top of page
Security ROI & Business Case


The Security Bridge™️- Identity Threat Protection in Microsoft 365 - Part 5: The Identity Threat Protection Scorecard
Most security teams can describe what's configured, not whether they're better off than 6 months ago. Part 5 closes The Security Bridge series with a 4-dimension scorecard, prevention, detection, governance, ownership, that turns identity security into one maturity number leadership can track and fund. Includes a real budget conversation that stalled without one, and a checklist to build your own this week. For architects, engineers, and CISOs who need identity security to co

Derek Morgan
Aug 124 min read


If Every Alert Is Important, None Are: Designing Security Reports That Drive Decisions
Most security teams ship two versions of every report. The 40 page export the platform makes easy. The 1 page version someone sat down and designed for a specific reader and a specific decision. This piece walks through a 4 question rubric for separating reports that drive decisions from reports that exist because they always have. Includes an audience cadence matrix, outcome metrics by audience, and a kill list of the reports that almost always fail the test.

Derek Morgan
May 266 min read
Start Your Cloud Journey
bottom of page