What is Zero Trust and do we need it?
Zero Trust is a security model that assumes no user, device or network is trusted by default — even inside your perimeter. With remote work and cloud adoption, traditional perimeter security is obsolete. Zero Trust — implemented through Microsoft Entra ID Conditional Access and Defender — is now the recommended enterprise security model for any organisation with cloud workloads.
What does Microsoft Sentinel do and is it better than a traditional SIEM?
Microsoft Sentinel is a cloud-native SIEM and SOAR platform that ingests signals from across your Microsoft estate and third-party tools, applies AI to detect threats, and automates response playbooks. It scales elastically, costs significantly less than legacy SIEMs at enterprise volumes, and provides native integration with the entire Microsoft security stack.
We need to achieve ISO 27001 — can Cambay help?
Yes. We run structured ISO 27001 readiness programmes using Microsoft Purview Compliance Manager as the framework. We map your controls, implement technical measures in the Microsoft security stack, and prepare you for audit. We have 100% first-time pass rate with clients we've taken through ISO 27001.
How do you handle GDPR compliance in the Microsoft cloud?
Microsoft Azure and M365 are GDPR-compliant platforms. We implement Microsoft Purview sensitivity labels, data loss prevention policies, retention policies, and audit logging to ensure personal data is handled correctly throughout its lifecycle. We also configure Microsoft's Data Subject Request tools to streamline GDPR access requests.
Can Microsoft security tools replace our existing third-party security products?
In most cases yes — Microsoft's E5 security stack (Defender XDR, Sentinel, Entra ID P2, Purview) covers everything from endpoint protection and identity governance to SIEM and DLP. Consolidating to the Microsoft stack typically reduces security tool costs by 40–60% while improving integration and visibility.
What happens if we have a security incident — how fast can you respond?
For clients on our Managed Security service, we provide a 4-minute mean time to respond (MTTR) via our Sentinel SOC. We have automated playbooks that isolate compromised devices, disable breached accounts, and contain threats within minutes of detection — minimising blast radius and business impact.
