Trimarc, 18 Months Later at TrustedSec

* Trimarc merged into TrustedSec over eighteen months.
* Trimarc knowledge of Microsoft identity security was integrated into TrustedSec services.
* ADSA and M365 assessments remain part of the TrustedSec service portfolio.
* Customer demand for Trimarc security assessments persists at TrustedSec.
* Active Directory issues include: old passwords for admin/service accounts, old KRBTGT passwords, default domain administrator account with an SPN, inappropriate group memberships, Group Policy permission issues, improper Kerberos delegation, and AD CS security issues requiring Locksmith2.
* Entra ID issues include: insecure user/guest defaults, not fully leveraging PIM for eligible members, Tier 0 roles without proper membership, lack of MFA requirement at every logon for admins, and Teams/SharePoint/OneDrive sharing settings.
* The Identity Security Architect role focuses on security research, improving identity services, identifying new services (e.g., Copilot readiness), and community information sharing.
* Activities included conference talks, blog posts, and webinars related to Entra ID and Active Directory security.

The narrative centers on the integration of specialized knowledge into a broader service umbrella, demonstrating a successful transfer of core assessment methodologies while expanding the scope of customer offerings. The shift from an operational focus (running Trimarc) to a research-focused architectural role at TrustedSec suggests a pivot from execution to defining and anticipating future security needs, particularly around complex identity systems like Entra ID and Copilot integration. The persistent nature of fundamental Active Directory and Entra ID weaknesses—such as password hygiene and privilege management—indicates that the underlying security challenges remain constant regardless of the platform or vendor packaging. This persistence creates a dynamic tension: external vendors package these enduring, known risks into marketable assessments, shifting the perceived responsibility for remediation while simultaneously leveraging community expertise to continuously surface novel attack vectors. The emphasis on research and public discourse by the leader suggests an attempt to influence the security landscape by setting the agenda for what matters most in identity governance. The integration functions as a mechanism where deep, specialized knowledge (Trimarc) is absorbed into a scalable framework (TrustedSec), which then leverages that base to offer comprehensive services, potentially leading to systemic dependency on vendor-defined solutions for complex problems like Copilot security.
Bridge Questions: How does the focus on market-driven service expansion affect the prioritization of foundational, long-term identity fixes versus immediate compliance needs? What are the implications when specialized, deep research knowledge is incorporated into a service delivery model, and who ultimately bears the accountability when emerging threats bypass vendor-defined assessment frameworks? What systems do these integrated security assessments fail to account for in their pursuit of a "one-stop shop" solution?