Microsoft product
Defender for Endpoint scans macOS devices around the clock, but only after ABM, Intune profiles, and an onboarding package are in place. Here is the rollout order.
Defender for Business ships 24/7 vulnerability scanning with Business Premium. How to onboard devices, read the exposure score, and run an approve-remove-patch SOP.
Shadow SaaS thrives where no approved software list exists. Build a vendor management policy, an inventory template, and use the three app inventories M365 already keeps.
Most businesses cannot produce an accurate application inventory, and the Microsoft 365 defaults make it worse. Here is the layered plan for CIS Control 2, from OAuth consent to ASR rules.
By default, anyone with a Microsoft 365 tenant can open a Teams chat with your users. Here is the attack that exploits it and the four controls that break the kill chain.
Microsoft 365 email is not phishing-resistant by default. SPF/DKIM/DMARC, a tuned anti-phishing policy, Safe Links and Attachments, external sender tags, and keyword mail flow rules close the gap.
Copilot for Security goes GA April 1 with pay-as-you-go pricing, NCE subscriptions become transferable mid-term, Restricted SharePoint Search arrives, and Teams ships voice isolation.
Microsoft-managed Conditional Access policies land in tenants automatically, Entra ID preps device-bound passkeys, Ignite floods Teams with Copilot, and Intune unveils two paid add-on capabilities.
Microsoft 365 Copilot lands November 1 for enterprise, Town halls replace Teams Live Events, Conditional Access templates hit GA, and hybrid password resets finally clear user risk in Entra ID.
November 2021 for MSPs: Defender for Business lands in Business Premium at no extra cost, NCE promos slip to January 2022, GDAP is announced, and CSP partners get Azure AD P2 free.
As of November 2021, Microsoft Defender for Business adds near-Plan-2 EDR to Microsoft 365 Business Premium at no extra cost. Here is what MSPs get, what it costs standalone, and the catch.
