Lewis Barry

"Don't put all your eggs in one basket" is great advice at a farmers' market. It's also the phrase behind a thousand security stacks, five vendor consoles, and a pile of alerts nobody could connect. This session puts every egg in one basket and shows you how to secure it properly.

We start with a breach, pieced together from the attacks that land week after week. A convincing phishing email. An attacker-in-the-middle session grab. A Conditional Access exclusion for an executive who wanted to work from their MacBook on the beach. Something running as local admin. By the time the EDR starts shouting, the attacker has settled in.

Then we rebuild the tenant, layer by layer, with one vendor: Microsoft.

This session is all about prevention. Most breaches trace back to how the tools were configured, so we'll spend three hours on the configuration that stops attacks early.

Over three hours, we'll cover:

Identity first. Conditional Access policies you write yourself, built around how your business actually works.
Email that holds the line. SPF, DKIM, DMARC, then Defender for Office 365 tuned properly as your full email security layer.
Endpoints locked down with Intune. Starting with a baseline, ASR rules in block mode, and zero local admins.
Defender for Business as the safety net. Enterprise-grade AV and EDR, plus Cloud App Discovery to see who's feeding company data to their favorite AI tool

A brief look at Purview, saved for last. Data protection lands best once identity and devices are secured.

Along the way, we'll show how one tightly integrated stack gives you a single picture across identity, email, and endpoint when an incident hits, and how much faster your team moves when they know one platform deeply.

Bring your hardest questions, your favorite "we've always done it this way" examples, and the colleague who count new tools like Vegas chips.

All eggs, one basket.