Advice on good practice when using cloud.
Overview Microsoft is retiring the legacy MFA and SSPR policies by 30th September 2025 as part of its modernisation path. Migrating to the new Authentication Methods policy offers more precision, central control, and futureproof cloud environment. The new Microsoft Entra ID authentication method policy offers a unified, modern way to manage your organisation’s authentication methods, […]
Introduction Break glass accounts are your emergency lifeline, providing privileged access when the identity system fails and no one can sign in to access organisation resources due to outages, breaches, lockouts, or misconfiguration. These accounts are critical for maintaining control and continuity but must be tightly secured, rarely used, and continuously monitored. ⚠️ Why They […]
Security Best Practices Using Only the Org Settings Portal Microsoft 365 provides robust tools for businesses of all sizes, but with this power comes responsibility. Securing your tenant doesn’t always require premium licenses or access to multiple admin portals. You can significantly improve your organisation’s security posture using only the Microsoft 365 Admin Centre’s “Org […]
Introduction In today’s threat landscape, cloud based VM hardening is a best practice that’s actively recommended by industry frameworks and security tools, including CIS Benchmarks, vulnerability scanners like Nessus, cloud-native tools/frameworks such as AWS Inspector, Azure’s Defender for Cloud and more! Just to clarify, virtual machine hardening is essentially the process of securing virtualized environments […]
In an ideal world we’d be using certificates to authenticate to eduroam, but without that you can make the experience a lot easier for managed users, when their laptop sees eduroam it will ask them just for their username (email/upn) and password, and will not ask for the certificate to valid. Hopefully I’ll have another […]
Unlocking the full potential of your AWS environment: the case for third-party management in public sector organisations The UK public sector increasingly uses cloud technology to deliver services efficiently and securely. AWS is popular for government departments, educational organisations, and non-profit organisations because it offers scalability, security, and innovation. However, managing an AWS environment at […]
Co-authored by Ben Stott and Kelly Mathurin of the Jisc Cloud team. A major benefit of being a customer of the Microsoft 365 Education suite has for a long time been having access to unlimited storage across OneDrive, SharePoint and Exchange. This has meant that IT administrators haven’t needed to worry about capacity planning, […]
‘… the reality is that existing education establishments have been using their Microsoft 365 Tenants without any restrictions. This change, from their perspective, is a new restriction and will no doubt, be perceived as a price rise, since many education tenants are larger than 100TB.’ For further information see our advice paper: Advice and Guidance […]
This blog post is based on the presentation given by Dave Cook in our Jisc Cyber Community in April 2024. Who is this blog aimed at: IT Teams who administer and are responsible for Cloud estates and the security of them. What is the purpose of the blog: To help member/customer IT teams understand the […]
Quick blog post here explaining an Intune remediation to fix devices where they do not activate via a subscription. If your device looks like this then you don’t need to follow this guide If for any reason you have Not active in the subscription, this could mean that the CLIP Service store has become corrupt […]