Page 23 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
Protective DNS can apply threat-informed policy to domain lookups, but selection must also address availability, privacy, logging, hybrid coverage, integrations, and traffic that bypasses DNS.
Read the guide
A useful UPS program connects supported load, required runtime, battery and environmental condition, monitoring, maintenance, controlled testing, and shutdown or recovery plans.
Read the checklist
Procurement should evaluate how a connected product will be configured, updated, supported, monitored, reset, and retired—not only whether it performs its primary function.
Read the guide
Apply Axis hardening as a repeatable baseline: inventory devices, choose a supported AXIS OS track, control access and services, segment networks, monitor changes, and validate video workflows.
Read the guide
ONVIF profiles group mandatory and conditional interface features for devices and clients, but successful design still requires exact product, firmware, role, feature, and workflow validation.
Read the explainer
Moving reader communications to OSDP Secure Channel requires exact component and firmware inventory, supported key handling, staged deployment, operational testing, and a documented recovery path.
Read the guide
Find public-facing assets, confirm why each exposure exists, remove what is unnecessary, protect what must remain, and repeat the assessment as the environment changes.
Read the checklist
Verification checks basic connectivity, qualification evaluates support for a network application, and certification compares measured cabling performance with a selected standard.
Read the explainer
Conditional Access can combine identity, device, application, and location signals to enforce access controls. Report-only evaluation, emergency access, test users, licensing checks, and phased activation are essential to avoid unintended lockout.
Read the playbook
SharePoint and OneDrive sharing is governed by tenant, site, link, group, and Microsoft Entra settings. A safer model uses intentional collaboration sites, authenticated guests where practical, restrictive defaults, ownership, and recurring access review.
Read the guide