Perspective
If security is hard, people will work around it
Security that ignores the people using it doesn’t make you safer. It makes people find workarounds. Why we start with the user, and what that means in practice.
·
5 min read
Explainer
NIS2 and DORA: what they mean for Wi-Fi access and certificates
NIS2 and DORA don’t mention Wi-Fi, but they require unique identities, access control and certificate management. Here’s what that means for your network.
·
8 min read
Explainer
From backlog to burndown: running a remediation project in Azure
A list of four hundred findings is not a plan. Here's how to turn a governance backlog into something a team can finish, and prove it's finished.
·
5 min read
Explainer
Level 1, 2, 3: building a governance baseline you can actually reach
Security benchmarks start you at hundreds of failures. A ladder of levels gives your team a target it can finish, and a trend line that proves progress.
·
5 min read
Explainer
Exceptions are part of governance, not a failure of it
Every real Azure estate has resources that break the rules on purpose. How you record those deviations decides whether your dashboard means anything.
·
5 min read
Perspective
Azure Advisor tells you what’s wrong. It doesn’t tell you what you’ve decided.
Most Azure tenants already have free tools that find problems. Most organizations still can’t answer whether they’re in good shape. Detection was never the hard part.
·
4 min read
Perspective
IT tools should remove work, not add it
Most insecure IT setups aren’t caused by ignorance. They exist because the secure option was too much work. That’s the problem we build our products to fix.
·
4 min read
Explainer
Certificates vs. passwords: how certificate-based Wi-Fi works
Certificate-based Wi-Fi (EAP-TLS) gives every device its own identity, with nothing to phish or type. Here’s how it works and what you need.
·
4 min read
