In this episode, we dive into Microsoft’s Zero Trust Assessment - an open-source, automated tool that scans hundreds of Entra ID and Intune settings against NIST, CISA, CIS, and Microsoft’s own internal baselines. Discover how it aligns with the Secure Future Initiative, delivers actionable remediation, and turns Zero Trust from theory into measurable reality. Perfect for CISOs, SecOps teams, and anyone tired of spreadsheet audits.

Key Takeaways:

• The Pain of Manual Zero Trust Audits
• What the Zero Trust Assessment Actually Does
• Why automate your security assessments

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest.

Some of the Microsoft product features and update we covered:

• Key Microsoft Entra, Intune and Defender features and updates
• Lots of Azure changes and new features

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

In this episode, Alan and Sam drive into the importance of classifying data in an organisation. Alan goes through the capability in Purview to tag files and encrypt them. Here are a few things we covered in this episode:

• Why is it important to classify data in an organisation
• How can Purview help with the applying labels to data
• How to get started and the process for getting users to adopt the process
• How is the Purview capability licensed

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

In this episode, we dive into three key Cloud Workload Protection Platform (CWPP) offerings within Microsoft Defender for Cloud: Defender for Resource Manager, Defender for Key Vault, and Defender for APIs. Our Q&A format explores how these tools safeguard Azure environments against sophisticated threats, from management layer exploits to API vulnerabilities. Key Takeaways:

• Defender for Resource Manager monitors and protects against suspicious operations in Azure's management layer.
• Defender for Key Vault adds native threat protection to detect anomalous access to secrets and credentials.
• Defender for APIs provides full lifecycle security for APIs in Azure API Management, including inventory, posture recommendations, and runtime threat detection.
• These plans integrate seamlessly into Defender for Cloud's broader CNAPP framework for multi-cloud and hybrid protection.

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest.

Some of the Microsoft product features and update we covered:

• Key Microsoft Entra, Intune and Defender features and updates
• Lots of Azure changes and new features

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

Alan and Sam discuss the topic of DLP and how Purview can help audit policy matches and provide preventions. Aland goes though the range of capability and data sources that can be integrated with Purview DLP and some of the preventative actions. Some of the areas we also covered:

• What is Data Loss Prevention and why is it important?
• What capability does Purview DLP have?
• How do you get started with DLP
• How is it licensed?

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

This week, Alan and Sam talk about new features and services that have gone into Public Preview or General Available status in the last month. We dive into a couple of these updates that peaked our interest.

Some of the Microsoft product features and update we covered:

• Key Microsoft Entra, Intune and Defender features and updates
• Lots of Azure changes and new features

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

In this episode, we dive into Microsoft Defender for Storage, a key component of Microsoft Defender for Cloud. We break down its features for threat detection and malware scanning, discuss real-world benefits, and touch on pricing considerations.

We cover:

• Introduction to Defender for Storage: Overview of its role in Microsoft Defender for Cloud and its importance for securing Azure storage workloads.
• The Threat Landscape: Discussion of current threats to cloud storage, including malware uploads, unauthorized access, and data breaches.
• Core Features of Defender for Storage:
  • Activity Monitoring: Analyzing access patterns to detect suspicious activities without performance impact.
  • Malware Scanning: Real-time file scanning using Microsoft Defender Antivirus.
  • Sensitive Data Threat Detection: Using Microsoft Purview to identify and protect sensitive information.

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript