Whitepapers
Cleaned, externally usable versions of high-value modernization whitepapers.
| Document | Description |
|---|---|
| AD to Entra ID — The Structural Migration Problem | Why the governance gap is structural, not technical. |
| Modernization Journey | Forty-year arc from mainframe single source of truth to five principles for the way forward. |
| Hybrid Join Without Governance | Why converting a large fleet to hybrid join is a near-effortless tenant switch, and the loss ledger if taken without governance. |
| Session vs. Telemetry | Why persistent session-based identity and continuous-verification telemetry are incompatible. |
| Network Transport and Governance | Transport is a physics decision; control is a compliance decision. |
| Federal Compliance for Moderate Agencies | Which mandates bind the agency, which bind the vendor. |
| Zero Trust Governance Principles | Why cross-cutting capabilities move a program past Initial maturity. |
| Federal SSOT Alignment | Single Source of Truth as the architectural response to federal data-governance obligations. |
| SD-WAN vs. DIA Under TIC 3.0 | Transport is a physics decision; control is a compliance decision. |
| Ticket-to-Machine, Not Ticket-to-Human | Why changing state isn’t compliance evidence. |
| Next Generation DNS | How DNS became the application surface, security enforcement plane, and identity substrate of the hybrid multi-cloud enterprise. |
| Next Generation DDI | Now a multi-chapter modernization book: governing DNS, DHCP, and IPAM as the hybrid multi-cloud control plane, including split-brain, FedRAMP Moderate, SD-WAN interception, and the five critical configuration decisions. |
| FMP vs Microsoft Native Tools | Why Microsoft’s 12 tools don’t replace a governance orchestration layer. |
| HR-Driven Identity (series) | HR systems of record as the authoritative source for identity provisioning. |
| What Changed at FedRAMP — and What Agencies Can Now Ask Microsoft For | The authorization boundary under FedRAMP 20x, what GCC is and isn’t, and which commercial features are now worth requesting. |
| The Branch-Edge Gap | Why Direct Internet Access plus SASE still needs a branch-edge policy layer that steers, measures and attests transport. |
| The Long Interim | Branch networking for agencies that won’t deploy SD-WAN or adopt a TIC 3.0 use case for years, and the obligations that already land on branch equipment. |
Cleaned extractions for project use. No internal branding or document identifiers.