Skip to content

Commit cac3014

Browse files
authored
Updating content of do you know how to manage objections and created rule Managing Entra ID (#9940)
* Update rule.md Update references of Azure Active Directory where appropriate https://pdi-ssw.zendesk.com/agent/tickets/14884 * Update rule.md * Update rule.md * Update rule.md * Update rule.md * Update rule.md * Update rule.md * Update rule.md * Update rule.md * Update rule.md * Update rule.md * Create rule.md Initial * Update rule.md * Update rule.md * Update rule.md * Create rule.md Rule * Update rule.md * Update rule.md * Update rule.md * Update rules-to-better-communication.md * Update rule.md Made changes as per Tiago's suggestions * Update rules-to-better-communication.md * Update rules-to-better-cloud-security.md * Update and rename rule.md to rule.md * Update rule.md * Update rule.md * Merging similar rule.md * Delete rules/what-to-do-when-a-client-says-no/rule.md * Update rule.md * Update rule.md * Update rule.md
1 parent 8177e2c commit cac3014

File tree

3 files changed

+163
-11
lines changed

3 files changed

+163
-11
lines changed

categories/infrastructure-and-networking/rules-to-better-cloud-security.md

+1
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@ title: Rules to Better Cloud Security
44
guid: 9cc8a6ee-d801-463a-9d79-bff3167f1596
55
uri: rules-to-better-whatsup-gold
66
index:
7+
- do-you-follow-best-practices-for-managing-microsoft-entra-id
78
- the-best-way-to-manage-your-azure-security-posture
89
- alert-for-azure-security-center
910
- regularly-review-your-security-posture

rules/do-you-know-how-to-manage-objections/rule.md

+79-11
Original file line numberDiff line numberDiff line change
@@ -8,31 +8,76 @@ authors:
88
url: https://ssw.com.au/people/adam-cogan
99
- title: Ulysses Maclaren
1010
url: https://ssw.com.au/people/ulysses-maclaren
11+
- title: Rob Thomlinson
12+
url: https://www.ssw.com.au/people/RobThomlinson
1113
related: []
1214
redirects: []
1315
created: 2012-08-30T13:03:32.000Z
1416
archivedreason: null
1517
guid: d15ae8df-e369-44f9-a307-b48952431d7d
1618
---
1719

18-
When attempting to sell a solution to a potential client, you will invariably come up against some objections. It is essential that you are prepared to handle these objections so the client is confident in your skills and has no reservations about choosing you over someone else. The main reason clients raise objections is because they have concerns about your experience "fit" with their needs.
20+
Hearing "No" from a customer or manager can feel like a dead end, but it can be an opportunity to refine your approach. A rejection doesn't mean they don't want your solution. It might just mean they don't yet see the value, have concerns, or need a different perspective.
1921

2022
<!--endintro-->
2123

2224
We recommend you use this objection handling model.
2325

24-
1. Ask the question - "What concerns do you have about working with us?"
25-
2. Acknowledge the objection - say, "Thanks for raising that", or, "Thanks for letting
26-
us know about that"
27-
3. Probe - ask, "Can I ask you a few questions about the concerns that you have?"
28-
"If I could resolve this issue for you, could we move forward?
29-
"You can't always solve objections on the spot - it's ok to say, "Is it alright if I speak to one of my developers about it and let you know about that later today?"
30-
4. Answer - Pick the best response to their objection (see below)
31-
5. Confirm that they are happy with your answer - "Do you now feel comfortable with
32-
our approach towards your project?"
26+
## Step 1: Understand the real reason behind the "No"
3327

34-
A typical objection we get is - "Why do you put 2 developers on the project? This is going to be more expensive isn't it?". This is basically how we handle this question:
28+
Before pushing back, we need to make sure that we understand why the person declined. Common reasons include:
29+
- **Cost concerns** – The client sees your solution as too expensive
30+
- **Timing issues** – A business isn't ready to implement the suggested solution
31+
- **Misalignment with needs** – A client doesn't see how the solution fits into their business
32+
- **Unclear value proposition** – The client doesn't understand the return on investment
33+
- **Preexisting solution** - The client has an existing solution that currently meets their needs
3534

35+
Instead of immediately trying to resolve their issues with the solution, **ask questions** to understand their real hesitation:
36+
::: greybox
37+
"We can use a cheaper LLM to ensure the solution is within you're budget"
38+
:::
39+
::: Bad
40+
Figure: Bad example – Trying to resolve the issue by assuming the customers concerns
41+
:::
42+
43+
::: greybox
44+
- "Can you help me understand what concerns you have with the current approach?"
45+
- "If I could resolve this issue for you, could we move forward?"
46+
- "Is it alright if I speak to one of my developers about it and let you know about that later today?"
47+
:::
48+
::: good
49+
Figure: Good examples – Asking the right questions helps you refine your response
50+
:::
51+
52+
## Step 2: Return with a better argument
53+
54+
Once you understand their objections, adjust your approach. Here's how:
55+
56+
### 1. **If cost is an issue: show the ROI**
57+
- Highlight long-term savings or increased revenue
58+
- Compare the cost of inaction
59+
- Offer a phased approach or a smaller-scale implementation
60+
61+
### 2. **If timing is an issue: keep them engaged**
62+
- Ask, "When would be a better time to revisit this?"
63+
64+
### 3. **If they don't see the fit: Provide better examples**
65+
- Use case studies relevant to their industry
66+
- Show how similar clients have benefited
67+
- Incorporate the clients feedback and offer a more tailored solution
68+
69+
### 4. **If they don't see the value: Clarify your messaging**
70+
- Simplify your explanation
71+
- Use visuals, data, or examples to reinforce your point
72+
- Focus on their issues rather than just listing features and benefits
73+
74+
## Step 3: Present with confidence
75+
76+
When you go back, don't just repeat your pitch **reframe it** based on what you've learned. Emphasise the value from their perspective, and make it clear you're there to solve the problem.
77+
78+
A typical objection we get is - "Why do you put 2 developers on the project? This is going to be more expensive isn't it?". This is how we regularly manage this question:
79+
80+
::: greybox
3681
- Explain the benefits:
3782

3883
- "We can complete the project sooner. Is that important to you?"
@@ -44,3 +89,26 @@ A typical objection we get is - "Why do you put 2 developers on the project? Thi
4489

4590
- If they are still unsure, you can offer a small discount off the hourly rate, or
4691
offer some free support - it's all about managing risk.
92+
:::
93+
::: good
94+
Figure: Good example – Addressing concerns with data and real-world examples
95+
:::
96+
97+
## Step 4: Accept a final "No" with grace
98+
99+
If the client still says "No", accept it professionally. Leave the door open for future discussions:
100+
::: greybox
101+
"I appreciate your time and insights. If anything changes in the future, I'd love to revisit this conversation."
102+
:::
103+
::: good
104+
Figure: Good example – Keeping the relationship positive for future opportunities
105+
:::
106+
107+
### Final thoughts
108+
109+
A "No" isn't always the end it's often just the beginning of a better conversation. Listen, refine, and come back stronger like [Steve Bucknor](https://en.wikipedia.org/wiki/Steve_Bucknor).
110+
111+
youtube: https://www.youtube.com/embed/xLrH9vA1kpY
112+
**Video: Umpire Bucknor's Mistake That Changed Cricket Forever (2 min)**
113+
114+
+83
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,83 @@
1+
---
2+
seoDescription: Learn best practices for managing Microsoft Entra ID to enhance security and efficiency in your organization.
3+
type: rule
4+
title: Do you follow best practices for managing Microsoft Entra ID?
5+
uri: managing-microsoft-entra-id
6+
authors:
7+
- title: Rob Thomlinson
8+
url: https://www.ssw.com.au/people/rob-thomlinson/
9+
created: 2025-01-03T10:58:08.000Z
10+
guid: 123e4567-e89b-12d3-a456-426614174000
11+
related: How-to-name-documents
12+
---
13+
14+
Effective management of Microsoft Entra ID (formerly Azure Active Directory) is crucial for maintaining the security and efficiency of your organisation's IT infrastructure. Neglecting best practices can lead to unauthorised access, data breaches, and operational disruptions. <!--endintro-->
15+
16+
## 1. Enforce Strong Authentication
17+
18+
- **Implement Multi-Factor Authentication (MFA):** Require MFA for all users, especially administrators, to add an extra layer of security.
19+
20+
- **Adopt Passwordless Authentication:** Utilise methods like Windows Hello for Business or FIDO2 security keys to enhance security and user experience.
21+
22+
## 2. Apply the Principle of Least Privilege
23+
24+
- **Use Role-Based Access Control (RBAC):** Assign users the minimum permissions necessary for their roles to reduce the risk of unauthorised access.
25+
26+
- **Implement Just-In-Time Access:** Utilise Privileged Identity Management (PIM) to grant temporary access to resources only when needed.
27+
28+
## 3. Regularly Review and Audit Access
29+
30+
- **Conduct Access Reviews:** Periodically review user access to ensure that only authorised individuals have access to resources.
31+
32+
- **Monitor Sign-In Activity:** Keep track of user sign-ins to detect unusual or suspicious activities promptly.
33+
34+
## 4. Secure Application Registrations
35+
36+
- **Use Certificates Over Secrets:** Always use certificate credentials for app authentication instead of client secrets, as certificates are more secure.
37+
38+
- **Limit API Permissions:** Assign the least privileged permissions necessary for applications to function.
39+
40+
## 5. Enable Security Features
41+
42+
- **Activate Security Defaults:** Enable security defaults in Microsoft Entra ID to enforce a basic level of security across your organisation.
43+
44+
- **Implement Conditional Access Policies:** Define policies that grant or block access based on conditions like user location, device state, or risk level.
45+
46+
## 6. Plan for Emergency Access
47+
48+
- **Create Break Glass Accounts:** Establish at least two emergency access accounts that are not protected by MFA to ensure access during critical situations.
49+
50+
- **Monitor and Secure Emergency Accounts:** Regularly audit these accounts to ensure they are not misused and are only accessed during emergencies.
51+
52+
## 7. Use Clear Access Group Naming Conventions
53+
54+
Clear and consistent naming conventions for access groups make management simpler and ensure clarity across the organisation.
55+
56+
### **why are naming conventions important?**
57+
Without clear naming conventions, it becomes difficult to understand the purpose or scope of access groups, leading to confusion and potential security risks.
58+
59+
#### **best practices**
60+
1. **Follow a Standard Structure:** Include key details in the group name, such as department, function, and access level.
61+
- Example: `[Department]-[Resource]-[Level]`
62+
- `HR-Payroll-ReadOnly` or `IT-SharePoint-Admin`
63+
2. **Use Prefixes for Type Indication:** Add a prefix to indicate the type of group.
64+
- `DL-` for Distribution List, `SG-` for Security Group, `O365-` for Office 365 Group.
65+
3. **Avoid Ambiguity:** Ensure names are descriptive but concise. Avoid generic terms like "Admin" or "Users" that lack specific context.
66+
4. **Adopt Case Conventions:** Use consistent casing, such as PascalCase or lowercase, for easy readability. SSW uses kebab case :)
67+
68+
#### **Common Naming Conventions Example**
69+
| **Name** | **Purpose** |
70+
|--------------------------|-------------------------------------------|
71+
| SEC-IT-VPN-Access | Provides VPN access for IT personnel. |
72+
| SEC-Marketing-WebAnalytics | Grants access to web analytics tools. |
73+
| SG-Finance-ERP-ReadOnly | Read-only access to the ERP system. |
74+
| O365-SharePoint-Accounts-private-library-ReadWrite | Read-write access to the Accounts SharePoint library. |
75+
| DL-All-Company-Broadcast | Organization-wide communication group. |
76+
| Intune-User-AccountingSoftware | Intune user policy to install accounting software |
77+
| Intune-Computer-ScreenTimeout | Intune computer screen timeout policy |
78+
79+
Figure: Good examples of access group naming conventions that improve clarity and reduce errors in assignment.
80+
81+
---
82+
83+
By adhering to these best practices, including clear naming conventions for access groups, you can strengthen your organization's security posture and streamline the management of Microsoft Entra ID.

0 commit comments

Comments
 (0)