Security employees can use
An additional sign-in check is of limited help if employees do not know what to do after losing a phone. Strict sharing rules can interrupt work when suppliers lack appropriate access. Lasting improvement requires both technical controls and clear working agreements.
Radorfa maps required access, existing exceptions and recurring questions. This helps define an improvement that can be tested with your employees.
Step 1: assess the access request
Who is signing in, on which device and with which permissions? An office location alone does not establish that access is safe. Microsoft's Zero Trust principles describe explicit access verification and limiting permissions to what is needed.
In Microsoft 365 we investigate relevant Entra ID settings and, where appropriate, device management in Intune. Available capabilities depend on configuration and licences. We also discuss exceptions and emergency access, so a change does not unintentionally lock the organisation out.
Step 2: limit the consequences of a mistake
An incorrectly shared file or intercepted password can still cause harm. Appropriate permissions, additional sign-in protection, device checks and recovery measures can limit the consequences. None of these measures automatically makes a mistake harmless.
Discuss a concrete situation: who can open a customer folder, how long does an external party retain access and who can revoke it? Then verify that the agreed permissions work.
Step 3: test routine work and exceptions
Ask a limited group to sign in to Outlook, Teams and their business applications. Also test a new device, a rejected sign-in and the loss of an authentication method. Record unclear messages and update instructions before wider deployment.
Assess changes against test outcomes. Fewer alerts alone do not demonstrate better security; relevant information may also be missing.
Include management and recovery in the agreement
Accounts, devices and business relationships change. Document who reviews changes, which alerts receive follow-up and how recovery is practised periodically. Radorfa can align this work with your environment and agreed support. Discuss an initial security improvement.
