Page 19 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
NIST SP 800-88 Rev. 2 emphasizes a governed media-sanitization program, appropriate clear, purge, or destroy methods, and separate verification and validation.
Read the checklist
Exchange Online message trace records how Microsoft 365 handled a message. Narrow queries, the correct identifier, ingestion timing, and preserved results make it useful evidence for mail-flow troubleshooting.
Read the checklist
Microsoft Purview Audit can investigate activity across Microsoft 365, but reliable evidence depends on verified ingestion, licensing-based retention, precise UTC queries, least-privileged access, and preserved exports.
Read the guide
Restricted Access Control can require both normal SharePoint permission and membership in an allowed Microsoft 365 or Entra group before a user opens site content.
Read the guide
OneDrive Known Folder Move can redirect familiar Windows folders to the cloud, but prior redirection, other tenants, unsupported files, storage, bandwidth, and sync health must be resolved first.
Read the playbook
Teams external access supports chat, calls, meetings, and separately enabled file sharing in federated chats, while guest access creates an Entra B2B identity for team and broader resource collaboration.
Read the guide
Microsoft Secure Score measures progress on recommended actions across supported products. It can prioritize work and show trends, but it is not an absolute breach-risk measure or a substitute for change testing.
Read the explainer
Service health reports active Microsoft 365 issues, while Message center reports planned changes and required actions. Both need named owners, triage criteria, tracked tasks, and an out-of-band status path.
Read the playbook
Windows Autopatch eligibility depends on licensing, Intune enrollment, corporate ownership, join and co-management state, recent check-in, Microsoft endpoints, diagnostic data, edition, and update channel.
Read the checklist
ONVIF will end Profile S support on March 31, 2027, but deployed systems do not simply stop on that date. Inventory authentication and codec dependencies before testing Profile T.
Read the briefing