Setting up a Microsoft 365 (M365) tenant is often straightforward, thanks to the quick-start wizards. While ease and convenience are great, they don't always translate into strong security. When we created TBDCyber, we set up our M365 tenant in a matter of minutes. We had immediate access to all the productivity applications we needed, from Outlook to Teams. We had all the ease and convenience we needed to start operating our business, but the next question was: Are we doing

🔑 Admin Accounts Deserve Extra Protection In this short clip, TBDCyber's Microsoft trusted advisor, Chris Goosen, explains why organizations should consider enabling Entra ID P2 licensing—especially for administrator accounts. 💬 Key takeaway: Instead of always-on admin privileges, Entra ID P2 allows just-in-time access through Privileged Access Management (PAM). That means: ✔️ Admin accounts start with zero privileges by default ✔️ Elevated access is granted only when need

In this short video, our CISO, Zach Luze, breaks down how DSPM: Maps your sensitive data across repositories Connects with vulnerability management tools to pinpoint high-risk assets Provides leadership with clear expectations and insights for better decision-making

Author: Zach Luze, TBDCyber CISO and Director of Data and Security Architecture Data Security Posture Management (DSPM) is generating buzz with its scalability, advanced classification, and broad coverage. But buying a DSPM solution isn’t a plug-and-play decision—it requires careful evaluation. Here’s what I tell clients to consider before investing. 1. Know what DSPM does– and doesn’t– do DSPM identifies where sensitive data lives, highlights vulnerabilities, and prioritize