Categories
2
Architecture
How the whole platform composes into one governed system — the reference-platform map, its layers and controls, and the design decisions behind them.
1
Identity & Privileged Access
PIM, Conditional Access, JIT, RBAC, FIDO2 attestation. Identity-centric controls for tenants where privileged-access design is the security perimeter, not a sub-bullet under it.
1
Secure Delivery
The IaC supply chain that ships tenant configuration. No-secret pipelines, Workload Identity Federation, three-domain Terraform delivery, ADO backup as sovereign data, plan/apply hygiene against Entra and Azure.