All work

Policy 04Financial servicesSecurity & Compliance

Identity governance and audit logging

Policy path. Signal: Administrator and user sign-ins. Decision: Role-based Conditional Access. Controls: Require Stronger MFA by role; Block Legacy authentication; Action PIM-ready roles and unified audit logging. Outcome: Better privileged-access governance and audit visibility.

If The challenge

Legacy authentication, inconsistent MFA, permanent administrative privileges and insufficient audit visibility limited identity risk management.

Then The solution

Implemented staged identity security improvements, role-based Conditional Access, stronger MFA, a role structure ready for Privileged Identity Management, and unified audit logging.

Result Outcomes

  • Reduced legacy authentication exposure
  • Strengthened privileged-access governance
  • Improved audit visibility and identity monitoring readiness

Related evidence

All work

Policy 01Software development & IT services

Enterprise identity security and Conditional Access

If
Engineering teams accessed corporate resources from unmanaged endpoints, legacy authentication remained available, and…
Then
Redesigned Conditional Access, planned and implemented a staged retirement of legacy authentication, strengthened MFA…
Result
Reduced unmanaged endpoint exposure
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • Device compliance

Policy 02Multi-location professional services

Identity protection and email domain security

If
MFA enforcement and privileged access required improvement, while email authentication records needed strengthening…
Then
Implemented staged Conditional Access improvements, addressed legacy authentication dependencies, and strengthened…
Result
Standardised MFA enforcement and privileged-access boundaries
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • SPF

Policy 03Healthcare & diagnostics

Secure access for shared clinical and laboratory workstations

If
Shared workstations used across shifts in clinical and laboratory settings created challenges for sensitive application…
Then
Designed Conditional Access for shared-device scenarios, including session restrictions, reauthentication for sensitive…
Result
Strengthened access restrictions for shared endpoints
  • Conditional Access
  • Microsoft Entra ID
  • MFA
  • Session controls

Contact

Let's talk about secure Microsoft cloud work.

↑↓ to move · Enter to open · Esc to close