10 notes
Cyber Essentials Plus notes
Cyber Essentials Plus notes on assessment scope, endpoint samples, evidence, MFA, patching and Microsoft 365 controls that catch teams out.
Browse Cyber Essentials Plus
Topic clustersIdentity, endpoint, tenant security and readiness notes.
Microsoft 365 security topics
Pillar pages grouping the field notes by area: Cyber Essentials Plus, identity, endpoint management, and tenant security.
18 notes
Identity and access security notes
Microsoft Entra ID, Conditional Access, MFA, passkeys, privileged access and break-glass design - the controls that decide whether real attacks land.
Browse Identity & access12 notes
Endpoint management notes
Endpoint privilege management, Autopilot, device compliance, and the policy conflicts that keep half-deployed device estates from working.
Browse Endpoint management21 notes
Tenant security and Defender
Microsoft Defender, DLP, sensitivity labels, external sharing and mail security, with practical operating habits for a controlled tenant.
Browse Tenant & DefenderUse the topic clusters when a Microsoft 365 control problem is still broad. Start with the pillar, read the notes that match the failing area, then move into a service, offer or score check when the next decision is clear.
How the clusters work
Each cluster groups notes by the control owner inside Microsoft 365. Identity covers access decisions, endpoint covers managed device trust, tenant security covers Defender and collaboration risk, and Cyber Essentials Plus covers assessment readiness.
How to move from reading
When a note matches your own tenant, write down the affected users, devices, policy names, evidence source and decision owner. That turns general guidance into a practical review brief.