{"id":22829,"date":"2026-03-26T09:05:00","date_gmt":"2026-03-26T16:05:00","guid":{"rendered":"https:\/\/www.microsoft.com\/insidetrack\/blog\/?p=22829"},"modified":"2026-04-02T15:02:10","modified_gmt":"2026-04-02T22:02:10","slug":"deploying-microsoft-baseline-security-mode-at-microsoft-our-virtuous-learning-cycle","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/insidetrack\/blog\/deploying-microsoft-baseline-security-mode-at-microsoft-our-virtuous-learning-cycle\/","title":{"rendered":"Deploying Microsoft Baseline Security Mode at Microsoft: Our virtuous learning cycle"},"content":{"rendered":"\n

The enterprise security frontier isn\u2019t just evolving. It\u2019s accelerating beyond the limits of traditional security models.<\/p>\n\n\n\n

AI acceleration, cloud adoption, and rapid growth of enterprise apps have dramatically expanded the attack surface. Every new app introduces a new identity. Every identity carries permissions. Over time, those permissions accumulate, often without clear ownership or regular review.<\/p>\n\n\n\n

\"A<\/figure>\n\n\n\n
\n

\u201cAn app is another form of identity. In a cloud-first, Zero Trust world, identity becomes the primary security perimeter, and access is governed by the principle of least privilege. Whether it is a user, an app, or an agent, when permissions are overly broad or elevated the blast radius expands dramatically, increasing risk exponentially.\u201d<\/p>\nB. Ganti, principal architect, Microsoft Digital<\/cite><\/blockquote>\n\n\n\n

Inside Microsoft Digital\u2014the company\u2019s IT organization\u2014we recognized this early. Many of our highest\u2011risk security scenarios didn\u2019t start with malware or phishing. They started with access. Specifically, apps running with permissions beyond what they required.<\/p>\n\n\n\n

\u201cAn app is another form of identity,\u201d says B. Ganti, principal architect in Microsoft Digital. \u201cIn a cloud-first, Zero Trust world, identity becomes the primary security perimeter, and access is governed by the principle of least privilege. Whether it is a user, an app, or an agent, when permissions are overly broad or elevated the blast radius expands dramatically, increasing risk exponentially.\u201d<\/strong><\/p>\n\n\n\n