by Jesper Kråkhede, Sweden
Posted in Security Architecture, Technology on Sep 24th, 2026
For years, a proper SOC has been something for large organisations. You needed a SIEM, people around the clock, detection engineers and a lot of integration work. Smaller organisations bought a service, or did without. This month Microsoft made an integrated SOC experience in Defender available to eligible Microsoft 365 E5 and E7 customers who […]
Posted in Business, Security Architecture on Sep 24th, 2026
This week the Swedish data protection authority fined the system supplier that was hit by ransomware in August last year. The attack affected a large share of the country´s municipalities, and sensitive data about employees was published. The fine was 1.8 million kronor, for not having appropriate technical and organisational security measures under the GDPR. […]
Posted in Business, Security Architecture on Sep 16th, 2026
I wrote about the EU AI Act in February and August last year. A lot has happened since, and I see a dangerous misunderstanding spreading, so let me check where we are. In June the EU adopted an amendment to the AI Act, the so called digital omnibus on AI. It postponed the requirements for […]
Posted in Security Architecture, Technology on Sep 9th, 2026
In February 2024 I wrote about multitenant management in Defender, which gave the SOC one view across several tenants. It solved the security operations side. The administration and configuration side stayed hard. In August, Microsoft Entra Tenant Governance became generally available, and it addresses exactly that. This post is longer than usual, because the topic […]