Tag: Azure

Sample Architectures (LOTs here):

https://docs.microsoft.com/en-us/azure/architecture/browse/?products=azure%2Cm365&azure_categories=security&skip=36

CyberSecurity Reference Architecture

https://docs.microsoft.com/en-us/security/cybersecurity-reference-architecture/mcra

Cloud for IT Architect Illustrations

https://docs.microsoft.com/en-us/microsoft-365/solutions/cloud-architecture-models?view=o365-worldwide#identity-and-device-protection-for-office-365

Steps on moving to a ‘modern’, Zero Trust architecture

1. Moving away from VPN by publishing the apps via Azure AD App Proxy (per-app vpn)
2. Modernize the app by moving the data/process to SaaS products
3. Isolate the app/data by implementing Windows Virtual Desktop (running in Azure) – useful for when you don’t own the endpoint
4. Isolate the data using DLP on Windows, Office, MCAS, and anywhere else (MIP integration)
5. Monitor all user app/data access via Azure AD Auth with MCAS session controls (includes AWS, SaaS, etc)

Microsoft Well Architected Framework

https://www.microsoft.com/azure/partners/well-architected

https://www.microsoft.com/en-us/us-partner-blog/2021/04/23/azures-well-architected-framework-pillar-5-security/

Well Architected Assessment Tool

https://docs.microsoft.com/en-us/assessments/?id=azure-architecture-review&mode=pre-assessment