Ashwin Yadav
All work

Policy 17Internal governanceEnterprise IT

SharePoint permission boundary crawler

Policy path. Signal: Access-boundary review needed. Decision: PowerShell crawler across sites and folders. Controls: Action Site and folder permissions exported; Action SharePoint group memberships expanded. Outcome: A clear view of effective access.

If The challenge

Reviewing effective information-access boundaries required a detailed view of site and folder permissions, including SharePoint group membership.

Then The solution

Engineered a PowerShell-based crawler to export site and folder permissions and expand SharePoint group memberships.

Result Outcomes

  • Improved visibility into SharePoint access boundaries
  • Supported permissions review and governance reporting

Related evidence

All work

Policy 04Financial services

Identity governance and audit logging

If
Legacy authentication, inconsistent MFA, permanent administrative privileges and insufficient audit visibility limited…
Then
Implemented staged identity security improvements, role-based Conditional Access, stronger MFA, a role structure ready…
Result
Reduced legacy authentication exposure
  • Microsoft Entra ID
  • Conditional Access
  • MFA
  • Privileged Identity Management

Policy 05Financial advisory & asset management

OAuth application and cross-tenant access governance

If
Third-party integrations, external application permissions, partner access boundaries and audit visibility required…
Then
Reviewed application integrations, established administrative consent governance, removed unauthorised or dormant…
Result
Brought application consent under administrative governance
  • Microsoft Entra ID
  • OAuth consent governance
  • Cross-tenant access
  • Audit logging

Policy 06Healthcare RCM (in-house)

ISO 27001:2022 certification renewal

Renewed ISO 27001:2022 certification

If
Security control remediation, evidence collection and compliance coordination were required to support certification…
Then
Drove security remediation, strengthened information security controls, and coordinated audit evidence and compliance…
Result
Coordinated audit evidence and compliance activities
  • ISO 27001:2022
  • Information security governance
  • Security remediation
  • Audit evidence

Contact

Let's talk about secure Microsoft cloud work.

Email meLinkedInResume (PDF)

↑↓ to move · Enter to open · Esc to close