Black October: what the label hides
Most of what circulated as 'Black October' doesn't hold up. What's actually confirmed, what it means for a regulated Azure estate, and the one query I'd run first.
Managed Cloud · Azure · Compliance
I make regulated Azure platforms repeatable, compliant and affordable.
I run the Managed Cloud team at Sitecore, turning bespoke Azure engineering into repeatable services for regulated platforms. This is where I write about what makes that work: productising managed services, the AI automations that actually pay for themselves, and keeping an estate compliant and affordable at the same time.
Latest
All posts →PCI DSS v4.0.1 on Azure – three places I keep seeing estates fail their audit
PCI DSS v4.0.1 has been fully enforced for a while now. These are the three things I keep finding on regulated Azure estates that fail an audit – network segmentation, log retention and key rotation – and how I deal with each one in Azure.
From the archive
Earlier writing from my Sitecore and .NET years — kept here for reference.
