Page 10 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Planned maintenance and unexpected failures can leave a protected area without its normal water-based fire protection. Assign an impairment coordinator, assess the increased risk, authorize safeguards, notify the right parties, tag the condition, and prove restoration.
Read the playbook
Workplace violence prevention is not a poster or a single security response. It needs management ownership, safe reporting, multidisciplinary assessment, lawful intervention choices, emergency escalation, employee support, records, training, and post-incident recovery.
Read the guide
Bomb threats demand organized intake, prompt responder notification, credible assessment, controlled searches, and deliberate choices among monitoring, search, lockdown, or evacuation. Automatically emptying the building can move people toward danger.
Read the playbook
Mailrooms need a practiced response for a package that appears dangerous or releases an unknown substance. Recognition matters, but the safer operating priorities are to stop handling, isolate, create distance, protect exposed people, and contact the proper responders.
Read the checklist
A post order should let a qualified officer understand the mission, authority, routine duties, prohibited actions, contacts, emergency priorities, required records, equipment checks, and relief process before accepting the post.
Read the guide
Exterior lighting should support specific human tasks without disabling glare, deep shadow, uncontrolled spill, failed controls, or an unmaintainable layout. Define the task, design to maintained performance, then measure and walk the installed result at night.
Read the guide
Windows devices can keep booting after the 2011 Secure Boot certificates expire yet miss future early-boot protections. Inventory status, update OEM firmware, pilot by hardware family, and verify the 2023 trust chain with evidence.
Read the playbook
Microsoft now plans to disable SMTP AUTH Basic authentication by default for existing Exchange Online tenants at the end of December 2026. Find every sender, choose a supported replacement, pilot it, and prove the legacy path is quiet.
Read the playbook
SMB over QUIC protects Windows file access with TLS 1.3 over UDP 443, but Windows clients can still prefer TCP and external authentication can fall back to NTLM. Prove transport, identity, certificates, and renewal before production.
Read the checklist
RPKI lets resource holders authorize which ASN may originate a prefix and lets operators validate BGP origins. It does not validate the full AS path or prove a route is benign. Build careful ROAs, redundant validators, policy, and monitoring.
Read the playbook