Page 136 of the DSE IT knowledge center, with source-backed guidance and practical next steps.
Production-minded guidance for endpoints, servers, updates, cloud services, administration, and supportable operations.
Azure Monitor data collection rules define sources, schemas, transformations, and destinations, while associations decide which resources use them; either can change the telemetry available to operations and security.
Read the guide
Configure targeted Azure Service Health alerts and deliver them through channels that do not share the workload's main failure path.
Read the playbook
Trace workload components across Availability Zones, Regions, and control or data planes before making resilience claims.
Read the guide
Use Azure Backup multi-user authorization and Resource Guard to separate routine backup administration from approval of protected operations.
Read the playbook
Validate the complete Certification Authority recovery set, including database, private keys, configuration, templates, revocation publishing, and HSM steps.
Read the checklist
Federation moves authentication information between separately administered parties. Document which provider, assertion, attributes, audience, assurance, and failure paths each relying service will accept.
Read the guide
The Secure Software Development Framework supplies a common set of high-level practices. Translate them into owners, workflow gates, artifacts, exceptions, and supplier questions.
Read the playbook
NIST's SSDF community profile adds AI-model-specific considerations to the broader secure-development framework. Include data, model, evaluation, release, integration, and response paths in scope.
Read the guide
Cloud-native zero trust shifts application policy toward user, application, and service identities. Inventory workload identities and enforce narrowly scoped service-to-service authorization across environments.
Read the guide
Containers package applications but depend on a broader system. Govern image origin, build evidence, registry access, runtime policy, host security, monitoring, and retirement as one lifecycle.
Read the checklist