All work

Policy 01Software development & IT servicesSecurity & Compliance

Enterprise identity security and Conditional Access

Policy path. Signal: Engineer signs in from an unmanaged endpoint. Decision: Conditional Access evaluates user, device and app. Controls: Grant Compliant, managed device; Require MFA and device trust for engineering workflows; Block Legacy authentication. Outcome: Unmanaged endpoint exposure reduced; legacy authentication retired.

If The challenge

Engineering teams accessed corporate resources from unmanaged endpoints, legacy authentication remained available, and privileged administrative accounts needed stronger separation.

Then The solution

Redesigned Conditional Access, planned and implemented a staged retirement of legacy authentication, strengthened MFA, and introduced device-trust requirements for engineering workflows.

Result Outcomes

  • Reduced unmanaged endpoint exposure
  • Strengthened privileged-role controls
  • Documented an identity security baseline
  • Retired legacy authentication without reported service disruption

Related evidence

All work

Policy 02Multi-location professional services

Identity protection and email domain security

If
MFA enforcement and privileged access required improvement, while email authentication records needed strengthening…
Then
Implemented staged Conditional Access improvements, addressed legacy authentication dependencies, and strengthened…
Result
Standardised MFA enforcement and privileged-access boundaries
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • SPF

Policy 03Healthcare & diagnostics

Secure access for shared clinical and laboratory workstations

If
Shared workstations used across shifts in clinical and laboratory settings created challenges for sensitive application…
Then
Designed Conditional Access for shared-device scenarios, including session restrictions, reauthentication for sensitive…
Result
Strengthened access restrictions for shared endpoints
  • Conditional Access
  • Microsoft Entra ID
  • MFA
  • Session controls

Policy 04Financial services

Identity governance and audit logging

If
Legacy authentication, inconsistent MFA, permanent administrative privileges and insufficient audit visibility limited…
Then
Implemented staged identity security improvements, role-based Conditional Access, stronger MFA, a role structure ready…
Result
Reduced legacy authentication exposure
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • Privileged Identity Management

Contact

Let's talk about secure Microsoft cloud work.

↑↓ to move · Enter to open · Esc to close