Identity and Security
Who has access to what, from where, and with what credentials. Our articles on identity, authentication, and the measures that really work in a business setting.
-
01Identity and Security
Compliance Intune Under Windows s 11: Certification Will Be Handled by Microsoft Azure Certification
On September 17, 2026, Microsoft announced in the Windows message center a change affecting the compliance of Windows 11 devices managed by Intune. The " Windows Health Attestation" assessment—which checks for BitLocker, Secure Boot, and code integrity…
Reading time: 11 min
Read the article -
02Azure
Microsoft Sentinel In the Defender portal: What you need to prepare before March 31, 2027
After March 31, 2027, Microsoft Sentinel will no longer be supported in the portal Azure and will only be available in the Microsoft Defender portal. Microsoft states that all customers who are still using it in the portal Azure will be redirected to the…
Reading time: 11 min
Read the article -
03Identity and Security
Defender for Cloud Apps will retire its file policies on January 6, 2027, in favor of Purview
Microsoft is removing file policies from Defender for Cloud Apps on January 6, 2027. File-based data protection is moving to Microsoft Purview : a file policy that detects sensitive content and takes action on it is recreated as a strategy DLP, a f…
Reading time: 12 min
Read the article -
04Azure
Foundational CSPM will switch to an opt-in model on October 27, 2026, for new subscriptions Azure
Starting October 27, 2026, Foundational CSPM— Microsoft Defender 's free security posture management plan— Cloud, will no longer be enabled by default for new subscriptions Azure. A subscription created on or after that date will start with the pla…
Reading time: 10 min
Read the article -
05Identity and Security
Cyber Insurance Questionnaire: Measures an SME Agrees to Follow
The application form for Helvetia’s Special SME Cyber Insurance, dated July 1, 2026, poses the question in a single line: “Do you comply with the requirements?”, followed by “(See our cybersecurity brochure, page 4 and…
Reading time: 13 min
Read the article -
06Identity and Security
Requirement to Report Cyberattacks: Who Is Affected in Switzerland—and Who Is Not?
As of April 1, 2025, operators of critical infrastructure are required to report cyberattacks to the Federal Office for Cybersecurity (FOCS) within 24 hours of their detection. The two sections that set forth the penalty, 74g and 74h of the…
Reading time: 14 min
Read the article -
07Identity and Security
Switching IT Service Providers: An Inventory of Access Rights and Contracts
An IT service provider has access to your environment: this is necessary for them to do their job. Some of these access rights are set up in their name, others in yours, and the distribution is established over the years, folder by folder, s…
Reading time: 11 min
Read the article -
08Exchange
Microsoft 365 and Entra ID : Deadlines to Meet Before April 2027
Between August 31, 2026, and April 1, 2027, five mechanisms found in most tenants Microsoft 365 will no longer function according to their current rules: EWS access by applications to Exchange Online, calendar sharing with a partner tenant…
Reading time: 11 min
Read the article -
09Copilot
Governance of Microsoft AI Agents: What Agent 365 Changes, and What Decisions Need to Be Made
As of May 1, 2026, Microsoft Agent 365 is generally available for the commercial market, billed per user. Microsoft Entra Agent ID is available as of the same date. Together, they elevate AI agents from tools to objects of interest…
Reading time: 8 min
Read the article -
10Copilot
GDPR, the AI Act, and Sovereignty: Choosing an AI Solution Without Asking the Wrong Questions
The choice of an AI solution is often presented as a matter of product compliance. The reality is more complex: regulatory obligations fall largely on the user company, and no supplier contract covers them…
Reading time: 6 min
Read the article