Map a client's Microsoft 365 setup to CIS, NIST CSF, Essential 8 and cyber insurance questionnaires, and have the evidence ready when someone asks.
If you’ve ever set up a DLP policy in Microsoft 365, you’ve probably experienced the false positive problem. You create a rule to catch Social Security numbers, and suddenly it’s flagging phone numbers, project codes, and invoice numbers. Users start overriding policies. Admins start ignoring alerts. The whole thing falls apart. Exact Data Match fixes […]
Do You Really Know Where Your HR Data Lives in Microsoft 365? Most HR teams think they know where their sensitive data lives. “We have a locked-down HR SharePoint site.”“Only HR can access it.”“There’s no external sharing.” On paper, that sounds great. But here’s the real question: Do you actually know where your HR data […]
In this post, we’ll explore how the Australian Cyber Security Centre’s Essential Eight framework maps directly to Microsoft 365 security controls—and how you can automate evidence collection and policy checks across your tenant. Today, we’ll: Walk through each of the eight mitigation strategies Show the Microsoft 365 tools and licensing needed to implement them Highlight […]
I’ve spoken to countless MSPs looking to elevate their security game and provide a stronger offering for their clients. Yet, many find themselves stuck—unsure where to begin or what roadmap to follow to help them scale and meet compliance standards. If that sounds familiar, you’re in the right place. In this post, I’m excited to […]
As cybersecurity insurance continues to evolve, I believe we are going to continue to see stricter requirements in reporting as it relates to common questionnaire topics such as organizations requiring MFA. Self-attestation will not be enough for most insurance providers out there in my opinion. As Microsoft MFA has evolved over the years, reporting has […]
Checklist do not equal compliance One of the major gaps I hear when talking to MSPs about security and compliance is a lack of understanding the “why” behind the security checklist being instituted in client environments. Many of us out there follow some checklist, especially for Microsoft 365, that we try to implement in our […]
🛡️ Mapping Microsoft 365 Security Controls to NIST CSF 2.0 NIST has released the 2.0 draft of its Cybersecurity Framework so I wanted to create a new enablement guide that maps Microsoft security controls to the framework. The Framework has been used widely to reduce cybersecurity risks since its initial publication in 2014. Many organizations […]
When the Cybersecurity & Infrastructure Security Agency (CISA) released the Secure Cloud Business applications (SCuBA) project, I was pretty excited but it left me wanting more. I wanted more enablement materials and a way to map this back to broader cybersecurity frameworks we are adopting vs just having a checklist to follow. For this reason, […]
In this article, I wanted to break down some of the trends in the Cyber Insurance market that I am seeing along with some predictions for 2023 and beyond. This is not a post I typically do but I have been fascinated by the rapid evolution we are seeing unfold so I wanted to share […]
CISA has recently released a project called SCuBA which is providing a security baseline for Microsoft 365. This project is currently in the alpha stages but there is a ton of great recommendations that span across the suite offerings like Azure AD, Exchange, Teams, Defender, OneDrive, SharePoint, and even Power Platform. If you are someone […]
Uploading 52% Data loss prevention is becoming extremely important across all business landscapes. It is a priority when it customers that fall under compliance regulations like HIPAA, FINRA, and NIST. The new M365 skus come baked with DLP and information protection features that were traditionally only available in the Enterprise plans from office365. I have […]
To comply with business standards and industry regulations, organizations need to protect sensitive information and prevent its inadvertent disclosure. Examples of sensitive information that you might want to prevent from leaking outside your organization include financial data or personally identifiable information (PII) such as credit card numbers, social security numbers, or health records. With a […]
Map your Microsoft 365 settings to CIS Controls and NIST CSF in about a minute.
CloudCapsule scans 300+ controls, maps each finding to the framework you report against, and tracks the trend over time, so the evidence for your next review is already there.
No credit card required. Results in < 2 minutes.
