B BROCENT Get a quote

endpoint security

Cover image for Brocent IT blog post: Intune vs the CIS Windows 11 Benchmark: Running a Gap Analysis Before an Audit

November 03, 2026 | 10 min

Intune vs the CIS Windows 11 Benchmark: Running a Gap Analysis Before an Audit

The Intune security baseline is Microsoft's recommendation, not the CIS benchmark. This guide shows how to compare your Intune configuration with the CIS Windows 11 benchmark control by control, and how to record the differences before an auditor finds them.

Cover image for Brocent IT blog post: Intune Security Baseline Audit for Windows 11: How to Find Drift From the Baseline You Deployed

November 03, 2026 | 11 min

Intune Security Baseline Audit for Windows 11: How to Find Drift From the Baseline You Deployed

How to audit the Intune security baseline on Windows 11: read per-setting status, trace conflicts, spot out-of-date versions and record why defaults changed.

Cover image for Brocent IT blog post: Intune Device Audit: What It Checks, What You Get, and How It Differs From Intune Licences

October 30, 2026 | 12 min

Intune Device Audit: What It Checks, What You Get, and How It Differs From Intune Licences

What an Intune device audit checks: enrolment, compliance, encryption, Defender, patching, BYOD app protection. What you get, and why it is not a licence.

Cover image for Brocent IT blog post: The Patch That Was Three Months Overdue: A Hong Kong Firm's Ransomware Near-Miss

September 04, 2026 | 14 min

The Patch That Was Three Months Overdue: A Hong Kong Firm's Ransomware Near-Miss

A composite scenario from Hong Kong: a backup catches a ransomware attempt mid-way through, and the post-incident review traces the entry point back to a server patch that had been sitting overdue for three months on a system nobody was tracking. What changes when patching becomes a managed, visible discipline instead of a task someone has to remember.

Cover image for Brocent IT blog post: The Alert That Stopped at “Quarantined”

September 04, 2026 | 15 min

The Alert That Stopped at “Quarantined”

A composite scenario from Hong Kong: a logistics company's base antivirus quarantines a suspicious file on a dispatcher's laptop and stops there. Why managed EDR is the layer that answers what happened next, and why it belongs inside a managed IT plan rather than as a standalone tool.

Cover image for Brocent IT blog post: The Laptop That Never Came Back From Dubai

September 04, 2026 | 16 min

The Laptop That Never Came Back From Dubai

A composite scenario from Hong Kong: a trading firm's buyer flies home from Dubai without the laptop she checked in with, and nobody can say what was on it. Why device control belongs inside a managed IT plan, not as a standalone tool.

Cover image for Brocent IT blog post: The Sales Laptop That Left the Country

September 04, 2026 | 16 min

The Sales Laptop That Left the Country

A composite scenario from Singapore: ninety people, company laptops, universally personal phones, and no way to answer "what was on it" when a laptop disappears between Jakarta and Changi. Why separability beats control in a BYOD programme.

Cover image for Brocent IT blog post: How to Use Claude as a Financial Model Review Assistant in Excel

August 08, 2026 | 11 min

How to Use Claude as a Financial Model Review Assistant in Excel

A practical guide to AI-assisted financial model review with Claude — formula and reference checks, a worked review workflow, how it compares to a formal audit, and why endpoint security is the real control point.