July 22, 2026
Rolling out MFA without an employee revolt
The technical side of MFA takes an afternoon. The human side takes 3 weeks, and skipping it is why small business rollouts fail.
July 13, 2026
The new hire IT onboarding checklist for a 10 to 30 person company
Rushed day-1 IT setup creates shared logins and over-permissioned accounts that last for years. A 4-phase onboarding checklist fixes it without slowing anyone down.
June 29, 2026
Employee offboarding security: the orphaned account nobody disabled
Employee offboarding security is an identity control, not an HR courtesy. Why ad-hoc offboarding leaves orphaned accounts live for months and what a documented, measured deprovisioning process looks like.
June 27, 2026
Managed identity for a 50-person company: when accounts become the perimeter
Managed identity for a small business means Entra ID as the control plane, MFA and conditional access as baseline, SSO to cut password sprawl, a joiner-mover-leaver lifecycle and ITDR monitoring for the Microsoft 365 tenant.
April 19, 2026
Zero Trust for small and mid-market: what to do first
A practical Zero Trust sequence for companies of 50 to 500 employees, honest about what is achievable without an enterprise identity team and what is not.
April 19, 2026
Phishing-resistant MFA: FIDO2, passkeys and what's coming next
SMS codes and push notifications are no longer enough MFA for serious cyber insurance or customer review programs. The move to FIDO2 security keys and passkeys is underway, here's how it works and what to deploy.