Page 21 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Built-in, Standard, and Strict preset security policies provide Microsoft-maintained email-protection settings. Correct licensing, precedence, targeting, quarantine support, and mail-flow testing still matter.
Read the guide
Remote monitoring and access tools need explicit authorization, strong identity controls, restricted paths, independent logging, provider accountability, and tested containment.
Read the checklist
Modern network-access guidance asks organizations to examine broad remote connectivity and compare risk-based, resource-level approaches without assuming every VPN requires replacement.
Read the guide
Current joint guidance prioritizes centralized intended configuration, isolated management, least privilege, secure protocols, protected telemetry, integrity checks, and lifecycle maintenance.
Read the checklist
DDoS readiness requires prioritized public services, provider coverage and emergency contacts, observable baselines, upstream mitigation, exercised decisions, and validated recovery.
Read the playbook
Cyber supply-chain risk management connects enterprise governance, business processes, acquisition, supplier evidence, operating oversight, incident coordination, continuity, and secure exit.
Read the guide
A vulnerability-disclosure program needs clear scope, monitored intake, acknowledgement, secure tracking, technical ownership, coordinated remediation, communication, and measurable closure.
Read the guide
FTC guidance connects immediate operational security, forensic preservation, scope determination, corrective action, accurate communication, and fact-specific legal notification decisions.
Read the playbook
Secure technology procurement evaluates verifiable evidence before purchase and throughout the lifecycle, including defaults, development, components, updates, access, data, support, and exit.
Read the checklist
Administrator-side phishing defense combines phishing-resistant authentication, secure defaults, message and web controls, endpoint protection, rapid reporting, evidence, and tested response.
Read the checklist