Page 26 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Intune compliance policies evaluate whether managed devices meet defined requirements. Blocking access requires a coordinated Microsoft Entra Conditional Access policy, suitable licensing, representative testing, and a supportable path back to compliance.
Read the explainer
Microsoft Defender for Business brings endpoint prevention, detection, investigation, and response capabilities to eligible organizations with up to 300 users. Onboarding, configuration, licensing, monitoring, and server coverage still require deliberate planning.
Read the explainer
Use the six functions in NIST Cybersecurity Framework 2.0 to organize cyber risk decisions, assign ownership, identify gaps, and build a practical improvement roadmap without treating the framework as a one-size-fits-all checklist.
Read the guide
Use CISA’s voluntary Cross-Sector Cybersecurity Performance Goals to identify a manageable set of high-impact improvements, assign owners, capture evidence, and avoid confusing a baseline assessment with compliance or certification.
Read the guide
A successful backup job does not prove that systems and data can be restored. Build a documented restoration test around critical services, protected backup copies, clean recovery prerequisites, accountable owners, and evidence from an actual test.
Read the checklist
Prepare roles, decision authority, contacts, evidence practices, communications, containment choices, and recovery criteria before a cybersecurity incident forces the organization to make high-impact decisions under pressure.
Read the playbook
Treat phishing as a reporting and response workflow—not a quiz. Learn observable warning signs, preserve a safe report, avoid interacting with the message, and escalate immediately if a link, attachment, credential prompt, payment request, or MFA approval was used.
Read the playbook
Understand authentication factors, MFA, one-time codes, cryptographic authenticators, passkeys, phishing resistance, and account recovery so stronger sign-in choices can be evaluated without calling any single method unhackable.
Read the explainer
Microsoft’s July 2026 Windows update enforces Kerberos RC4 protections, while a July 18 out-of-band release resolves the limited Dell and Intel IPF compatibility hold.
Read the briefing
Axis lists multiple 2026 AXIS OS security advisories and patched versions. Camera fleets should be inventoried and updated against the correct supported track.
Read the briefing