Control Tower: threats and ladders.
A suspiciously familiar ladder-climber about phishing, fake invoices, rogue prompts and the heroic business of getting to the security control before the office gets owned.
New high score!
Score 0
Incident declared
Score 0
Control Tower leaderboard
Top ten resets every Monday. The all-time top three live forever. Beat a score, claim a slot.
This week
- Loading the board…
All-time top 3
- Loading…
Dodging the phish is only half the job.
The joke is the hacker throwing nonsense from the top floor. The useful bit is the route: reduce risky clicks, verify requests, keep privileges tight and make sure the right controls are already in place.
Phishing
Fake urgency, dodgy links and invoice changes are easier to spot when staff know what normal looks like.
Identity
MFA and conditional access stop a stolen password turning into an all-access backstage pass.
Privilege
Approval flows and least privilege keep one bad click from becoming a full tenant incident.
Recovery
If the worst lands anyway, tested backups and rehearsed response make the difference between disruption and drama.
Want the actual controls checked?
NorthMSP’s free Security & IT Health Check reviews your Microsoft 365, identity controls, patching, backups and security baseline, then gives you a written report.