The AirGap Blueprints · A Cloud Security Strategy Guide

To follow

One Name, Every Answer by Convention

A Practical Guide to Naming Conventions for Groups, Accounts and Policies across Microsoft Entra ID, Intune and the Defender Suite

Notify me when it's out
Cover of One Name, Every Answer by Convention by Kevin Lanflo

Why this book

A good name answers the question before anyone has to ask it: what this is, who owns it, what it does and how risky it is. This guide gives you a naming convention for groups, accounts and policies that works across Entra ID, Intune and Defender — and the rules to keep it from drifting.

Who it's for

  • Teams inheriting a tenant full of "Test-Policy-Final-2" objects
  • Architects standardising Entra ID, Intune and Defender together
  • Auditors and service desks who need to read the tenant at a glance

What's inside

  1. What a name must tell you, and in what order
  2. Conventions for groups, admin and service accounts
  3. Conventions for Conditional Access, Intune and Defender policies
  4. Encoding environment, scope and risk tier without long names
  5. Enforcing the convention, including group naming policy
  6. Cleaning up an existing tenant without breaking assignments

Built like every AirGap Blueprint

  • Rationale
  • Planning
  • Implementation
  • Adoption

Each guide takes one control from why it matters to running it in production, with the decisions, settings and review cadence written down — not just the clicks.