Advisory for Microsoft security and AI governance

Secure your Microsoft environment. Govern your platforms and AI.

I advise CISOs, CIOs and boards on securing Microsoft platforms and infrastructure — and on governing the AI and agents built on them. Three decades of hands-on depth behind every recommendation.*

Get in touch →or start with the writing ↓

*️hands-on since Windows NT 3.51

Helsinki, Finland

Microsoft MVP — Security30+ years in the fieldFounder, Not Bad Security350+ podcast episodes

01 / About

I've worked on Microsoft platforms since 1994 — from Windows NT 3.51 to Entra, Azure, Microsoft 365 and now the agentic layer on top of them. Today I'm founder and CEO of Not Bad Security, a Helsinki consultancy of six senior security architects working with organisations across the Nordics.

I'm a Microsoft MVP in Security, co-host of the Ctrl+Alt+Azure podcast, and I'm on the board of Microsoft Security User Group Finland.

02 / Work where I excel

Advisory & board work

For leadership teams that want a senior technical voice in the room. Ongoing counsel on Microsoft security strategy, risk, and roadmaps.

AI governance frameworks

For organizations rolling out Copilot and agentic AI. A working governance model covering Agent 365, Copilot, and the security of your agent fleet.

Security architecture reviews

For teams who want their Entra, Azure, and Microsoft 365 estate examined properly. A prioritized findings-and-fixes report, not a scan dump.

Speaking & keynotes

For conferences and internal events. Practical, demo-heavy sessions on Microsoft security and AI agents — no slideware filler.

03 / Selected writing

Governing Generative AI with Data Security Posture Managementapr 2025 · #ai and machine learningData Security Posture Management (DSPM) is becoming essential for protecting your organization's data.Managing cybersecurity risks and vulnerabilities with Microsoft Security Exposure Managementmar 2025 · #cybersecurityInsights on Microsoft Security Exposure Management (MSEM) to help you navigate the shift toward Zero Trust and centralized risk visibility.How to prepare for Microsoft Security Copilotaug 2023 · #azure openaiAs Microsoft Security Copilot nears release, practical steps you can take today to prepare for its arrival.All writing →