Webinar Azure Security for Decision Makers - Understanding the Cloud Security Landscape

In this introductory workshop, we’ll discuss how moving to the cloud also has implications for your security landscape. Among the topics to cover are the shared responsibility between you and the cloud provider regarding security measures; the shift from the classic network perimeter to the modern identity-centered perimeter (or Zero Trust Architecture); the increased demand for self service in the cloud; and the challenges that come with a hybrid IT landscape. This workshop will set the stage for the rest of the day: we will identify opportunities as well as concerns that come with moving to the cloud. Other workshops will address (aspects of) one or more of these opportunities and concerns.

In this workshop, we’ll explore what Azure has to offer in terms of Identity and Access Management. We will discuss Azure Active Directory as the central identity store across the cloud and your on-premise Active Directory. We’ll discover how concepts like Managed Identity play a pivotal role in establishing an identity-based perimeter, and we’ll see how Azure Arc extends this capability to your on-prem resources. We’ll also touch upon Just-In-Time Access policies. This workshop will provide you with a high-level overview of the identity-related services in Azure. [Azure Active Directory, Azure Arc, Azure AD Connect, Azure RBAC]

Proper network security controls are a critical part of a Zero Trust approach. In this workshop we will explore some of the controls available in Azure that play a part in locking down the network. We will cover what it means to connect your on-premise datacenter to Azure, and what controls are available to limit the traffic flowing in both directions. We’ll also touch upon the different scenarios for connecting public PaaS services to your private cloud network in a secure way, and how to implement network segmentation within your network.

This workshop will highlight the high-level structure of networking in Azure.

Now that we have established a high-level picture of how a healthy security landscape in Azure could look like, we want to understand how we can ensure that our enterprise conforms to these best practices. We’ll explore Azure Policy and Azure Blueprint as mechanisms to enforce a security baseline throughout all Azure resources in your subscriptions. We’ll also take a look into Azure Security Center and Microsoft Defender for Cloud and see how these services help to keep you resources secure, and we’ll explore how these features extend to on-premise resources as well.

This workshop will provide you with a basic understanding of governance options in Azure.

[Azure Policy, Azure Blueprint, Azure Security Center, Microsoft Defender for Cloud]

No matter how proactive we are in enforcing security best practices, we will not be immune to attacks and other suspicious activities. In this workshop, we’ll explore tooling available to identify security threats, analyze them, and perform actions to mitigate them – preferably automated and immediately. We’ll learn how Azure Sentinel is able to ingest all kinds of different log data and analyze that using ML models, provide visualization into events and incidents, and orchestrate mitigating actions. And again, we’ll explore how this extends to non-cloud workloads as well.

This workshop will help you understand how Azure tooling can help Security Operations.

[Network Watcher, Azure Sentinel]