Identity is the perimeter now. This is how to configure it without locking everyone out.
It is planned and the outline below is a first draft, so it may yet change. There is no enrolment and no date — when it is ready it will be on this page.
If you need this capability now rather than later, Identity & access management is the service that covers it, or talk to us.
IT administrators running Microsoft 365 or Google Workspace for an organisation of any size.
Practitioner. For people who administer these systems day to day.
Assumed beforehand:
3 modules, 9 lessons, 1 h 31 m of material. The times are the sum of the lessons rather than a round figure.
The factors differ by orders of magnitude in what they resist.
SMS, TOTP, push, and phishing-resistant keys, against the attacks that exist.
Why approval prompts get approved, and number matching.
Session-token theft, which defeats every factor except the bound ones.
A policy that locks out the administrator who wrote it is the standard first attempt.
Measuring who a policy would have blocked before it blocks them.
What each signal is worth, and which ones are trivially faked.
Excluded from everything, monitored for use, and tested on a schedule.
The account that reads email should not be the account that can delete the tenant.
The arrangement, and the objections to expect.
Standing access against requested access, and what each costs.
Access reviews that are not a rubber stamp.
Format. Written lessons with configuration walkthroughs. Delivery mechanism is not built yet.
Getting to an enforced policy without losing legitimate mail on the way.
Course outline ⟶The attacks that pass SPF, DKIM and DMARC, and the habits that catch them anyway.
Course outline ⟶Addressing, DNS, DHCP and NAT — and a method for finding which of them is broken.
Course outline ⟶This course exists because the work behind it is work we do. If you need the result rather than the skill, identity & access management is the service that covers it.