Evaluating the Security Posture and Recommending Technical Strategies to Manage Risk

The previous chapter discussed how to design security and governance strategies based on regulatory compliance requirements within your company. This included how to utilize Microsoft Defender for Cloud and Azure Policy to evaluate and govern your company resources.

This chapter will discuss how to evaluate the security posture and recommend technical strategies that will manage and reduce risk. This will include additional capabilities of Microsoft Defender for Cloud for security posture management.

In this chapter, we are going to cover the following main topics:

• Evaluating the security posture by using benchmarks, including Azure security benchmarks, ISO 27001, and more
• Evaluating the security posture by using Microsoft Defender for Cloud
• Evaluating the security posture by using Secure Scores
• Evaluating the security posture of cloud workloads
• Designing security for...