All work

Policy 02Multi-location professional servicesSecurity & Compliance

Identity protection and email domain security

Policy path. Signal: A sign-in, or an email claiming to be from the domain. Decision: Conditional Access and mail authentication checks. Controls: Require MFA for every user and privileged role; Block Legacy authentication dependencies; Require Mail must pass SPF, DKIM and DMARC. Outcome: Standardised MFA and stronger spoofing protection.

If The challenge

MFA enforcement and privileged access required improvement, while email authentication records needed strengthening against domain spoofing.

Then The solution

Implemented staged Conditional Access improvements, addressed legacy authentication dependencies, and strengthened email authentication through SPF, DKIM and DMARC.

Result Outcomes

  • Standardised MFA enforcement and privileged-access boundaries
  • Improved email domain authentication and spoofing protection
  • Established a repeatable identity governance baseline

Related evidence

All work

Policy 01Software development & IT services

Enterprise identity security and Conditional Access

If
Engineering teams accessed corporate resources from unmanaged endpoints, legacy authentication remained available, and…
Then
Redesigned Conditional Access, planned and implemented a staged retirement of legacy authentication, strengthened MFA…
Result
Reduced unmanaged endpoint exposure
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • Device compliance

Policy 03Healthcare & diagnostics

Secure access for shared clinical and laboratory workstations

If
Shared workstations used across shifts in clinical and laboratory settings created challenges for sensitive application…
Then
Designed Conditional Access for shared-device scenarios, including session restrictions, reauthentication for sensitive…
Result
Strengthened access restrictions for shared endpoints
  • Conditional Access
  • Microsoft Entra ID
  • MFA
  • Session controls

Policy 04Financial services

Identity governance and audit logging

If
Legacy authentication, inconsistent MFA, permanent administrative privileges and insufficient audit visibility limited…
Then
Implemented staged identity security improvements, role-based Conditional Access, stronger MFA, a role structure ready…
Result
Reduced legacy authentication exposure
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • Privileged Identity Management

Contact

Let's talk about secure Microsoft cloud work.

↑↓ to move · Enter to open · Esc to close