Blog
Articles from our consultants across Dynamics 365, the Power Platform, cloud engineering, cyber security, AI and custom software.
Taking over someone else's codebase
The rewrite pitch is always available and usually wrong. What the first ninety days should contain instead.
Ha Nguyen
Read the post →Your ERP is not a reporting archive
Every migration hears the same request: ten years of history in the new system. Where history should actually live.
Duke Le
Read the post →What a vCISO actually does with a few days a month
Most mid-sized organisations need CISO-level judgement a few days a month, not a hire. What the time contains.
Ben Jones
Read the post →What good D365 support looks like after hypercare
The estate will be live for a decade. The support arrangement decides whether it ages like infrastructure or neglect.
Marcel Rizzolo
Read the post →Where avoidable cloud spend hides
Most estates carry 20 to 30 per cent of avoidable spend, and it hides in the same places every time.
Harry Le
Read the post →The evaluation harness matters more than the model
Teams agonise over model choice and then measure quality by vibes. The harness is the asset that outlives every swap.
Duke Le
Read the post →Modelling Power Platform licensing before you build
Premium connectors, Dataverse capacity, and per-user maths that changes shape at scale. Model it before the first invoice.
Marcel Rizzolo
Read the post →Assemble, Operate, Transition: how our offshore delivery centre works
Offshore delivery has a reputation problem it mostly earned. What actually does not work is the bench.
Ha Nguyen
Read the post →Dual-write between F&O and Customer Engagement: where it works and where it hurts
The pitch is achievable, inside boundaries the marketing does not mention.
Marcel Rizzolo
Read the post →Scoping a penetration test attackers would respect
A test is only as useful as its scope, and most scopes are written to be affordable rather than informative.
Ben Jones
Read the post →Living with One Version: absorbing D365 updates without fear
Microsoft ships updates on its schedule, not yours. The fix is a cadence, not a committee.
Marcel Rizzolo
Read the post →Role-aware RAG: retrieval that respects permissions
An assistant that answers from everything it has indexed will eventually answer someone with a document they were never allowed to read.
Duke Le
Read the post →Landing zones as code: a new environment should be a pipeline run
If a new environment takes a fortnight of tickets, the platform is the bottleneck.
Harry Le
Read the post →Essential Eight maturity: what insurers and auditors now expect
Government guidance became the private sector's yardstick. Paper controls do not survive contact with an assessor.
Ben Jones
Read the post →Embedded engineers: what makes the model work past the first quarter
The first quarter almost always goes fine. The test is the second year, and the difference is set up early.
Marcel Rizzolo
Read the post →What AX 2012 estates get wrong about the move to D365
The estates still on AX 2012 are the complicated ones, and the most common mistakes are made in the framing.
Marcel Rizzolo
Read the post →The fortieth app: Power Platform governance before it hurts
The first Power App is easy. What to put in place before the app count grows, and what it costs to retrofit later.
Marcel Rizzolo
Read the post →Most AI projects fail on retrieval, not the model
When an assistant gives a wrong answer in production, the cause is almost never the model.
Duke Le
Read the post →An incident response plan is not a capability until you rehearse it
Plenty of organisations have a plan. Far fewer have run it. The gap shows up in the first hour of a real compromise.
Ben Jones
Read the post →Data migration is the project: why F&O go-lives are decided before UAT
UAT finds configuration defects. It cannot fix a customer master full of duplicates or an ETL run that misses the window.
Marcel Rizzolo
Read the post →A cloud migration is finished when the old environment is switched off
The business case assumes the data centre goes away. Most programmes declare victory before it does.
Harry Le
Read the post →Tell us what you're solving.
A short note about the problem is enough: a platform, a programme, a security concern. A consultant who has done comparable work replies within one business day.