Welcome. This is a working notebook on identity and security: the tenant settings that matter, the access problems that keep recurring, the new risks AI brings, and an honest log of studying for the CISSP.
If you’re new, read these first
- Microsoft Entra ID: Conditional Access, authentication methods and running a tenant day to day.
- Identity & Access Management: lifecycle, governance and least privilege.
- AI Security: what changes when software agents act with real permissions.
- Digital Identity Verification: proving who a person is, not just which account signed in.
- CISSP Journey: domain-by-domain notes and progress.
How the posts are written
Most posts start from a real problem: a policy that misfired, an audit finding, a question from a colleague. Where there’s a query or script, it’s one I’ve run. Where something depends on licensing or a preview feature, I say so.
Want to follow along? Connect with me on LinkedIn.
