Implementing the Essential Eight in Microsoft environments using Microsoft's own guidance: Intune and Microsoft 365 licensing, WDAC and AppLocker, phishing-resistant MFA in Entra ID, Windows Update for Business, Entra PIM and LAPS, and Microsoft 365 backups.
An overview of meeting the Essential Eight with Microsoft 365, Intune, Entra ID and Defender: which Microsoft tools map to each strategy, licensing considerations, and Purview Compliance Manager templates for continuous monitoring.
Choosing between Windows Defender Application Control and AppLocker for each maturity level, suitable rule types, blocklists and driver control, logging allowed and blocked events, and the process controls Microsoft leaves to you.
Which Microsoft Entra authentication methods meet Essential Eight ML2 and ML3 phishing resistance, why one-time codes do not, Windows Hello for Business, identity verification before issuing credentials, and MFA event logging.
Meeting Essential Eight operating system patch deadlines with Windows Update for Business rings, expedited updates, Configuration Manager, Intune driver and firmware deployment, and Defender Vulnerability Management scanning.
Implementing Essential Eight privileged access controls in Microsoft environments: cloud-only admin accounts, removing mail and web access, Entra PIM for just-in-time access, Privileged Access Workstations, LAPS and Credential Guard.
How the Essential Eight backup strategy applies to Microsoft 365 data: shared responsibility, retention policies and labels versus separate backups, system state backups, and the access and deletion restrictions at each maturity level.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.