Alexander A.

Schools and entire trusts are being targeted more then ever, and whatever technology we put in place to protect schools, criminals are getting smarter and harder to spot - ultimately the end user is the biggest liability in all we do. Training and awareness is essential to support school staff in protecting themselves in and out of work. Concero Education Technology and Secure Schools are working together to make delivery of training as easy as possible. A simple platform for training delivery - connected to your MIS - and questions at the end to demonstrate learning allows clear oversight of training at your school. This is just part of a suite of cyber security tools we offer at a low cost to schools to protect them in these challenging environments. https://lnkd.in/e3pGHXee

11

Something new for app makers, as of June 2024 you'll be able to convert Canvas Power Apps into human readable YAML. What does that actually mean though, well let's look at three key benefits: 🚀 Easier management for controls used in and across applications. 🚀 Create templates for screens, promoting standardised applications. 🚀 Automate the creation of Canvas Power Apps. There's even more in the works but I won't spoil it all, check out the link below to find out more: https://lnkd.in/eA9dGpwP #appdev #businesstransformation #powerapps #alm #devops

10

How is your business harnessing data for better decisions? LBMC Technology Solutions is exploring how Microsoft Power Platform can transform operations and improve customer engagement. Have you used Power BI or Power Apps in your business? I'd love to hear how you are using them! #BusinessTransformation #MicrosoftPowerPlatform #DataDriven #CustomerEngagement

1

Article #2 was inspired by the anxiety I endured while trying to join #Config2024 live conference and how to improve the user experience by designing for cognitive disabilities. I’m excited for day 2 of Config, so far I’m most eager to test out Figma’s ai capability to rename layers. #AccessibilityDesign #CognitiveDisabilities #UXDesign #Neurodiversity #Sca11ywag #Figma #DesignForAll

14

2 Comments

One of my favorite things about Kat Norton (aka Miss Excel) is her saying "if it's not a HELL YES...it's a NO". I resonate with this so much. Because I can't do something in regular Yes mode. I only feel comfortable doing something in hell yes mode. Actually, if I'm NOT in hell yes mode, it's very easy to tell. This is the level of intensity I bring to everything. My thought is if it ISN'T hell yes, why am I here? If you want some hell yes in motion, check out my podcast. My latest episode is about my disdain for companies acting like it's not 2024. #sharepoint #govcon #projectManagement Check it out here:

1

Are you a Sharepoint user? Are you considering implementing it in your organization? A powerful tool, perhaps, but what do you need to consider before you pull the trigger? Watch this fascinating discussion with Therman Trotman https://lnkd.in/gk8dQ97n

2

🔐 A Critical Wake-Up Call for Education Leaders As the CEO of TriVigil and someone deeply invested in the intersection of education and technology, the recent incident involving the New Haven Public Schools' IT Director is a stark reminder of the growing cybersecurity threats facing our educational institutions. This incident is not just about a breach; it's about the broader implications for student safety, data integrity, and public trust. Cybersecurity in our schools isn’t just an IT issue; it’s about protecting our children’s futures. We need to ensure that our schools are not just reactive but proactive in safeguarding sensitive information and preventing these threats from happening in the first place. It’s time for decisive action—educational leaders must take the lead in fortifying their institutions against cyberattacks. We must drive continuous improvement, stay ahead of emerging risks, and ensure our schools are prepared to face any challenge. We are all in this together! If you’re looking to elevate your institution’s cyber posture, I’d be glad to connect and discuss how we can support your efforts. #Cybersecurity #Education #EdTech #Leadership #Trivigil [Link to the news article:](https://lnkd.in/daT3ctRG) #Cybersecurity #Education #EdTech #Leadership #Trivigil

13

1 Comment

Join me today for a webinar with the ICBA In the face of constant cybersecurity threats, it's easy to feel discouraged. Most penetration tests exploit common weaknesses and misconfigurations, mirroring real-world attack methods. But what if you could turn the tables on attackers? While attackers only need to be right once, defenders must be right every time. Frustrated attackers often make mistakes or target easier victims, giving defenders a crucial advantage. Learn seven free strategies you can implement today that frustrate attackers into a self-defeating spiral. Learning Objectives Discover the most common attacker techniques. Learn defensive techniques to disrupt the attack. Build a process to keep up with changes in attack techniques. https://lnkd.in/eyf5Y4fx

2

The Wild West of Microsoft SharePoint - Taming the Risks of Uncontrolled Usage If you have any questions about this article, please feel free to reach out to Christopher McNaughton or the SECMON1 Team.

3

Conference alert ... BCS, The Chartered Institute for IT, IT Leaders conference is today, if you haven't registered yet, you can still attend as it's virtual. Event Title: The Changing Demands on IT Leaders (ITLF Conference) Date and time: 21st May 14:00 to 17:00 Format: Virtual Chairs: Somayeh Aghnia FBCS & Edward Steinmueller I am looking forward to hearing from my fellow speakers ... Why Leaderpreneurs are needed – Shakeeb Niazi FBCS CITP FIoEE FIET Why Service Resilience now – Gill Ringland Insourcing and outsourcing – Matt Sharp Implementing universal access to AI technology for employees - Rebecca Salsbury A special thanks to Somayeh Aghnia FBCS and Jonathan Leeson FBCS CITP CEng for organising. Be Safe. Pay it Forward. Shakeeb #entrepreneurs #entrepreneurship #funding #startup #scaleups #grants #innovation #internationalisation #business #businessgrowth #businessgrowthstrategy ##investmentopportunity #investmentstrategy #investments #itleadership #bcs If you haven't registered yet, here is the link:

17

So, what's this update all about, and why should you be excited? Well, up until now, Microsoft's platform allowed only a single author to edit a SharePoint page at a time. If someone was working on a page, others had to wait in line until that person either published or saved their draft. So frustrating! But here's the good news: post-update, the collaborative floodgates are opening! Multiple authors will be able to dive in and edit a page or news post simultaneously. Imagine the boost in productivity and the seamless teamwork that's about to unfold. And the best part? There's zero prep work required on your end for this update. However, it's a great idea to give your content creators a heads-up about this new superpower they're about to receive. It's time to get excited about the possibilities this will unlock for your organization! I know I can't wait for this! Microsoft has already initiated the deployment process for select release tenants, with a full rollout expected to wrap up by the end of July 2024. Everyone can look forward to general availability starting in August. Keep an eye on the progress with Microsoft 365 Roadmap ID 124853.

3

🚨Notice to #SharePoint and #Search admins Read this helpful article by my master of the #PnP Search — the one and only Kasper — about making the Title property searchable:

1

https://lnkd.in/gZwnzdcM The cybersecurity talent shortage is a growing crisis. The U.S. alone needs over 225,000 more skilled professionals to fill the gap. In response, the White House is taking action—rolling out initiatives to build a diverse cyber workforce and secure critical infrastructure. This is not just about protecting companies; it’s about national security. Cyber is where the future is headed. Investing in education and workforce training will ensure we stay ahead of growing threats. Are we ready for the challenge? #cybersecurity #talentshortage #wh #workforcedevelopment #itcareers #cyberjobs #hiring #infosec #threatprotection #cyberattack

1

Why do we need #EntraID #emergencyaccess? #TrustEverybodyButCutTheCards The main reason for implementing emergency access is that there needs to be a #backupplan if #administrativeaccess for personal accounts is locked out. ***** #Misconfiguration in organization’s #conditionalaccess policies If there’s a misconfiguration in organization’s conditional access policies that locks out administrator access, then more often than not, the impact typically affects a whole lot a other users too. If you don’t have emergency accounts to regain access to the tenant, those hours turn to weeks or a month really quickly. Setting up emergency access is “low effort, high reward” in this situation. The risks here are far more severe than the cost of implementing the emergency access. ***** #Multifactor #authentication method for (Global) administrators has an #outage If the multifactor authentication method for (Global) administrators has an outage (if it’s reliant on mobile network or software authenticator) and there are no other admins that could assign Temporary Access Passes to you. Of course, the emergency account could have the same broken MFA method, but that’s why it’s recommended to make two or more accounts, all with different MFA methods. ***** company’s only #GlobalAdministrator … is no more #available There might be a situation, especially in the smaller companies, where there are not many administrators. Say, company’s only Global Administrator decides to part ways with the company and there’s bad blood between him and the company or he gets into an accident and is hospitalized and there’s no one else that could suddenly elevate into a global administrator role. ***** #Hostile #takeover Your company has decided to use synced accounts for administrative access including your emergency accounts. An #adversary randomly, but successfully #phishes on of your employees, performs an #accounttakeover and hacks his way into your network, where he moves laterally and does #credentialdumping after which he completes #privilege escalation to #domainadmin to ultimately gain domain dominance. He decides to disable or hard delete some administrative accounts in Active Directory. Those changes will be reflected in Entra ID either disabling or placing the user account to Entra recycle bin. He changes the emergency account #password in AD which is synced to cloud. Your emergency account did not have #MFA, so adversary logs in with it to find out that the emergency account has a permanent Global Administrator role. He does not see any other emergency accounts which makes him excited. It is his #tenant now, and you don’t have access to the emergency account anymore. You try to reset the password for the emergency account, but the adversary has already enrolled his own MFA method to it and turned off SSPR tenant-wide…#Checkmate! Source: https://lnkd.in/d4zJp83q #TrustEverybodyButCutTheCards

6