Security Insights

Practical reading on Microsoft 365 posture.

Edited briefings from the ScanPosture team on identity governance, framework readiness, posture drift, and what is worth prioritising.

Restrained, technical reading. No hype, no checklists, no compliance overclaim.

Abstract identity and access network of connected nodes

Operational GuidanceFeatured

Conditional Access policy design that holds up under audit

Conditional Access policies that look comprehensive on paper often have quiet gaps in real-world coverage. This guide covers defensible policy design, common coverage failures, and how to observe what your policies are actually enforcing.

2 June 20268 min readAndy Lawson

Read insight

Editorial

Latest insights

Each piece is reviewed by the ScanPosture team before publication. No automated posts, no recycled checklists.

Abstract shield motif representing security controls

Authentication & Access6 min read

Why having MFA enabled is not the same as enforcing it

Most Microsoft 365 tenants have MFA switched on. Fewer actually enforce it. Here is where the gap lives and how to observe it in Entra ID.

2 June 2026Read

Abstract Microsoft 365 configuration panels with subtle settings indicators

Microsoft 365 Security7 min read

The Microsoft 365 settings that quietly weaken tenant security

Configuration decisions made during deployment often persist for years. From legacy authentication to permanent privileged access, these are some of the most common weaknesses found across Microsoft 365 tenants.

1 June 2026Read

See ScanPosture for yourself

Connect a tenant in five minutes. ScanPosture reads only and produces a clear, prioritised view of your posture.

Start free trial