endpoint security
November 03, 2026 | 10 min
Intune vs the CIS Windows 11 Benchmark: Running a Gap Analysis Before an Audit
The Intune security baseline is Microsoft's recommendation, not the CIS benchmark. This guide shows how to compare your Intune configuration with the CIS Windows 11 benchmark control by control, and how to record the differences before an auditor finds them.
November 03, 2026 | 11 min
Intune Security Baseline Audit for Windows 11: How to Find Drift From the Baseline You Deployed
How to audit the Intune security baseline on Windows 11: read per-setting status, trace conflicts, spot out-of-date versions and record why defaults changed.
October 30, 2026 | 12 min
Intune Device Audit: What It Checks, What You Get, and How It Differs From Intune Licences
What an Intune device audit checks: enrolment, compliance, encryption, Defender, patching, BYOD app protection. What you get, and why it is not a licence.
September 04, 2026 | 14 min
The Patch That Was Three Months Overdue: A Hong Kong Firm's Ransomware Near-Miss
A composite scenario from Hong Kong: a backup catches a ransomware attempt mid-way through, and the post-incident review traces the entry point back to a server patch that had been sitting overdue for three months on a system nobody was tracking. What changes when patching becomes a managed, visible discipline instead of a task someone has to remember.
September 04, 2026 | 15 min
The Alert That Stopped at “Quarantined”
A composite scenario from Hong Kong: a logistics company's base antivirus quarantines a suspicious file on a dispatcher's laptop and stops there. Why managed EDR is the layer that answers what happened next, and why it belongs inside a managed IT plan rather than as a standalone tool.
September 04, 2026 | 16 min
The Laptop That Never Came Back From Dubai
A composite scenario from Hong Kong: a trading firm's buyer flies home from Dubai without the laptop she checked in with, and nobody can say what was on it. Why device control belongs inside a managed IT plan, not as a standalone tool.
September 04, 2026 | 16 min
The Sales Laptop That Left the Country
A composite scenario from Singapore: ninety people, company laptops, universally personal phones, and no way to answer "what was on it" when a laptop disappears between Jakarta and Changi. Why separability beats control in a BYOD programme.
August 08, 2026 | 11 min
How to Use Claude as a Financial Model Review Assistant in Excel
A practical guide to AI-assisted financial model review with Claude — formula and reference checks, a worked review workflow, how it compares to a formal audit, and why endpoint security is the real control point.