Overview Microsoft is retiring the legacy MFA and SSPR policies by 30th September 2025 as part of its modernisation path. Migrating to the new Authentication Methods policy offers more precision, central control, and futureproof cloud environment. The new Microsoft Entra ID authentication method policy offers a unified, modern way to manage your organisation’s authentication methods, […]
Introduction Break glass accounts are your emergency lifeline, providing privileged access when the identity system fails and no one can sign in to access organisation resources due to outages, breaches, lockouts, or misconfiguration. These accounts are critical for maintaining control and continuity but must be tightly secured, rarely used, and continuously monitored. ⚠️ Why They […]
Security Best Practices Using Only the Org Settings Portal Microsoft 365 provides robust tools for businesses of all sizes, but with this power comes responsibility. Securing your tenant doesn’t always require premium licenses or access to multiple admin portals. You can significantly improve your organisation’s security posture using only the Microsoft 365 Admin Centre’s “Org […]
This blog post is based on the presentation given by Dave Cook in our Jisc Cyber Community in April 2024. Who is this blog aimed at: IT Teams who administer and are responsible for Cloud estates and the security of them. What is the purpose of the blog: To help member/customer IT teams understand the […]
AWS News On Demand Webinars Getting Started with the AWS Cloud Essentials I On Demand (70 minutes) Securing Your AWS Cloud I On Demand (90 minutes) Machine Learning Basics I On-Demand (90 minutes) How Amazon SageMaker Can Help I On Demand (60 minutes) Strategies and Tools to Perform Large-Scale Migrations I On Demand (90 minutes) […]
A recording of the recent session run by Simon Dix of the Jisc cloud solutions team at the Jisc Security Conference. The session covers the public cloud shared responsibility model in relation to the roles and responsibilities of both cloud vendors and cloud consumers.
A recording of the recent session run by Richard Jackson and Colm Blake of the Jisc cloud solutions team at the Jisc Security Conference. The session covers best practices for the configuration of Office 365, Windows 10/11 and the Enterprise Mobility and Security (EMS) suite.
Microsoft have recently announced the Preview of Autoscale for Azure Virtual Desktop and at first blush it looks like native scaling has had some much-needed improvements. The previous incarnation was a little clumsy, requiring you to independently create an automation account, an Azure function and optionally, a Log Analytics Workspace. In addition, any parameters then […]
The University of Bath has had an on-site high-performance computing (HPC) facility for a long time, but they believed public cloud could offer HPC users more flexibility. To verify this, they tested key software applications used in HPC to see if they could work as well in a pre-production Microsoft Azure public cloud environment and […]
This blog has been written in collaboration with the Jisc Trust & Identity and Cyber Security teams. Jisc has recently become aware of a potential security risk associated with the default Azure Active Directory (AAD) security settings that are commonly in place across our membership. If your organisation uses AAD (or plans to use it), […]