Category: Privileged Access | Andy Kemp Consulting

18 Aug 2026 16 min read

Bringing Authentication Assurance Together

Bring Authentication Assurance together into a complete architecture, connecting Trust Levels, passkeys, FIDO2, Authentication Strengths, Conditional Access, TAP, privileged acc...

Authentication Assurance · Part 9

Cyber Security #Conditional Access #Consulting

17 Aug 2026 13 min read

Building High-Assurance Administrative Accounts

Learn how to build high-assurance administrative identities by combining dedicated accounts, FIDO2 security keys, Authentication Strengths, Conditional Access, PAWs, PIM and sec...

Authentication Assurance · Part 8

Cyber Security #Conditional Access #Consulting

13 Aug 2026 21 min read

Temporary Access Pass and Secure Onboarding

Explore how Temporary Access Pass can securely bootstrap and recover passwordless authentication, and why single-use, multi-use, duration and identity verification all matter wh...

Authentication Assurance · Part 7

Cyber Security #Conditional Access #Consulting

13 Aug 2026 11 min read

Authentication Strengths in Microsoft Entra

Learn how Microsoft Entra Authentication Strengths and Conditional Access can turn Authentication Assurance from an architectural principle into an enforceable security control.

Authentication Assurance · Part 6

Cyber Security #Conditional Access #Consulting

13 Aug 2026 11 min read

Choosing the Right Authentication for Each Trust Level

Learn how to align authentication methods with identity Trust Levels, from dedicated FIDO2 security keys for critical administrators to device-bound and synced passkeys where ap...

Authentication Assurance · Part 5

Cyber Security #Conditional Access #Consulting

11 Aug 2026 6 min read

Not All Passkeys Provide the Same Level of Assurance

Discover why phishing-resistant authentication doesn't automatically provide the same level of operational assurance, and how different passkey implementations influence privile...

Authentication Assurance · Part 4

Cyber Security #Conditional Access #Consulting

11 Aug 2026 4 min read

Understanding Modern Passkeys

Learn what passkeys are, how they work and the differences between platform, roaming, synced and device-bound passkeys in modern authentication.

Authentication Assurance · Part 3

Cyber Security #Conditional Access #Consulting

11 Aug 2026 4 min read

The Evolution of Authentication

Discover how authentication has evolved from passwords to phishing-resistant passkeys, and why understanding that journey is key to designing modern identity security.

Authentication Assurance · Part 2

Cyber Security #Conditional Access #Consulting

11 Aug 2026 4 min read

Why Authentication Assurance Matters

Why modern identity security is about more than enabling MFA. Learn why authentication assurance should increase alongside the value and impact of the identities you're protecting.

Authentication Assurance · Part 1

Cyber Security #Conditional Access #Consulting

8 Aug 2026 3 min read

Authentication Assurance – Introduction

An introduction to Authentication Assurance and why modern identity security is about more than simply enabling MFA or going passwordless.

Authentication Assurance

Cyber Security #Continuous Improvement #Entra ID

6 Aug 2026 5 min read

Building a Modern Privileged Access Strategy

Learn how to build a modern privileged access strategy by combining Trust Levels, Privileged Access Workstations, phishing-resistant authentication, Conditional Access, PIM and...

Privileged Access Workstations · Part 8

Cyber Security #Cloud Security Strategy #Cyber Security

6 Aug 2026 5 min read

Operating and Maintaining a Privileged Access Workstation

Learn how to operate and maintain a Privileged Access Workstation by managing configuration drift, patching, compliance, monitoring and governance to preserve administrative ass...

Privileged Access Workstations · Part 7

Cyber Security #Cloud Security Strategy #Continuous Improvement

6 Aug 2026 5 min read

Hardening a Modern Privileged Access Workstation

Learn how to harden a modern Privileged Access Workstation using Microsoft Intune, Microsoft Defender, Conditional Access, PIM and Windows security features to build a trusted a...

Privileged Access Workstations · Part 6

Cyber Security #Cyber Security #Endpoint Security

6 Aug 2026 5 min read

Choosing the Right Administrative Environment

Learn how to choose the right administrative environment by balancing risk, operational requirements and assurance when deploying Privileged Access Workstations.

Privileged Access Workstations · Part 5

Cyber Security #Cloud Security Strategy #Cyber Security

6 Aug 2026 6 min read

Virtual Privileged Access Workstations

Explore how Virtual Privileged Access Workstations (vPAWs) provide a secure and practical alternative to physical PAWs by balancing administrative assurance with operational fle...

Privileged Access Workstations · Part 4

Cyber Security #Cloud Security Strategy #Cyber Security

6 Aug 2026 5 min read

Physical Privileged Access Workstations

Discover why dedicated physical Privileged Access Workstations remain the highest assurance option for protecting privileged identities and securing administrative environments.

Privileged Access Workstations · Part 3

Cyber Security #Cyber Security #Entra ID

5 Aug 2026 5 min read

When Do You Need a Privileged Access Workstation?

Discover when a Privileged Access Workstation is justified, how to assess administrative risk, and why workstation assurance should reflect the level of trust placed in an ident...

Privileged Access Workstations · Part 2

Cyber Security #Cyber Security #Endpoint Security

4 Aug 2026 7 min read

What is a Privileged Access Workstation

Discover what a Privileged Access Workstation (PAW) is, why it matters, and how it strengthens privileged identity security by protecting the administrative trust boundary.

Privileged Access Workstations · Part 1

Cyber Security #PAW #Privileged Access

4 Aug 2026 4 min read

Privileged Access Workstations: Introduction

An introduction to Privileged Access Workstations (PAWs), why they matter, and how they fit into a modern privileged identity strategy using Microsoft Entra.

Privileged Access Workstations

Cyber Security #Continuous Improvement #Cyber Security

29 Jul 2026 5 min read

From Tier 0 to Trust Levels: Rethinking Privileged Access for the Cloud Era

Traditional administrative tiering was built for an infrastructure-centric world. As organisations move to cloud-native identities, Zero Trust and passwordless authentication, t...

Cyber Security #Cyber Security #Enterprise IT

21 Nov 2025 15 min read Updated 6 Jan 2026

Applications – The Third Pillar of Zero Trust

Introduction In the first two posts of this Zero Trust series, we established that identity is the new perimeter and devices are the frontline of defence. By verifying every user…

Cyber Security #Conditional Access #Entra ID

12 Nov 2025 20 min read Updated 6 Jan 2026

Devices – The Second Pillar of Zero Trust

Introduction In the first post of this series, we explored how identity has become the new perimeter in a world where users, apps, and data are no longer confined to…

Cyber Security #App Protection Policies #BYOD

31 Oct 2025 12 min read Updated 6 Jan 2026

Identity: The New Perimeter in Zero Trust

Welcome to the first deep dive in my Zero Trust blog series. If you’ve read the series introduction, you’ll know that Zero Trust isn’t a single product or a quick…

Azure #Entra ID #Microsoft

23 Mar 2025 6 min read

Virtual PAW – Part 4 – Completing the basic setup

So this is part 4 of my multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction In this part I’ll go…

Azure #Azure #Entra ID

27 Feb 2025 7 min read

Virtual PAW – Part 3 – Deploying the session hosts

So this is the 3rd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW.. Introduction Welcome to the 3rd…

Azure #Azure #Entra ID

18 Feb 2025 6 min read

Virtual PAW – Part 2 – Core Components

So this is the 2nd part of a multi part series on my journey with Bicep and ARM Templates and deploying AVD as a PAW. Part One was the high…

Azure #Azure #Microsoft

14 Feb 2025 7 min read Updated 18 Feb 2025

Virtual PAW – Part 1 – A high level overview

I have decided to create this as a multi part post to hopefully make it easier to understand. Introduction So Following on from my last post I thought I’d share…

Azure #Azure #Azure Virtual Desktop

5 Feb 2025 6 min read

Why use a PAW?

Introduction Following on from my previous post I have been asked why I use a PAW for my own tenant, and or why not just use a conditional access policy…

Azure #Entra ID #Microsoft

15 Jan 2025 3 min read

Securing my privileged access with AVD

I’m trying to “lead by example” (I use that term loosely), when it comes to privileged access. A bit of background For a long time my regular Microsoft 365 account…

Azure #Azure Virtual Desktop #Azure

2 Jul 2024 7 min read

Privileged Identity Management and Access Tiers

Introduction I’ve been working with a customer recently assisting with sorting out their privileged access and assisting them with their adoption of PIM (Privileged Identity Man...

Entra #Microsoft #Microsoft Entra