Security Foundation
Identity, endpoints, Defender, Conditional Access, hardening and the Microsoft security baseline.
- Identity hardening & MFA
- Defender XDR
- Microsoft security baseline
All services
Cloud Security
Turn security priorities into working controls.
Zero Trust across identity, endpoints and data, with Defender XDR, Microsoft Purview and Conditional Access as one connected architecture, not a checklist of separate tools.
The problem
Why this matters.
Security bolted on afterwards is expensive and incomplete. Audits and security incidents usually expose the same root cause: ungoverned access that grew over years.
Passed the pen test, failed the audit
Technical controls existed but without documented policy or ownership. We build the governance layer auditors actually check.
One compromised account, tenant-wide risk
Flat admin access with no Conditional Access. Our persona-based CA framework limits the blast radius from the start.
Security control loop
- IdentityMFA, Conditional Access and privileged access.
- EndpointsDefender XDR and device hardening against the Microsoft baseline.
- DataPurview, sensitivity labels and retention policies.
- WorkloadsZero Trust instead of classic VPN, via Entra Private Access.
- DetectionSignals from Defender XDR and Entra ID brought together.
- ResponseOwnership for investigation and remediation is defined, not improvised.
- ReviewA recurring review that leads back to identity, instead of staying a one-off.returns to identity
Solution areas
Zero Trust & Secure Access
Replace legacy VPN and DirectAccess with Microsoft Entra Private Access and Global Secure Access: identity- and context-aware access instead of a classic VPN tunnel.
- Entra Private Access & Global Secure Access
- VPN / DirectAccess replacement
- Conditional Access for app access
Information Protection & Governance
Purview, sensitivity labels, retention, data protection and policies.
- Purview & sensitivity labels
- Retention policies
- Data protection policies
How we work
Baseline assessment
Existing policies, exceptions and access models are documented and evaluated.
Harden identity
Persona-based Conditional Access framework, MFA and protection of privileged roles.
Endpoint and information protection
Defender XDR and Microsoft Purview configured to hold up under both daily operations and audit.
Ongoing review
A recurring review cycle so the security model doesn't drift unnoticed.
Customer outcome
Around 40 users and endpoints centrally secured through Microsoft Entra ID, Defender and Global Secure Access, at Segafredo Zanetti.
View customer storyRelevant Sprint
Security & Modern Workplace Assessment
View SprintOngoing operation
After go-live, Managed Cloud & Security takes over continuous monitoring, policy maintenance and responsibility for security incidents.
Managed Cloud & Security
Typical engagements
- Security Assessment
- Security Baseline
- VPN Replacement
- Entra Private Access
- Defender
- Purview
- MailFlow Guard
What should change in your Microsoft environment?
In 30 minutes, we'll clarify together:
- Clarify the current situation and objective
- Structure possible solution paths
- Define the most sensible next step
Book a first conversation
Prefer to write? hello@clouddream.team
30 minutes · Microsoft Teams · No obligation
