Incident ResponseThe 72-Hour Clock: Building a Breach Runbook That Actually Starts on Time
Kenya's Data Protection Act gives you 72 hours to notify the ODPC. Most teams lose time before they even know.
Insights
Practical Microsoft security writing, not marketing
Field notes on Microsoft 365, Azure, Entra ID and Sentinel, mapped to the Data Protection Act 2019, CBK guidance and ISO 27001.
Latest thinking
Articles on Microsoft security and Kenyan compliance
Incident Response
Threat ProtectionWhy Invoice Fraud Keeps Working in Kenya, and the Controls That Stop It
Business email compromise is the costliest attack Kenyan organisations face. Most of it stops with controls you already own.
ComplianceTurning CBK Cybersecurity Guidance Into Microsoft Configuration
Banks, SACCOs and payment providers need CBK expectations in Microsoft 365 and Azure settings, not policy documents.
IdentityA Conditional Access Baseline That Survives Contact With Real Users
A sequenced Entra ID policy set you can deploy without flooding your help desk on day one.
CostE5, E3 or Business Premium: What You Actually Need
A licensing guide for Kenyan organisations, including add-on paths that cost less than a full E5 upgrade.
IdentityDormant Accounts: The Quiet Identity Problem in East African Universities
Tens of thousands of identities, annual turnover, minimal staffing. Here's how to bring Entra ID lifecycle under control.
ComplianceMapping ISO 27001 Annex A to Microsoft 365 Without Inventing Evidence
Annex A controls mapped onto Purview, Defender, Entra and Intune, with audit evidence generated as configuration, not paperwork.
ComplianceWhat the ODPC Actually Expects From Your Microsoft Tenant
The Data Protection Act 2019 speaks in obligations, not products. Here's the Microsoft configuration those obligations require.
Data ProtectionPurview Labelling for Organisations That Hold Genuinely Sensitive Personal Data
A sensitivity label design for NGOs, health providers and public bodies holding beneficiary or patient data.
Secure AI AdoptionSecure Microsoft 365 Copilot Before You Switch It On
Copilot inherits your existing permissions. Oversharing that survived on obscurity stops being hidden.
CostSentinel Cost Control: Ingest Less, Detect More
Microsoft Sentinel bills on data ingested. Keep costs predictable on a Kenyan mid-market budget without weakening detection.
Threat ProtectionWhat Microsoft Secure Score Measures, and What It Quietly Does Not
A useful trend indicator, a poor security strategy, know where Secure Score misleads a board.
Get new articles by email
One article a month, mapped straight to Microsoft controls and Kenyan compliance obligations. No fear marketing, no noise.