for malware to walk in. Intune USB device control lets you decide, per device and per user, whether removable storage
Many businesses still treat the VPN as their remote access security plan. For Microsoft 365 that model no longer fits: email, Teams, SharePoint and OneDrive live in the cloud, so tunnelling traffic back to the office adds
Passwords plus a push notification stopped being enough once attackers started running phishing kits that relay MFA in real time. Passkeys in Microsoft Entra ID fix that problem at the root, because the credential is bound to
Joiners, movers and leavers are where identity mistakes happen. A new hire waits two days for access, a promoted manager keeps their old finance permissions, a leaver's account stays enabled for a week. Entra lifecycle workflows automate
Most businesses need to share files with clients, vendors and partners. The problem is not sharing itself, it is sharing that nobody can see or control. Getting your SharePoint external sharing settings right means people can still
Intune enrollment restrictions decide which devices are allowed into your tenant in the first place. Get them wrong in one direction and a staff member's home gaming PC ends up fully managed, receiving your apps and counting
Microsoft 365 Copilot does not create new access to your data. It uses the access people already have, and it is very good at finding things. That makes Copilot oversharing permissions the first thing to fix before
Every Conditional Access policy you turn on changes how real people sign in. Conditional Access report-only mode lets you see exactly what a policy would do to those sign-ins before it does it. Used properly, it is