Expertise
Specialist depth across the Microsoft cloud.
Six areas that belong together: Microsoft 365, security, identity, endpoint, data and AI. We work where it gets technical – in architecture, implementation and review.
Microsoft 365
Tenant architecture, administration, modern workplace and Microsoft cloud services.
A Microsoft 365 foundation that carries what is built on top.
Every tenant grows with each project: new groups, new sharing, new exceptions. We design and review tenant architecture, administration and collaboration governance, so that security, compliance and AI can build on a solid base.
Topics
- Tenant architecture
- Administration and role model
- Modern Workplace
- Exchange Online
- Teams and SharePoint governance
- Microsoft cloud services
- Migrations to Microsoft 365
Typical work
- Tenant review against Microsoft recommendations and your own requirements, with a prioritised list of measures
- Administration and role concept with as few standing privileges as possible
- Governance for Teams, SharePoint and external sharing that users can follow
- Planning and execution of migrations from on-premises Exchange, file and SharePoint environments
Identity
Entra ID, Conditional Access, MFA, Identity Protection and Zero Trust.
Identity decides who gets in – and under which conditions.
Microsoft Entra ID is where security and usability meet. We design authentication methods, Conditional Access policies with a clear purpose and documented exceptions, and privileged access that exists only while it is needed.
Topics
- Microsoft Entra ID
- Conditional Access
- MFA and authentication methods
- Identity Protection
- Privileged Identity Management
- Zero Trust
- Entra Connect and Cloud Sync
- Guests and external collaboration
Typical work
- Conditional Access redesign, tested in report-only mode before enforcement
- Move to modern, phishing-resistant authentication methods
- Privileged access with PIM and properly protected emergency accounts
- Zero Trust roadmap connecting identities, devices and data
Endpoint
Intune, endpoint security, compliance and device management.
Devices that are managed, compliant and up to date.
Intune is switched on quickly and cleaned up slowly. We introduce or review Microsoft Intune, move away from Group Policy and Configuration Manager at a pace operations can absorb, and make device compliance the basis for Conditional Access.
Topics
- Microsoft Intune
- Windows Autopilot
- Endpoint security
- Compliance policies
- Security baselines
- Co-management with Configuration Manager
- App deployment
- Update management
Typical work
- Intune introduction or migration, including co-management
- Technical review of existing Intune and endpoint security configurations
- Autopilot provisioning and app delivery with documented detection rules
- Update rings and compliance reporting for day-to-day operations
Security
Defender XDR, security operations, assessments and hardening.
Security that is configured, connected and monitored.
In Microsoft environments, much of security is configuration. The tools are often licensed already; the difference is whether they are set up, tuned to each other and watched. We plan, implement and review Microsoft Defender XDR, assess tenants soberly and harden identities and devices step by step.
Topics
- Microsoft Defender XDR
- Defender for Endpoint
- Defender for Office 365
- Defender for Identity
- Security assessments
- Hardening
- Security architecture
- Incident response
- NIS2-related technical measures
Typical work
- Defender XDR rollout or optimisation: onboarding, attack surface reduction, alerts that reach the right people
- Security assessment of the Microsoft 365 tenant with a risk-sorted action plan instead of a hundred-page list of warnings
- Hardening of identities and devices, tested in pilot groups before it is enforced
- Support during security incidents in Microsoft environments: containment, analysis with Defender and Entra data, recovery
We do not run a 24/7 on-call service. Availability and response times are agreed per engagement.
Data & Compliance
Microsoft Purview, information protection, DLP and governance.
Data that is classified, protected and governed.
Many compliance requirements concern data in Microsoft 365. With Microsoft Purview, information can be classified, labelled, protected against leakage and retained or deleted by rule. We translate requirements into policies – and test them before they are enforced.
Topics
- Microsoft Purview
- Information Protection
- Sensitivity labels
- Data Loss Prevention
- Retention and records
- Audit and eDiscovery
- Data governance
- NIS2-related technical measures
Typical work
- Purview introduction with a label taxonomy that users actually understand
- DLP policies for email, Teams, SharePoint, OneDrive and devices – in test mode first
- Retention concept aligned with legal and internal deadlines
- Technical measures and evidence for data protection and NIS2-related requirements
We are not a law firm. We implement what your data protection officer, legal or compliance team specifies – and deliver the documentation it needs.
AI
Microsoft Copilot, Copilot Studio, AI agents, AI governance and AI-enabled business processes.
AI that is useful, secure and governed.
We help companies put AI to productive use in Microsoft 365: from Copilot readiness and permissions to agents built with Copilot Studio and AI-enabled processes – with identity, data protection and governance in place from the start.
Topics
- Microsoft 365 Copilot
- Copilot Studio
- AI agents
- Agentic workflows
- AI governance
- Copilot security
- Purview for AI
- AI-enabled business processes
Typical work
- Copilot readiness assessment: permissions, oversharing, labels and licences
- Pilot and rollout of Microsoft 365 Copilot, including adoption
- Agents and automations with Copilot Studio, connected to existing processes
- AI governance: usage policies, access models and monitoring
Microsoft Security in focus
The security portfolio at a glance
Security runs through all six areas. These are the Microsoft technologies and topics we plan, implement and review.
Detect and respond
- Microsoft Defender XDR
- Defender for Endpoint
- Defender for Office 365
- Defender for Identity
- Incident response
Identity and access
- Microsoft Entra ID
- Conditional Access
- Authentication methods
- Privileged access
- Zero Trust
Devices and data
- Microsoft Intune
- Endpoint security
- Microsoft Purview
- Information protection and DLP
Assess and design
- Security assessments
- Security architecture
- Hardening
- NIS2-related technical measures
How we work
-
Documented
Every setting with its purpose and rationale, so your team can continue without us.
-
Tested
Changes go through pilot groups and report-only modes before they are enforced.
-
Honest
If we think something does not make sense, we say so before it is implemented.
-
Handed over
We finish with a configuration and a knowledge transfer your team can own.
Contact
Let’s strengthen your next project.
Whether it is a single technical question, project support, training or long-term collaboration – we are happy to discuss where Security Insights can complement your team.