Page 18 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
NIST SP 800-88 Rev. 2 emphasizes a governed media-sanitization program, appropriate clear, purge, or destroy methods, and separate verification and validation.
Read the checklist
Microsoft Purview Audit can investigate activity across Microsoft 365, but reliable evidence depends on verified ingestion, licensing-based retention, precise UTC queries, least-privileged access, and preserved exports.
Read the guide
Restricted Access Control can require both normal SharePoint permission and membership in an allowed Microsoft 365 or Entra group before a user opens site content.
Read the guide
Teams external access supports chat, calls, meetings, and separately enabled file sharing in federated chats, while guest access creates an Entra B2B identity for team and broader resource collaboration.
Read the guide
Microsoft Secure Score measures progress on recommended actions across supported products. It can prioritize work and show trends, but it is not an absolute breach-risk measure or a substitute for change testing.
Read the explainer
Windows Autopatch eligibility depends on licensing, Intune enrollment, corporate ownership, join and co-management state, recent check-in, Microsoft endpoints, diagnostic data, edition, and update channel.
Read the checklist
ONVIF will end Profile S support on March 31, 2027, but deployed systems do not simply stop on that date. Inventory authentication and codec dependencies before testing Profile T.
Read the briefing
ONVIF conformance belongs to a specific listed product and firmware or software version. Marketing language, membership, or a related model is not equivalent evidence.
Read the checklist
Emergency access accounts provide a recovery path when normal administrators cannot sign in or activate a role. They must be independent, strongly protected, monitored, and tested without becoming everyday admin accounts.
Read the checklist
Microsoft Entra Privileged Identity Management can replace unnecessary standing access with eligible, time-bound, approved, and auditable role activation.
Read the playbook