Program · Security ManagementComing soon

  • Entra ID

Conditional Access policies

Design Conditional Access policies, test them in report-only mode, roll them out in rings, keep them working, and move to risk-based access.

Written for Microsoft 365 E5

The playbooks for this topic are being written. Follow the topic to hear when the first one is published.

Essential path

One playbook per stage: the minimum to do this well.

  1. 1. Plan

    Not written yet

    What do we decide, and who owns it?

  2. 2. Prepare

    Not written yet

    Does it work with how we work, and are people ready?

  3. 3. Deploy

    Not written yet

    How do we pilot it and scale it without disruption?

  4. 4. Maintain

    Not written yet

    How do we keep it working as built?

  5. 5. Refine

    Not written yet

    How do we tune it and take it further?

↻ Refine feeds what you learn back into Plan.

Follow this topic

RSS · JSON Feed (Reviewed every 6 months)