Resources
Recent writing
Practical writing and reference material drawn from live Microsoft cloud engagements - the most recent notes from the practice.
Before you switch on Microsoft Copilot, fix oversharing
Microsoft Copilot inherits every permission your users already have. Here's why a data-governance and identity review should come before any AI rollout - and what a readiness roadmap actually covers.
Microsoft Secure Score is a starting line, not a finish line
Chasing a Secure Score number can lead teams to enable controls that look good on a dashboard but don't reduce real risk. A more durable approach treats Secure Score as one input to a hardening plan.
Guides
Free guides, straight to your inbox
The checklists and self-checks we work through with clients - cyber-insurance readiness, AI oversharing, ransomware recovery, Cyber Essentials, and VPN retirement. Give an email and we send it over.
Cyber-Insurance Readiness Checklist
The controls insurers ask about at renewal - each one mapped to the Microsoft 365 or Microsoft Azure setting that delivers it, and to the proof it happened. Work through it 60-90 days before your date, not the week the form lands.
Get the guideCyber Essentials Self-Check
The five control areas in plain English, the questions that most often fail a first submission, and what each one maps to in Microsoft Intune, Microsoft Entra ID, and Microsoft Defender.
Get the guideRansomware Restore-Proof Checklist
What an insurer means by immutable, why retention is not recoverability, and what a restore test has to produce before it counts as evidence - mapped to Microsoft 365 Backup and Azure Backup.
Get the guideAI Oversharing Self-Check
Sixteen questions that reveal whether AI - Microsoft Copilot, ChatGPT, Claude, or an internal agent - would surface data nobody meant to share. Run it before you switch on, not after.
Get the guideVPN Retirement Readiness Checklist
Retiring a virtual private network (VPN) is an inventory problem before it is a technology problem. What still depends on the tunnel, what replaces it, and the cutover sequence that decides whether this lands on a date.
Get the guideGet started
Find out where you stand, free
Most engagements start with a no-cost posture audit against the baselines that matter to you. If a fixed-fee roadmap is the right next step, we'll say so - and if it isn't, we'll say that too.