AXIS OS security updates: verify camera firmware tracks and deployed versions
Axis Security Advisories
Publication date not specified · DSE reviewed July 19, 2026
Evidence before assertion
Official source register
Use this register to trace every DSE resource to its primary authority and see when the guidance was last reviewed. A reference supports the article’s central claim; linked bibliographies may provide additional scope.
- 204
- Resources
- 198
- Primary sources
- 39
- Authorities
Authority, scope, and freshness are separate questions.
Authority: DSE favors exact government, standards-body, vendor documentation, and manufacturer advisory pages over summaries or reposts.
Scope: An official source does not prove that every environment is affected. Product, version, configuration, exposure, licensing, and business context still matter.
Freshness: “Published” is the source’s date when available. “DSE reviewed” records when our team last checked the article and its primary reference.
Reference directory
Browse by source authority
Living documentation may not expose a fixed publication date. Those entries still show the DSE review date.
Axis Communications
15 resourcesGuideAdvisory
Camera certificate lifecycle management: HTTPS and 802.1X are different jobs
Axis Communications — AXIS Device Manager Security Guide
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
Choose the shutter architecture after measuring target motion
Axis Communications: Global shutter vs rolling shutter
Published July 1, 2026 · DSE reviewed August 11, 2026
PlaybookAdvisory
Commission license-plate capture for the lane, speed, and night
Axis Communications: License plate capture
Published December 1, 2024 · DSE reviewed August 11, 2026
ChecklistAdvisory
Commission radar as a perimeter sensor, not a magic field
Axis Communications: Radar in surveillance
Published July 1, 2026 · DSE reviewed August 11, 2026
GuideAdvisory
Design camera coverage from the task—not the megapixel count
Axis Communications: Pixel density and DORI—Meeting operational requirements in network video
Published May 1, 2023 · DSE reviewed August 11, 2026
ChecklistImportant
Measure live-video delay before operators must act
Axis Communications: Latency in live network video surveillance
Published June 1, 2024 · DSE reviewed August 11, 2026
ChecklistAdvisory
Prove wide dynamic range where bright and dark collide
Axis Communications: Wide dynamic range
Published March 1, 2026 · DSE reviewed August 11, 2026
GuideAdvisory
Set video bitrate control from evidence and a measured storage budget
Axis Communications: Bitrate control for IP video
Published March 1, 2023 · DSE reviewed August 11, 2026
ExplainerInformation
Signed video: what it proves, what must survive export, and what it does not replace
Axis Communications — Signed video developer documentation
Publication date not specified · DSE reviewed July 19, 2026
ChecklistAdvisory
Stabilize the camera before analytics and operators inherit the shake
Axis Communications: Image stabilization
Published March 1, 2026 · DSE reviewed August 11, 2026
ChecklistAdvisory
Stop integrated infrared light from reflecting back into the dome
Axis Communications: IR reflections in dome cameras
Published May 1, 2021 · DSE reviewed August 11, 2026
PlaybookAdvisory
Suspected Axis device compromise: preserve evidence before cleanup
Axis Communications — AXIS OS Forensics Guide
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
Turn the AXIS OS Hardening Guide into an operating baseline
Axis Communications — AXIS OS Hardening Guide
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
Use thermal cameras to detect, then visual cameras to identify
Axis Communications: Thermal cameras
Published October 1, 2021 · DSE reviewed August 11, 2026
Cybersecurity and Infrastructure Security Agency
26 resourcesChecklistAdvisory
Backups are not recovery until restoration is tested
CISA #StopRansomware Guide
Published October 19, 2023 · DSE reviewed July 19, 2026
GuideAdvisory
Build a practical baseline with CISA Cybersecurity Performance Goals
CISA Cross-Sector Cybersecurity Performance Goals
Publication date not specified · DSE reviewed July 19, 2026
GuideImportant
Build a workplace-violence program before behavior becomes an emergency
CISA Interagency Security Committee: Violence in the Federal Workplace—A Guide for Prevention and Response
Published January 1, 2019 · DSE reviewed August 11, 2026
PlaybookImportant
Build an incident channel you can trust when collaboration is compromised
CISA Cyber Storm IX After-Action Report
Published October 1, 2024 · DSE reviewed August 4, 2026
GuideAdvisory
Build an insider-risk program that protects assets, people, and privacy
CISA Insider Threat Mitigation Guide
Publication date not specified · DSE reviewed August 4, 2026
ChecklistAdvisory
Build event logging that supports detection, investigation, and resilience
CISA: Best Practices for Event Logging and Threat Detection
Published August 21, 2024 · DSE reviewed July 19, 2026
BriefingCritical
C-CURE 9000 and victor RCE: What CISA Update A Changes
CISA ICSA-26-204-01 Update A
Published August 11, 2026 · DSE reviewed August 12, 2026
ChecklistAdvisory
Demand evidence, not promises, when buying digital technology
CISA and international partners: Choosing Secure and Verifiable Technologies
Published December 5, 2024 · DSE reviewed July 19, 2026
GuideAdvisory
Design cyber tabletops that force real decisions
CISA Cybersecurity Tabletop Exercise Packages
Published February 2, 2023 · DSE reviewed August 4, 2026
ChecklistAdvisory
Harden network infrastructure with isolated management and verifiable configuration
CISA and partners: Enhanced Visibility and Hardening Guidance for Communications Infrastructure
Published December 4, 2024 · DSE reviewed July 19, 2026
GuideAdvisory
Make memory safety a product roadmap, not a patching promise
CISA and international partners: The Case for Memory Safe Roadmaps
Published December 6, 2023 · DSE reviewed August 11, 2026
GuideImportant
Make prohibited-items screening a written facility decision—not a guard improvisation
CISA Interagency Security Committee: Items Prohibited in Federal Facilities
Published May 26, 2022 · DSE reviewed August 11, 2026
PlaybookAdvisory
Make visitor access a sponsored, time-bounded, fully closed loop
CISA Interagency Security Committee: Facility Access Control—An ISC Best Practice
Published December 17, 2020 · DSE reviewed August 11, 2026
GuideInformation
Measure zero-trust maturity across five pillars before buying more tools
CISA Zero Trust Maturity Model, Version 2.0
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
Plan vehicle-incident mitigation before buying barriers
Cybersecurity and Infrastructure Security Agency: Vehicle Incident Prevention and Mitigation Security Guide
Published April 23, 2024 · DSE reviewed August 11, 2026
PlaybookImportant
Prepare bomb-threat decisions before the call or message arrives
CISA Office for Bombing Prevention: Bomb Threat Guide, Version 1
Published August 1, 2023 · DSE reviewed August 11, 2026
PlaybookAdvisory
Prepare for DDoS before availability becomes an incident
CISA, FBI, and MS-ISAC: Understanding and Responding to Distributed Denial-of-Service Attacks
Published March 21, 2024 · DSE reviewed July 19, 2026
ChecklistAdvisory
Ransomware first response: a calm containment checklist
CISA #StopRansomware Guide
Published October 19, 2023 · DSE reviewed July 19, 2026
GuideAdvisory
Reassess broad VPN access for a hybrid, least-privilege environment
CISA and partners: Modern Approaches to Network Access Security
Published June 18, 2024 · DSE reviewed July 19, 2026
PlaybookAdvisory
Recognize, report, and contain a suspected phishing message
CISA Personal Security Considerations: Action Guide for Critical Infrastructure Workers
Published June 7, 2024 · DSE reviewed July 19, 2026
ChecklistAdvisory
Reduce unnecessary internet exposure before it becomes an incident path
CISA — Internet Exposure Reduction Guidance
Published June 4, 2025 · DSE reviewed July 19, 2026
ChecklistAdvisory
Secure RMM and remote-access software before attackers use it
CISA and partners: Guide to Securing Remote Access Software
Published June 6, 2023 · DSE reviewed July 19, 2026
ChecklistAdvisory
Stop phishing at the control plane, not only at the inbox
CISA and partners: Phishing Guidance — Stopping the Attack Cycle at Phase One
Published October 18, 2023 · DSE reviewed July 19, 2026
GuideAdvisory
Turn guard post orders into observable duties, limits, and handoffs
CISA Interagency Security Committee: Armed Contract Security Officers in Federal Facilities—An ISC Best Practice
Published January 1, 2019 · DSE reviewed August 11, 2026
GuideAdvisory
Use CISA SSVC to decide what happens after severity and KEV screening
CISA Stakeholder-Specific Vulnerability Categorization Guide
Publication date not specified · DSE reviewed August 4, 2026
ExplainerAdvisory
Why CISA Known Exploited Vulnerabilities should change patch priority
CISA Known Exploited Vulnerabilities Catalog
Publication date not specified · DSE reviewed July 19, 2026
developer.hashicorp.com
1 resourceChecklistImportant
Treat Terraform state as production data with locking and recovery
HashiCorp Developer: State Storage and Locking
Publication date not specified · DSE reviewed August 11, 2026
Digital Object Identifier
7 resourcesPlaybookAdvisory
Export video evidence so another person can verify it
NISTIR 8161 Revision 1 — CCTV Digital Video Export Profile
Published April 8, 2019 · DSE reviewed August 4, 2026
GuideAdvisory
Give every connected device a network permission envelope
NIST SP 1800-15 — Mitigating Network-Based Attacks Using MUD
Published May 1, 2021 · DSE reviewed August 4, 2026
ChecklistAdvisory
Govern IPv6 even when the network is called IPv4-only
NIST SP 800-119: Guidelines for the Secure Deployment of IPv6
Published December 29, 2010 · DSE reviewed August 11, 2026
GuideImportant
Inventory cryptography before long-lived systems trap it
NIST CSWP 39 Update 1 — Considerations for Achieving Crypto Agility
Published December 19, 2025 · DSE reviewed August 4, 2026
ChecklistAdvisory
Make video analytics earn production trust
NIST AI Risk Management Framework 1.0
Published January 26, 2023 · DSE reviewed August 4, 2026
ExplainerAdvisory
Onboard connected security devices without lending trust first
NIST SP 1800-36 — Trusted IoT Device Network-Layer Onboarding and Lifecycle Management
Published November 25, 2025 · DSE reviewed August 4, 2026
GuideAdvisory
Run TLS certificates as an enterprise service, not a renewal calendar
NIST SP 1800-16 — Securing Web Transactions: TLS Server Certificate Management
Publication date not specified · DSE reviewed August 4, 2026
docs.fcc.gov
1 resourceExplainerInformation
Read the U.S. Cyber Trust Mark as a baseline—not a blank check
FCC Public Notice DA 26-354 — U.S. Cyber Trust Mark Lead Administrator
Published April 13, 2026 · DSE reviewed August 4, 2026
docs.github.com
1 resourceGuideImportant
Replace GitHub Actions cloud secrets with OpenID Connect federation
GitHub Docs: Configuring OpenID Connect in cloud providers
Publication date not specified · DSE reviewed August 11, 2026
DSE Security
1 resourceGuideInformation
Choose the right DSE channel: Updates, helpdesk, or main site
DSE Security contact and support routing
Publication date not specified · DSE reviewed July 19, 2026
DSE Security editorial guidance
4 resourcesChecklistInformation
A production-safe update window for servers, networks, and endpoints
DSE Updates editorial methodology
Publication date not specified · DSE reviewed July 19, 2026
ChecklistAdvisory
Access control update readiness: protect the doors while changing the software
DSE Updates editorial methodology
Publication date not specified · DSE reviewed July 19, 2026
ExplainerInformation
How DSE Updates researches, reviews, and maintains public guidance
DSE Security Updates
Publication date not specified · DSE reviewed July 19, 2026
ExplainerInformation
Welcome to DSE Updates: security guidance without the noise
DSE Updates editorial methodology
Publication date not specified · DSE reviewed July 19, 2026
Eaton
1 resourceChecklistAdvisory
UPS readiness means more than seeing a green status light
Eaton — Considerations for UPS installation
Publication date not specified · DSE reviewed July 19, 2026
Federal Emergency Management Agency
2 resourcesChecklistInformation
Keep essential functions running with FEMA continuity elements
FEMA Preparedness Toolkit: E.6 Continuity Guidance Circular
Publication date not specified · DSE reviewed July 19, 2026
ChecklistImportant
Keep tornado safe rooms available, signed, supplied, and occupancy-ready
FEMA P-361: Safe Rooms for Tornadoes and Hurricanes, Fourth Edition
Published April 1, 2025 · DSE reviewed August 11, 2026
Federal Trade Commission
3 resourcesGuideAdvisory
Build a data register that reduces breach impact and protection burden
FTC: Protecting Personal Information, A Guide for Business
Published July 28, 2026 · DSE reviewed July 28, 2026
PlaybookAdvisory
Data breach response: coordinate containment, investigation, communication, and notification
Federal Trade Commission: Data Breach Response — A Guide for Business
Publication date not specified · DSE reviewed July 19, 2026
GuideImportant
Govern FTC Safeguards Rule service providers through the full relationship
Federal Trade Commission — Safeguards Rule: What Your Business Needs to Know
Published April 27, 2022 · DSE reviewed August 4, 2026
Fluke Networks
2 resourcesChecklistAdvisory
Accept new fiber with both Tier 1 loss evidence and Tier 2 event evidence
Fluke Networks: OTDR—Your Ultimate Troubleshooter
Published August 11, 2025 · DSE reviewed August 11, 2026
ExplainerInformation
Cable verification, qualification, and certification answer different questions
Fluke Networks — Verification, Qualification, Certification: Which Do I Need?
Published January 23, 2019 · DSE reviewed July 19, 2026
Genetec
1 resourceChecklistAdvisory
Turn the Genetec Security Center 5.14 Hardening Guide into a measured baseline
Genetec — Security Center Hardening Guide 5.14
Published March 19, 2026 · DSE reviewed July 19, 2026
github.com
1 resourcePlaybookAdvisory
Turn CISA ScubaGear into a governed Microsoft 365 drift assessment
CISA Secure Cloud Business Applications project and ScubaGear
Published October 20, 2022 · DSE reviewed August 4, 2026
Internet Corporation for Assigned Names and Numbers
1 resourceChecklistImportant
Treat the domain registrar as a business-critical control plane
ICANN SSAC: SAC 044—A Registrant’s Guide to Protecting Domain Name Registration Accounts
Published November 5, 2010 · DSE reviewed August 11, 2026
kubernetes.io
1 resourcePlaybookImportant
Enforce Kubernetes Pod Security Standards by namespace and exception
Kubernetes Documentation: Pod Security Admission
Published March 7, 2024 · DSE reviewed August 11, 2026
Microsoft
2 resourcesPlaybookImportant
Move Exchange Online SMTP AUTH clients off Basic authentication with evidence
Microsoft Exchange Team: Updated Exchange Online SMTP AUTH Basic Authentication Deprecation Timeline
Published January 29, 2026 · DSE reviewed August 11, 2026
PlaybookImportant
Retire NTLM by proving every dependency before you block it
Microsoft: Advancing Windows security—Disabling NTLM by default
Published January 29, 2026 · DSE reviewed August 11, 2026
Microsoft Learn
56 resourcesGuideAdvisory
Apply Defender for Office 365 preset policies without overprotecting the wrong users
Microsoft Learn: Preset security policies in cloud organizations
Published July 3, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Build a repeatable Microsoft Purview audit-search procedure before an incident
Microsoft Learn: Search the audit log
Published June 19, 2026 · DSE reviewed July 19, 2026
PlaybookImportant
Build an evidence-based exit from Windows Server 2016 before January 12, 2027
Microsoft Lifecycle — Windows Server 2016
Published June 4, 2024 · DSE reviewed August 4, 2026
PlaybookAdvisory
Build separate Intune approval rings for drivers and firmware
Microsoft Learn: Manage Windows driver updates
Published January 14, 2026 · DSE reviewed August 11, 2026
ChecklistAdvisory
Check Windows Autopatch prerequisites before registering production devices
Microsoft Learn: Windows Autopatch prerequisites
Published February 27, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Choose Microsoft 365 Apps update channels by job, then manage the exceptions
Microsoft Learn: Overview of update channels for Microsoft 365 Apps
Published May 27, 2026 · DSE reviewed August 11, 2026
GuideAdvisory
Choose Teams external access, guest access, or neither for each collaboration need
Microsoft Learn: Use guest access and external access to collaborate with people outside your organization
Published July 1, 2026 · DSE reviewed July 19, 2026
GuideInformation
Clean up stale Intune records without mistaking hiding for retirement
Microsoft Learn: Device cleanup rules
Published May 5, 2026 · DSE reviewed July 19, 2026
PlaybookAdvisory
Deploy phishing-resistant authentication by user and device readiness
Microsoft Learn: Plan a phishing-resistant passwordless authentication deployment in Microsoft Entra ID
Published March 26, 2026 · DSE reviewed July 19, 2026
ChecklistAdvisory
Deploy SMB over QUIC only after identity, port, and fallback testing
Microsoft Learn: SMB over QUIC
Published July 24, 2025 · DSE reviewed August 11, 2026
GuideAdvisory
Deploy Windows LAPS through Intune without creating policy conflicts
Microsoft Learn: Deploy Windows LAPS policy with Microsoft Intune
Published April 15, 2026 · DSE reviewed July 19, 2026
GuideImportant
Design Azure Private Endpoint DNS before the first private link
Microsoft Learn: Azure Private Endpoint private DNS zone values
Published August 10, 2026 · DSE reviewed August 11, 2026
ChecklistAdvisory
Enable BitLocker with Intune only after recovery is proven
Microsoft Learn: Encrypt Windows devices with BitLocker using Intune
Published April 15, 2026 · DSE reviewed July 19, 2026
PlaybookImportant
Finish the Windows Secure Boot trust-chain transition from 2011 certificates
Microsoft Learn: Update Secure Boot Certificates for Windows Devices
Published May 1, 2026 · DSE reviewed August 11, 2026
ChecklistAdvisory
Give every Azure Policy exemption an owner, scope, expiry, and review
Microsoft Learn: Azure Policy exemption structure
Published August 4, 2026 · DSE reviewed August 11, 2026
ChecklistImportant
Give every Exchange Online connector a route owner, test, and retirement date
Microsoft Learn: Configure mail flow using connectors in Exchange Online
Published May 29, 2024 · DSE reviewed August 11, 2026
GuideImportant
Give every non-human Microsoft Entra identity an owner and an end date
Microsoft: Governing Microsoft Entra service accounts
Published February 16, 2024 · DSE reviewed August 4, 2026
PlaybookImportant
Govern OAuth application consent before it becomes persistent access
Microsoft Learn: Protect against consent phishing
Published January 8, 2025 · DSE reviewed July 28, 2026
GuideAdvisory
Govern SharePoint version history as recovery capacity with a storage cost
Microsoft Learn: Overview of version history limits for document libraries and OneDrive
Published October 3, 2024 · DSE reviewed August 11, 2026
ChecklistImportant
Govern Windows DNS scavenging as a deletion change, not routine cleanup
Microsoft Learn: DNS aging and scavenging
Published March 24, 2025 · DSE reviewed August 11, 2026
PlaybookImportant
Investigate and remediate risky Microsoft Entra users with evidence
Microsoft Learn: Remediate risks and unblock users
Published May 27, 2026 · DSE reviewed July 19, 2026
BriefingImportant
July 2026 Windows security update: deployment checks for managed environments
Microsoft Windows message center
Publication date not specified · DSE reviewed July 19, 2026
ChecklistImportant
Keep Azure Connected Machine agents inside their one-year support window
Microsoft Learn: Manage Azure Connected Machine agent versions
Published April 28, 2026 · DSE reviewed August 11, 2026
GuideImportant
Keep privileged administration off ordinary workstations
Microsoft Learn: Privileged access
Published May 31, 2026 · DSE reviewed August 11, 2026
ChecklistImportant
Keep two emergency Microsoft Entra accounts ready before the tenant needs them
Microsoft Learn: Manage emergency access accounts in Microsoft Entra ID
Published June 5, 2026 · DSE reviewed July 19, 2026
PlaybookImportant
Make Microsoft Entra Connect replaceable before synchronization stops
Microsoft Entra Connect: Staging server and disaster recovery
Published April 2, 2026 · DSE reviewed August 4, 2026
GuideAdvisory
Microsoft 365 Copilot permissions readiness: fix oversharing before rollout
Microsoft Learn: Microsoft 365 Copilot data and compliance readiness
Publication date not specified · DSE reviewed July 19, 2026
ChecklistAdvisory
Microsoft 365 offboarding: secure access and preserve business records in the right order
Microsoft Learn: Remove a former employee and secure data
Publication date not specified · DSE reviewed July 19, 2026
ExplainerInformation
Microsoft Defender for Business: understand the protection and the boundaries
Microsoft Learn: What is Microsoft Defender for Business?
Publication date not specified · DSE reviewed July 19, 2026
PlaybookAdvisory
Microsoft Entra Conditional Access: plan controls without locking out the tenant
Microsoft Learn: Plan a Conditional Access deployment
Publication date not specified · DSE reviewed July 19, 2026
BriefingImportant
Microsoft Entra Retires Native SMS and Voice MFA in 2027—Prepare for Passkeys Now
Microsoft Learn: Passkeys by default and retirement of Microsoft-provided SMS and voice authentication
Published August 10, 2026 · DSE reviewed August 11, 2026
ExplainerAdvisory
Microsoft Intune compliance: design the signal before enforcing access
Microsoft Learn: Device compliance policies in Microsoft Intune
Publication date not specified · DSE reviewed July 19, 2026
ChecklistAdvisory
Microsoft Teams Phone readiness: validate licensing, network, calling, and emergency workflows
Microsoft Learn: Set up Teams Phone in your organization
Publication date not specified · DSE reviewed July 19, 2026
PlaybookAdvisory
Move Defender ASR rules from audit to block through controlled rings
Microsoft Learn: Plan your attack surface reduction rules deployment
Published May 22, 2026 · DSE reviewed July 19, 2026
PlaybookAdvisory
Move Windows known folders to OneDrive without creating an empty desktop
Microsoft Learn: Redirect and move Windows known folders to OneDrive
Published March 27, 2025 · DSE reviewed July 19, 2026
PlaybookAdvisory
Operate Windows Server 2025 Hotpatch without pretending reboots disappeared
Microsoft Learn: Hotpatch for Windows Server
Published July 14, 2025 · DSE reviewed August 11, 2026
GuideImportant
Place a failover-cluster witness outside the failure domain it must arbitrate
Microsoft Learn: What is a quorum witness
Published March 28, 2025 · DSE reviewed August 11, 2026
GuideImportant
Plan Windows 10 ESU Year 2 without confusing 22H2 and LTSC
Microsoft Learn — Extended Security Updates program for Windows 10
Published November 17, 2025 · DSE reviewed August 4, 2026
PlaybookImportant
Prove Windows DHCP failover before the primary server is unavailable
Microsoft Learn: DHCP failover in Windows Server
Published March 11, 2025 · DSE reviewed August 11, 2026
ChecklistImportant
Raise Active Directory functional levels only after every domain controller earns the change
Microsoft Learn: Active Directory Domain Services functional levels
Published October 30, 2025 · DSE reviewed August 11, 2026
PlaybookImportant
Recover Active Directory as an identity service, not just a server
Microsoft Active Directory forest recovery guide
Published July 11, 2025 · DSE reviewed August 4, 2026
PlaybookImportant
Rehearse every Hyper-V Replica failover mode before a real outage
Microsoft Learn: Fail over a replicated virtual machine with Hyper-V Replica
Published April 28, 2026 · DSE reviewed August 11, 2026
PlaybookAdvisory
Replace standing administrator access with a controlled PIM lifecycle
Microsoft Learn: Plan a Privileged Identity Management deployment
Published April 23, 2026 · DSE reviewed July 19, 2026
ChecklistImportant
Run Teams Rooms as managed room systems, not oversized desktops
Microsoft Learn: Teams Rooms app and Windows versioning support
Published August 10, 2026 · DSE reviewed August 11, 2026
PlaybookAdvisory
Run Universal Print connectors as managed print infrastructure
Microsoft Learn: What is the Universal Print connector
Published June 11, 2024 · DSE reviewed August 11, 2026
GuideAdvisory
SharePoint and OneDrive external sharing: reduce exposure without stopping collaboration
Microsoft Learn: External sharing in SharePoint and OneDrive
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
SPF, DKIM, and DMARC: a safer rollout for Microsoft 365 email
Microsoft Learn: Email authentication in Microsoft 365
Publication date not specified · DSE reviewed July 19, 2026
PlaybookImportant
Test Microsoft 365 recovery with the mechanisms actually available
Microsoft Learn: Overview of Microsoft 365 Backup
Published July 6, 2026 · DSE reviewed July 28, 2026
PlaybookAdvisory
Turn Microsoft 365 Service health and Message center into an owned operations process
Microsoft Learn: How to check Microsoft 365 service health
Published February 9, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Use Entra access reviews to remove access that no longer has an owner
Microsoft Learn: What are access reviews?
Published March 12, 2026 · DSE reviewed July 19, 2026
ChecklistInformation
Use Exchange Online message trace as evidence, not guesswork
Microsoft Learn: Message trace in the Exchange admin center in Exchange Online
Published May 27, 2026 · DSE reviewed July 19, 2026
ExplainerInformation
Use Microsoft Secure Score as a work queue, not a breach guarantee
Microsoft Learn: Microsoft Secure Score
Published March 7, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Use SharePoint Restricted Access Control as a second access boundary
Microsoft Learn: Restrict SharePoint site access with Microsoft 365 groups and Microsoft Entra security groups
Published July 15, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Use Windows Autopilot device preparation for the scenarios it actually supports
Microsoft Learn: Compare Windows Autopilot device preparation and Windows Autopilot
Published April 2, 2025 · DSE reviewed August 11, 2026
PlaybookAdvisory
Windows deployment rings: move updates from pilot to broad release with evidence
Microsoft Learn: Create a deployment plan
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
Windows security baselines: test Microsoft recommendations before broad enforcement
Microsoft Learn: Microsoft Security Compliance Toolkit
Publication date not specified · DSE reviewed July 19, 2026
msrc.microsoft.com
2 resourcesBriefingImportant
CVE-2026-68820 Is Actively Exploited: Verify the August Windows Fix
Microsoft Security Response Center: CVE-2026-68820
Published August 11, 2026 · DSE reviewed August 12, 2026
BriefingImportant
CVE-2026-70329 in Outlook: What the 8.8 RCE Means and How to Respond
Microsoft Security Response Center (MSRC)
Published August 11, 2026 · DSE reviewed August 12, 2026
National Fire Protection Association
4 resourcesChecklistImportant
Inspect fire doors as complete assemblies, then control every repair
NFPA 80: Standard for Fire Doors and Other Opening Protectives, 2025 edition
Published January 1, 2025 · DSE reviewed August 11, 2026
PlaybookImportant
Manage fire-protection impairments before the valve closes
NFPA 25: Standard for the Inspection, Testing, and Maintenance of Water-Based Fire Protection Systems, 2026 edition
Published January 1, 2026 · DSE reviewed August 11, 2026
GuideImportant
Prove in-building responder radio coverage without creating interference
NFPA 1225: Standard for Emergency Services Communications, 2022 edition
Published January 1, 2022 · DSE reviewed August 11, 2026
ChecklistImportant
Test life-safety integrations from first input to final output
NFPA 4: Standard for Integrated Fire Protection and Life Safety System Testing, 2024 edition
Published January 1, 2024 · DSE reviewed August 11, 2026
National Institute of Standards and Technology
36 resourcesGuideAdvisory
Ask cybersecurity questions before buying a network-connected security device
NIST IR 8259 Rev. 1 — Foundational Cybersecurity Activities for IoT Product Manufacturers
Published April 20, 2026 · DSE reviewed July 19, 2026
PlaybookImportant
Assess whether controls produce the intended outcome—not whether they exist
NIST SP 800-53A Rev. 5: Assessing Security and Privacy Controls
Published January 25, 2022 · DSE reviewed August 11, 2026
ChecklistAdvisory
Back up physical-security controllers like OT: configurations, tools, licenses, spares, and restore tests
NIST SP 1339 — OT Backup Quick Start Guide
Published June 17, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Build a cybersecurity learning program that changes behavior
NIST SP 800-50 Rev. 1: Cybersecurity and Privacy Learning Program
Published September 12, 2024 · DSE reviewed July 28, 2026
ChecklistAdvisory
Build a firewall rule lifecycle that survives staff and system changes
NIST SP 800-41 Rev. 1 — Guidelines on Firewalls and Firewall Policy
Published September 28, 2009 · DSE reviewed July 19, 2026
PlaybookAdvisory
Build an incident-response plan before the first urgent call
NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management
Published April 3, 2025 · DSE reviewed July 19, 2026
GuideAdvisory
Build cyber supply-chain risk management into the full product lifecycle
NIST SP 800-161 Rev. 1 Update 1: Cybersecurity Supply Chain Risk Management Practices
Published November 1, 2024 · DSE reviewed July 19, 2026
GuideImportant
Categorize security impact before choosing controls
NIST FIPS 199: Standards for Security Categorization
Published February 1, 2004 · DSE reviewed August 11, 2026
GuideAdvisory
Control physical access credentials from issue through revocation
NIST SP 800-53 Rev. 5 Update 1: Security and Privacy Controls
Published September 23, 2020 · DSE reviewed July 28, 2026
GuideAdvisory
Create a vulnerability-disclosure channel that researchers can actually use
NIST SP 800-216: Recommendations for Federal Vulnerability Disclosure Guidelines
Published May 24, 2023 · DSE reviewed July 19, 2026
GuideInformation
Create an enterprise log-management policy before choosing a SIEM
NIST SP 800-92: Guide to Computer Security Log Management
Published September 13, 2006 · DSE reviewed July 19, 2026
PlaybookAdvisory
Deploy application allowlisting as a controlled production change
NIST Special Publication 800-167
Published October 28, 2015 · DSE reviewed August 4, 2026
PlaybookImportant
Design cloud forensic readiness before evidence is needed
NIST SP 800-201: Cloud Computing Forensic Reference Architecture
Published July 30, 2024 · DSE reviewed August 11, 2026
PlaybookAdvisory
Design cyber recovery playbooks around prioritized services and tested evidence
NIST SP 800-184: Guide for Cybersecurity Event Recovery
Published December 22, 2016 · DSE reviewed July 19, 2026
ChecklistImportant
Do not let a familiar voice or face authorize a sensitive action
NIST AI 100-4, Reducing Risks Posed by Synthetic Content
Published November 20, 2024 · DSE reviewed August 4, 2026
ExplainerAdvisory
Encrypted DNS in enterprise networks: preserve privacy without losing visibility
NIST SP 800-81 Rev. 3: Secure Domain Name System (DNS) Deployment Guide
Published March 19, 2026 · DSE reviewed July 19, 2026
GuideImportant
Engineer critical services to anticipate, withstand, recover, and adapt
NIST SP 800-160 Vol. 2 Rev. 1: Developing Cyber-Resilient Systems
Published December 9, 2021 · DSE reviewed August 11, 2026
ChecklistImportant
Give every security test written rules of engagement
NIST SP 800-115: Technical Guide to Information Security Testing and Assessment
Published September 30, 2008 · DSE reviewed August 11, 2026
GuideAdvisory
Give the board cybersecurity metrics that support risk decisions
NIST IR 8286 Revision 1
Published December 18, 2025 · DSE reviewed August 4, 2026
PlaybookImportant
Govern every sensitive information exchange through its full lifecycle
NIST SP 800-47 Rev. 1: Managing the Security of Information Exchanges
Published July 20, 2021 · DSE reviewed August 11, 2026
GuideImportant
Make identity proofing recoverable, equitable, and evidence-based
NIST SP 800-63A-4: Identity Proofing and Enrollment
Published July 31, 2025 · DSE reviewed August 11, 2026
PlaybookAdvisory
Make incident response part of every NIST CSF 2.0 function
NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management
Published April 3, 2025 · DSE reviewed July 19, 2026
ChecklistImportant
Manage mobile and BYOD security from enrollment through retirement
NIST SP 800-124 Rev. 2: Mobile Device Security
Published May 17, 2023 · DSE reviewed July 28, 2026
ExplainerInformation
MFA, passkeys, and authentication strength: what the terms mean
NIST SP 800-63B-4: Authentication and Authenticator Management
Published July 31, 2025 · DSE reviewed July 19, 2026
GuideImportant
Modern password policy: strengthen sign-in without weakening account recovery
NIST SP 800-63B-4: Authentication and Authenticator Management
Published July 31, 2025 · DSE reviewed July 28, 2026
GuideInformation
NIST CSF 2.0 in plain English: a six-function roadmap
NIST Cybersecurity Framework (CSF) 2.0
Published February 26, 2024 · DSE reviewed July 19, 2026
GuideAdvisory
Protective DNS: evaluate the resolver, the data, and the bypass paths
NIST SP 800-81 Rev. 3: Secure Domain Name System (DNS) Deployment Guide
Published March 19, 2026 · DSE reviewed July 19, 2026
GuideImportant
Rank critical components by mission consequence, not replacement cost
NISTIR 8179: Criticality Analysis Process Model
Published April 9, 2018 · DSE reviewed August 11, 2026
ChecklistAdvisory
Retiring camera, recorder, and removable storage under NIST SP 800-88 Rev. 2
NIST SP 800-88 Rev. 2 — Guidelines for Media Sanitization
Published September 26, 2025 · DSE reviewed July 19, 2026
GuideAdvisory
Set a continuous-monitoring cadence from risk and rate of change
NIST SP 800-137: Information Security Continuous Monitoring
Published September 30, 2011 · DSE reviewed August 11, 2026
GuideAdvisory
Treat enterprise patching as preventive maintenance, not an emergency ritual
NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning
Published April 6, 2022 · DSE reviewed July 19, 2026
GuideAdvisory
Treat physical access control as OT: segment it, constrain remote access, preserve availability
NIST SP 800-82 Rev. 3 — Guide to Operational Technology Security
Published September 28, 2023 · DSE reviewed July 19, 2026
GuideInformation
Turn a business impact analysis into an information-system contingency plan
NIST SP 800-34 Rev. 1: Contingency Planning Guide for Federal Information Systems
Published November 11, 2010 · DSE reviewed July 19, 2026
PlaybookAdvisory
Turn SBOM files into exposure decisions and supplier questions
NIST Software Supply Chain Security Guidance: SBOM
Published May 3, 2022 · DSE reviewed August 4, 2026
GuideAdvisory
Wi-Fi security is a lifecycle, not a one-time setup
NIST SP 800-153 — Guidelines for Securing Wireless Local Area Networks (WLANs)
Published February 21, 2012 · DSE reviewed July 19, 2026
ExplainerInformation
Zero trust in plain English: protect resources, not network locations
NIST SP 800-207: Zero Trust Architecture
Published August 11, 2020 · DSE reviewed July 19, 2026
Occupational Safety and Health Administration
7 resourcesPlaybookImportant
Align extinguisher placement, inspection, and training with the response policy
OSHA 29 CFR 1910.157: Portable Fire Extinguishers
Published November 7, 2002 · DSE reviewed August 11, 2026
PlaybookImportant
Connect workplace alarm technology to the emergency action plan
Occupational Safety and Health Administration: 29 CFR 1910.38—Emergency action plans
Published November 7, 2002 · DSE reviewed August 11, 2026
PlaybookImportant
Control hot work from authorization through the final fire watch
OSHA 29 CFR 1910.252: General requirements for welding, cutting, and brazing
Publication date not specified · DSE reviewed August 11, 2026
ChecklistImportant
Keep emergency drenching and flushing reachable in the seconds that matter
OSHA 29 CFR 1910.151: Medical services and first aid
Published June 18, 1998 · DSE reviewed August 11, 2026
PlaybookImportant
Set crowd-safety hold points before opening the doors
OSHA: Crowd Management Safety Guidelines for Retailers
Published November 12, 2014 · DSE reviewed August 11, 2026
PlaybookImportant
Treat AED readiness as a response program, not a cabinet purchase
OSHA: Automated External Defibrillators in the Workplace
Published January 1, 2003 · DSE reviewed August 11, 2026
ChecklistImportant
Walk every exit route from occupied space to safe discharge
OSHA 29 CFR 1910.36 and 1910.37: Exit Routes
Published November 7, 2002 · DSE reviewed August 11, 2026
ONVIF
7 resourcesChecklistAdvisory
“ONVIF compatible” is not enough: verify the exact model, firmware, and profile
ONVIF — Conformant Products
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
ONVIF Profile D: keep access decisions in the right place when integrating peripherals
ONVIF — Profile D
Publication date not specified · DSE reviewed July 19, 2026
GuideAdvisory
ONVIF Profile G acceptance testing for edge recording and retrieval
ONVIF — Profile G
Publication date not specified · DSE reviewed July 19, 2026
ExplainerInformation
ONVIF Profile M: what analytics metadata interoperability does—and does not—prove
ONVIF — Profile M
Publication date not specified · DSE reviewed July 19, 2026
BriefingImportant
ONVIF Profile S support ends March 31, 2027: plan a tested move to Profile T
ONVIF — Profile S Deprecation Q&A
Publication date not specified · DSE reviewed July 19, 2026
BriefingImportant
ONVIF TLS Configuration Add-on v1.0: manage the transition without guessing
ONVIF — TLS Configuration Add-on
Publication date not specified · DSE reviewed July 19, 2026
ExplainerInformation
Use ONVIF profiles as a requirements map, not a shortcut
ONVIF — ONVIF Profiles
Publication date not specified · DSE reviewed July 19, 2026
Security Industry Association
4 resourcesPlaybookAdvisory
A privacy operating model for video surveillance based on SIA’s 2025 Code
Security Industry Association — Data Privacy Code of Practice: Video Surveillance
Publication date not specified · DSE reviewed July 19, 2026
ChecklistAdvisory
Commission a commercial intrusion alarm to resist false dispatches
Security Industry Association: ANSI/SIA CP-01-2019 release announcement
Published July 8, 2019 · DSE reviewed July 28, 2026
ChecklistAdvisory
OSDP commissioning evidence: Verified profiles, Secure Channel, cabling, and load
Security Industry Association — Implementing OSDP Access Control? Follow This Simple Checklist
Published February 10, 2026 · DSE reviewed July 19, 2026
GuideAdvisory
Plan an OSDP Secure Channel migration as a controlled access-system change
Security Industry Association — Open Supervised Device Protocol (OSDP)
Publication date not specified · DSE reviewed July 19, 2026
UL Solutions
2 resourcesPlaybookImportant
Build a release matrix for every electrically locked egress door
UL Solutions: Proper Application of UL Standards for Controlled or Delayed Egress Locking Devices—UL 294 & 1034
Published March 5, 2021 · DSE reviewed August 11, 2026
ChecklistImportant
Commission an automatic gate as one safety-and-security system
UL Solutions: Securing Peace of Mind—Access Control and Gate Operators
Published December 2, 2019 · DSE reviewed August 11, 2026
www.911.gov
1 resourcePlaybookImportant
Make every onsite 911 call direct, locatable, and locally visible
National 911 Program: Kari's Law and RAY BAUM's Act
Published March 8, 2023 · DSE reviewed August 11, 2026
www.access-board.gov
1 resourceGuideImportant
Verify emergency alarms reach people who cannot hear a horn or see a strobe
U.S. Access Board: ADA Accessibility Standards, Section 215 Fire Alarm Systems
Published September 15, 2010 · DSE reviewed August 11, 2026
www.arin.net
1 resourcePlaybookImportant
Use RPKI route-origin validation without confusing Valid with safe
American Registry for Internet Numbers: Resource Public Key Infrastructure
Publication date not specified · DSE reviewed August 11, 2026
www.cisco.com
1 resourceChecklistAdvisory
Prove the PoE system at its worst moment
Cisco PoE Configuration Guide — Guidelines for PoE
Published September 15, 2025 · DSE reviewed August 4, 2026
www.federalreserve.gov
1 resourceGuideAdvisory
Bank physical security annual review: evidence for the board report
Federal Reserve Regulation H: 12 CFR 208.61
Published July 28, 2026 · DSE reviewed July 28, 2026
www.ffiec.gov
1 resourcePlaybookImportant
Turn FFIEC authentication guidance into a layered-control evidence plan
FFIEC — Authentication and Access to Financial Institution Services and Systems
Published August 11, 2021 · DSE reviewed August 4, 2026
www.finops.org
1 resourcePlaybookAdvisory
Allocate cloud cost before asking teams to optimize it
FinOps Foundation Framework: Allocation
Publication date not specified · DSE reviewed August 11, 2026
www.first.org
1 resourceGuideAdvisory
Use TLP 2.0 to preserve the sharing boundary of incident information
FIRST: Traffic Light Protocol Version 2.0
Publication date not specified · DSE reviewed August 11, 2026
www.ic3.gov
1 resourcePlaybookImportant
Stop business email compromise at the payment process
FBI Internet Crime Complaint Center: Business Email Compromise
Publication date not specified · DSE reviewed July 28, 2026
www.ncsc.govt.nz
1 resourceChecklistImportant
Bound an AI agent’s authority before it can act on business systems
Joint Cybersecurity Guidance: Careful Adoption of Agentic AI Services
Published May 1, 2026 · DSE reviewed July 28, 2026
www.ojp.gov
1 resourcePlaybookAdvisory
Preserve an incident scene before ordinary operations erase the evidence
U.S. Department of Justice: Crime Scene Investigation—A Guide for Law Enforcement
Published September 1, 2013 · DSE reviewed August 11, 2026
www.rfc-editor.org
2 resourcesGuideAdvisory
Make every security event tell the same time
RFC 8633 — Network Time Protocol Best Current Practices
Publication date not specified · DSE reviewed August 4, 2026
PlaybookAdvisory
Test Path MTU across tunnels and cloud edges before applications stall
IETF RFC 8899: Packetization Layer Path MTU Discovery for Datagram Transports
Published September 1, 2020 · DSE reviewed August 11, 2026
www.uspis.gov
1 resourceChecklistImportant
Route suspicious mail into isolation, distance, and coordinated reporting
United States Postal Inspection Service: Suspicious Mail Guidance and Poster 84
Published September 1, 2006 · DSE reviewed August 11, 2026
www.wbdg.org
2 resourcesGuideAdvisory
Commission exterior security lighting for the people who must use and maintain it
DoD UFC 3-530-01: Interior and Exterior Lighting Systems and Controls, Change 1
Published December 15, 2023 · DSE reviewed August 11, 2026
ChecklistAdvisory
Inspect the fence line as one continuous perimeter—including the openings below it
DoD UFC 4-022-03: Security Fences and Gates
Published October 1, 2013 · DSE reviewed August 11, 2026