Blog › Security Architecture
Decisions that shape everything downstream: Zero Trust design in Microsoft 365, identity governance, and the architecture decision records that explain to the next engineer why it was built this way.
2 articles
Excluding emergency access accounts from Conditional Access doesn't exempt them from Microsoft's mandatory MFA. Check the method, the exclusions and the alert.
Read more →Six Active Directory defaults still shipping in most domains, each mapping to a named 2026 attack: LAPS, NTLM signing, Kerberos, gMSA and machine quota.
Read more →Other topics
