Compliance
Obsolete systems in Active Directory: inventory, isolate and keep an exceptions register
Spotting end-of-support operating systems from the operatingSystem attribute, gauging the risk they pose to the domain, isolating them and documenting every exception.
ComplianceGDPR and Microsoft 365: the practical checkpoints
Data processing terms, EU Data Boundary, data subject requests, retention, access logging and transfers: what to check in a Microsoft 365 tenant.
ComplianceInsider Risk Management in Purview: use cases, pseudonymisation and the French framework
Departing employees, data leaks, pseudonymisation, works council consultation and impact assessment: how to start with Insider Risk Management in a useful and defensible way.
ComplianceGuest accounts: lifecycle, inactive guests and access reviews
Guests pile up and never leave. Invitation settings, directory access restrictions, finding inactive guests and access reviews to keep their lifecycle under control.
ComplianceISO 27001:2022: the Annex A controls that rely on Microsoft 365, and the evidence auditors expect
Access control, authentication, logging, data leakage: which Annex A controls rely on Microsoft 365 and which evidence to prepare for the certification auditor.
ComplianceeDiscovery in Purview: controlling an investigation tool as powerful as an administrator
eDiscovery roles, cases, holds, separation of duties and auditing the searches themselves: how to use eDiscovery for internal investigations without creating a new risk.
ComplianceNIS2 and identity: turning the directive's requirements into Entra ID and Microsoft 365 controls
MFA, privileged access, logging, incident handling: what NIS2 expects regarding identity, and how to demonstrate it in practice in a Microsoft environment.
ComplianceOrphaned and inactive SharePoint sites: regaining control of the data lifecycle
Why sites with no owner and no activity are a risk, how to find them, and how to organise ownership, archiving and deletion without losing data that still matters.
CompliancePower Platform governance: environments, DLP policies and maker inventory
A default environment open to everyone, unrestricted connectors, orphaned flows: how to regain control over Power Apps, Power Automate and Copilot Studio.
ComplianceThe Microsoft 365 unified audit log: verify it, search it, keep it
Enablement, licence-based retention, searching in Purview and PowerShell, the MailItemsAccessed event and export: making real use of the unified audit log.
ComplianceMicrosoft Purview DLP: getting started without drowning your team in alerts
Sensitive information types, policy locations, simulation mode and policy tips: the fundamentals for rolling out Microsoft Purview DLP gradually and under control.
ComplianceSensitivity labels: a rollout that protects data without paralysing users
A short taxonomy, encryption and its side effects, default and automatic labelling, container labels and user training: the keys to a successful Microsoft 365 rollout.
ComplianceEntra ID logs: why 30 days of retention is not enough to investigate an incident
Default retention, diagnostic settings, non-interactive and service principal sign-ins: which Entra ID logs to export before you actually need them.
ComplianceGuests and external sharing in Microsoft 365: regain control without blocking collaboration
Invitation settings, SharePoint sharing, anonymous links, access reviews: control external access in Microsoft 365 and prove it.
ComplianceRetention and litigation hold in Microsoft 365: it is not a backup
Retain or delete, retention labels or policies, the Preservation Hold library and eDiscovery holds: understanding Microsoft 365 retention without mistaking it for backup.
ComplianceAccess reviews for privileged roles: from box-ticking to audit-ready evidence
Scheduling, choosing reviewers, auto-applying results and the evidence auditors expect: how to run access reviews in Entra ID that actually reduce risk.
ComplianceStale accounts in Active Directory: identifying them reliably and cleaning them up
Dormant user and computer accounts: reading lastLogonTimestamp correctly, disabling before deleting, handling service accounts and keeping evidence for audits.
ComplianceActive Directory auditing: advanced audit policy and the events worth watching
Configuring advanced audit policy on domain controllers, choosing the key events, sizing logs and forwarding them to a SIEM: the foundation of Active Directory detection.
ComplianceJoiners, movers, leavers: bringing the Entra ID account lifecycle under control
Stale accounts, disabled but licensed users, orphaned guests and lifecycle workflows: how to evidence a leaver process that satisfies ISO 27001 and NIS2.
ComplianceDORA and Microsoft 365: what evidence can you produce on your cloud environment?
Applicable since 17 January 2025, DORA requires financial entities to demonstrate control of ICT risk. Microsoft 365 and Entra ID sit right at the centre of it.