R-04 Entra & Security
Conditional Access with a sense of proportion, not full throttle
Security is not a scale on which more is always better. Beyond a certain point, every additional policy buys security at the price of workarounds.
The point where it tips
ESPRESSO-MOMENT
When employees start sharing documents through private channels because the official route has too many steps, the tenant has not become more secure.
The concrete check of the exclusions is in the troubleshooting guide for retention policies; the decision level is in Deleting data nobody wants to delete.
