The Journal.
Security advisories, Microsoft 365 updates, AI guidance, and occasional bulletins from the Empreus workshop.
The quarterly access review nobody does — and how to make it painless.
Leavers who still have a mailbox, contractors with permanent admin, and shared logins nobody owns.
Why multi-factor authentication alone no longer stops account takeover.
Session token theft, MFA fatigue, and what phishing-resistant actually means.
The Microsoft 365 price change has landed — what to check now.
Where over-assigned licences hide, and why the reconciliation matters more than the negotiation.
The short list we walk through before a new financial year begins.
Access, assets, licences, and the restore nobody has tested.
How to let it in safely — before you switch it on.
Fix the data and permissions first, or risk surfacing payroll to the whole company.
What changes for ACT clients on 1 July — and how to plan.
Month-to-month billing, mitigation steps, and what we're recommending for clients.
The case for managed EDR over traditional antivirus, in 2026.
Detection, response, and what 24/7 coverage actually buys you.
Password management without the friction — our recommended setup.
Personal vaults, shared collections, recovery, and the IT password spreadsheet problem.
On staying small and being selective about who we work with.
A note on the relationships we look for, and the ones we politely decline.
Which standard applies to you — and what compliance actually costs.
A short orientation for organisations entering federal procurement.
What we test, how often, and why most MSPs don't.
What good recovery testing looks like, what's typical, and where to start.
Four things worth settling while the year is still quiet.
Hardware refresh, licence true-up, the documentation gap, and one deliberate improvement.