Field notes on Compliance.
Every OSH post tagged Compliance: practical write-ups from real engagements, not vendor decks.
Everything filed under Compliance
Posts from OSH engineers working in Compliance. Migrations that went sideways, configurations we have learned the hard way, and the practical decisions worth writing down.
A Practical Guide to Mac Compliance with Hexnode and Intune
How to enforce real Mac compliance with Hexnode or Intune in 2026: FileVault, screen lock, OS updates, PPPC, ABM enrolment and the gaps to …
Read field noteCyber Insurance and DMARC: What Underwriters Actually Want to See
Cyber-insurance underwriters now read your DMARC policy tag, MFA scope, and EDR roster. Here is what a 2026 renewal questionnaire asks and …
Read field noteGoogle Workspace Lockdowns: Hardening for SMEs and Regulated Teams
Practical Google Workspace hardening for SMEs and regulated teams: day-1 baseline, CIS GWS v3, Context-Aware Access, DLP for ZA ID numbers, …
Read field noteSecuring Microsoft Business Premium: A Practical Walkthrough
A 7-day sequence to actually use the Microsoft Business Premium security stack you're already paying for: Conditional Access, Defender, …
Read field noteSecurity Audits: What Good Looks Like in 2026
What a proper SMB security audit covers in 2026: the 7-domain checklist (identity, endpoint, email-auth, data, MDM, backup, IR), and when to …
Read field noteGot a compliance problem we haven't written about?
If you are stuck on something we have not covered, tell us. The next field note is usually a client question we did not have a tidy answer for yet.
