Protection
What is conditional access, in plain terms?
Rules that decide whether a login is allowed based on more than the password: which device, is it managed and healthy, where from, was multi-factor completed. It turns a stolen password into a dead end.
Answered by Nate Weigel, Protection Director
The problem it solves
Passwords get stolen. Phishing, a reused password from another site, a laptop left in a car. Once someone has the password, a plain login lets them in from anywhere on earth. Multi-factor helps, but attackers have learned to trick people into approving prompts too.
What the rules look like
Only computers we manage can open company email. Logins from outside the country are blocked. A device with encryption turned off or patches missing is refused until it is fixed. Administrative accounts need multi-factor every time, from a known device. Each of those is a rule, written once, applied to every login automatically.
What your staff notice
Almost nothing, once their computer is enrolled. They log in from their work laptop and it works. The difference is what happens when the attacker in another country tries the same password: nothing.
Why insurers and auditors ask about it
It is the control that makes the others hold. A questionnaire that asks about multi-factor, device management and remote access is describing conditional access without using the name. We set it up as part of the plan for every Microsoft 365 client, and we did it for a financial firm whose regulator wanted to see the rules in writing.
Where we did this
Multi-factor on email but not on the remote gateway is a locked front door with the back door open. Do all of them.
Multi-factor everywhere Small businessYour cyber insurance questionnaire is a security audit you sign. Start it ninety days before renewal and every answer can be yes.
Answering the questionnairePeople also ask
How warm is too warm for our server room?
Equipment is designed for roughly 18 to 27 degrees Celsius, 64 to 81 Fahrenheit, measured at the front where it draws air in. The number that matters is not the one on a Tuesday afternoon; it is the one at 2am on a Sunday.
The full answerWhere should our server actually live?
In a space with airflow, stable power, no water above it and a door that locks. Heat is the most common environmental killer of business equipment, and the room that is fine in March is a different room in July.
The full answerWhat is a server room reorganization, and is it worth paying for?
It is making the room possible to reason about: inventory, cable management, labelling at both ends, documentation, power and airflow. It turns a two-hour outage into a twenty-minute one, and it is far cheaper scheduled than done in an emergency.
The full answer
"Draven persevered through many steps and conducted research to work through the account setup issue I was having after getting a new phone. He was fantastic, as always!"
Emily, law firmMeet Draven- A technician who knows your setup takes every request. Not a dispatcher, not a queue.
- Every closed ticket is surveyed and a partner reads every response.
- 99.5% of surveys come back positive.
- Family-owned since 2005. 21 years in the same corner of Wisconsin, not going anywhere.
"Another great job by Midwest IT. Our company just loves your fast response to our issues."
Client, 2024 surveyWant to know what a stolen password would get someone?
Ask us to check your tenant. It is a short review.
Talk to a partnerTalk to a partner, not a sales script.
Tell us what is going on. A partner will call you back the same business day, look at what you have, and tell you honestly whether we are the right fit. No pricing pressure, no pitch deck.