Build a firewall rule lifecycle that survives staff and system changes
Firewall rules stay trustworthy when requests, approvals, tests, owners, expiration conditions, reviews, and removals are part of one documented lifecycle.
Read the checklistDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 299 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Choose the right DSE channel: Updates, helpdesk, or main site
Use DSE Updates for public advisories and education, the DSE support library and helpdesk for customer-specific documentation and service requests, and the main DSE Security site for capabilities, assessments, projects, and contact routing.
Read the guide
Ransomware first response: a calm containment checklist
When ransomware or destructive encryption is suspected, activate the incident plan, isolate affected systems in a coordinated way, preserve evidence, use known-safe communications, protect identities and backups, and involve qualified responders before rebuilding.
Read the checklist
SPF, DKIM, and DMARC: a safer rollout for Microsoft 365 email
SPF, DKIM, and DMARC work together to authenticate sending infrastructure and align it with the address recipients see. A staged rollout helps protect a domain from spoofing without unexpectedly rejecting legitimate business mail.
Read the guide
Windows deployment rings: move updates from pilot to broad release with evidence
Deployment rings separate Windows devices into controlled release waves. Representative pilots, measurable exit criteria, and a documented pause process reduce the chance that one compatibility problem becomes an organization-wide outage.
Read the playbook
Windows security baselines: test Microsoft recommendations before broad enforcement
Microsoft security baselines provide a well-tested starting configuration for supported Windows and Microsoft products. They still require version matching, conflict analysis, application testing, documented exceptions, and phased deployment.
Read the guide
Microsoft Intune compliance: design the signal before enforcing access
Intune compliance policies evaluate whether managed devices meet defined requirements. Blocking access requires a coordinated Microsoft Entra Conditional Access policy, suitable licensing, representative testing, and a supportable path back to compliance.
Read the explainer
Microsoft Defender for Business: understand the protection and the boundaries
Microsoft Defender for Business brings endpoint prevention, detection, investigation, and response capabilities to eligible organizations with up to 300 users. Onboarding, configuration, licensing, monitoring, and server coverage still require deliberate planning.
Read the explainer
NIST CSF 2.0 in plain English: a six-function roadmap
Use the six functions in NIST Cybersecurity Framework 2.0 to organize cyber risk decisions, assign ownership, identify gaps, and build a practical improvement roadmap without treating the framework as a one-size-fits-all checklist.
Read the guide
Build a practical baseline with CISA Cybersecurity Performance Goals
Use CISA’s voluntary Cross-Sector Cybersecurity Performance Goals to identify a manageable set of high-impact improvements, assign owners, capture evidence, and avoid confusing a baseline assessment with compliance or certification.
Read the guide