Categories
2
Architecture
How the whole platform composes into one governed system — the reference-platform map, its layers and controls, and the design decisions behind them.
2
Identity & Privileged Access
PIM, Conditional Access, JIT, RBAC, FIDO2 attestation. Identity-centric controls for tenants where privileged-access design is the security perimeter, not a sub-bullet under it.
1
Secure Delivery
The pipeline that ships tenant configuration, treated as an identity perimeter of its own. Secret-less authentication with Workload Identity Federation, three-domain Terraform delivery, plan/apply hygiene against Entra and Azure, preflight permission probes, supply-chain isolation between orgs, and off-platform backup.