Isla Morgan is the macOS Platform Engineering Editor for The Ops Playbook, specialising in the design and day-to-day operation of secure, scalable enterprise Mac fleets. She covers Apple Business Manager, Automated Device Enrolment, declarative device management, Jamf Pro, Microsoft Intune, Platform SSO, FileVault key escrow, application packaging, update enforcement and shell-based support automation. Drawing on practical endpoint engineering and service operations, Isla explains how to turn Apple platform capabilities into dependable workflows for deployment, identity, compliance, observability and recovery. Her guidance balances strong security controls with the Mac user experience, using staged rollouts, measurable verification and tested rollback paths to keep changes safe at scale.
PUBLISHED PLAYBOOKS
13
PUBLICATION
OPS PLAYBOOK
PRIMARY FOCUS AREAS
A bounded macOS application lifecycle workflow: staged deployment, on-device verification, controlled updates, scoped removal, guardrails and rollback.
Design and validate a bounded Windows Autopilot zero-touch workflow to reduce manual provisioning tickets. Implement explicit guardrails and safe recovery paths.
Reduce macOS support tickets with a bounded Jamf Pro workflow. Automate policy remediation, validate with diagnostics, and ensure safe recovery.
A bounded macOS FileVault workflow separating encryption from verified key escrow, with validation, rollback and recovery rehearsal for Security & Compliance teams.
Design, validate and roll back a bounded Windows Autopilot deployment pilot with scoped groups, ESP evidence checks and a tested recovery path.
Design, implement and safely recover a bounded Windows Autopilot zero-touch automation workflow with role-based guardrails, validation and rollback.
Design, implement and safely recover a bounded Jamf Pro device management workflow with evidence, guardrails and measurable outcomes.
Design a safer macOS application lifecycle: verify signed packages, enforce least privilege, validate each stage and recover with tested rollback steps.
Design, implement and safely roll back a bounded FileVault workflow for macOS Security & Compliance, with evidence-based validation and recovery steps.
Replace ad hoc FileVault checks with a validated, auditable macOS encryption workflow featuring rollback, verification steps and measurable compliance outcomes.
Replace reactive Autopilot ticket rework with a bounded, staged zero-touch provisioning workflow: hash validation, guardrails, ESP checks and a clear rollback path.
Deploy a launchd-scheduled log query that detects macOS login window failures and alerts technicians before users file a ticket.
Stop silent Time Machine failures on managed Macs with a Jamf Pro and Intune remediation pipeline that detects, fixes, and escalates automatically.