Policy 01Software development & IT services
- If
- Engineering teams accessed corporate resources from unmanaged endpoints, legacy authentication remained available, and…
- Then
- Redesigned Conditional Access, planned and implemented a staged retirement of legacy authentication, strengthened MFA…
- Result
- Reduced unmanaged endpoint exposure
- Microsoft Entra ID
- Conditional Access
- MFA
- Device compliance
Policy 02Multi-location professional services
- If
- MFA enforcement and privileged access required improvement, while email authentication records needed strengthening…
- Then
- Implemented staged Conditional Access improvements, addressed legacy authentication dependencies, and strengthened…
- Result
- Standardised MFA enforcement and privileged-access boundaries
- Microsoft Entra ID
- Conditional Access
- MFA
- SPF
Policy 03Healthcare & diagnostics
- If
- Shared workstations used across shifts in clinical and laboratory settings created challenges for sensitive application…
- Then
- Designed Conditional Access for shared-device scenarios, including session restrictions, reauthentication for sensitive…
- Result
- Strengthened access restrictions for shared endpoints
- Conditional Access
- Microsoft Entra ID
- MFA
- Session controls
Policy 04Financial services
- If
- Legacy authentication, inconsistent MFA, permanent administrative privileges and insufficient audit visibility limited…
- Then
- Implemented staged identity security improvements, role-based Conditional Access, stronger MFA, a role structure ready…
- Result
- Reduced legacy authentication exposure
- Microsoft Entra ID
- Conditional Access
- MFA
- Privileged Identity Management
Policy 05Financial advisory & asset management
- If
- Third-party integrations, external application permissions, partner access boundaries and audit visibility required…
- Then
- Reviewed application integrations, established administrative consent governance, removed unauthorised or dormant…
- Result
- Brought application consent under administrative governance
- Microsoft Entra ID
- OAuth consent governance
- Cross-tenant access
- Audit logging
Policy 06Healthcare RCM (in-house)
Renewed ISO 27001:2022 certification
- If
- Security control remediation, evidence collection and compliance coordination were required to support certification…
- Then
- Drove security remediation, strengthened information security controls, and coordinated audit evidence and compliance…
- Result
- Coordinated audit evidence and compliance activities
- ISO 27001:2022
- Information security governance
- Security remediation
- Audit evidence
Policy 07Healthcare RCM (in-house)
- If
- Remote access required alignment between authentication, endpoint controls, certificate configuration and network…
- Then
- Architected and implemented FortiGate and Palo Alto remote-access VPN integrated with Microsoft Entra ID SAML…
- Result
- Integrated remote access with identity-based authentication
- FortiGate
- Palo Alto
- Microsoft Entra ID
- SAML
Policy 08Enterprise IT
- If
- Internal support and knowledge discovery included repetitive requests and manual service-desk effort.
- Then
- Designed and developed custom AI-powered assistants in Microsoft Copilot Studio, integrating conversational workflows…
- Result
- Improved access to relevant internal knowledge
- Microsoft Copilot Studio
- Microsoft 365
- Power Platform
Policy 09Enterprise IT services
40% faster ticket triage
- If
- Ticket triage and incident workflows required more consistent handling.
- Then
- Delivered a Power Platform incident management solution to improve ticket triage and operational workflows.
- Result
- More consistent incident handling
- Power Apps
- Power Automate
- Microsoft 365
Policy 10Professional services & real estate
- If
- Document approval processes varied across teams, lifecycle tracking was inconsistent, and manual work, email follow-ups…
- Then
- Delivered metadata-driven document lifecycle workflows with role-based approval routing, exception handling…
- Result
- Standardised document approvals and lifecycle records
- SharePoint Online
- Power Automate
- Power Apps
- Microsoft Graph API
Policy 11Enterprise operations
60% less manual data entry
- If
- Repetitive document-related processes required substantial manual data entry.
- Then
- Implemented a document automation workflow to standardise repetitive document tasks.
- Result
- Standardised repetitive document tasks
- SharePoint Online
- Power Automate
Policy 12Multi-location business
- If
- Routine junk email recovery requests depended on the helpdesk, with limited visibility into request handling and…
- Then
- Built a self-service junk email review and recovery workflow with a request interface, orchestration, email operations…
- Result
- Reduced helpdesk dependency for the covered recovery process
- Power Apps
- Power Automate
- Microsoft Graph Mail API
- SharePoint
Policy 13Healthcare RCM (in-house)
- If
- Operational and client requests were tracked across email and spreadsheets, with no single view of status, ownership or…
- Then
- Delivered a Dynamics 365 solution on Dataverse: request tables and queues per team, role-based security mapped to Entra…
- Result
- One tracked record per request
- Dynamics 365 Customer Service
- Dataverse
- Power Automate
- Power BI
Policy 14Enterprise IT
50% faster response time
- If
- Manual security alert triage and reporting affected operational response times.
- Then
- Automated alert triage and reporting with PowerShell and Microsoft Graph API to reduce manual processing and improve…
- Result
- Less manual alert processing
- Microsoft Defender
- PowerShell
- Microsoft Graph API
Policy 15Enterprise
800 mailboxes, zero data loss
- If
- An enterprise mailbox migration required data integrity and business continuity.
- Then
- Led an Exchange Online migration of 800 mailboxes with controlled execution and a focus on service continuity.
- Result
- Zero data loss
- Exchange Online
- Microsoft 365
Policy 16Separate enterprise engagements
3,000+ users; 1,500+ devices
- If
- Large user populations required consistent endpoint policy deployment, application protection and secure access.
- Then
- Configured and managed endpoint management and access controls across separate engagements: 1,500+ devices at one…
- Result
- 3,000+ users under Intune and Conditional Access
- Microsoft Intune
- MDM/MAM
- Conditional Access
Policy 17Internal governance
- If
- Reviewing effective information-access boundaries required a detailed view of site and folder permissions, including…
- Then
- Engineered a PowerShell-based crawler to export site and folder permissions and expand SharePoint group memberships.
- Result
- Improved visibility into SharePoint access boundaries
- PowerShell
- SharePoint Online
Policy 18Internal governance
1,315 group chats audited
- If
- A group-chat message inventory and age-based analysis were required to evaluate Teams retention requirements.
- Then
- Built an audit workflow with Graph API pagination and throttling handling, chat inventory, message-age analysis and an…
- Result
- Read 21,900 messages
- Microsoft Graph API
- PowerShell
- Microsoft Purview
Policy 19Healthcare & financial services; in-house
- If
- Copilot can surface anything a user already has access to.
- Then
- Reviewed permissions before rollout using the SharePoint permission crawler, integrated Copilot with SharePoint and…
- Result
- Copilot enabled on a reviewed permission baseline
- Microsoft 365 Copilot
- SharePoint Online
- Microsoft Teams
- Microsoft Purview