Well-Architected: Public Cloud Security Posture Workshop

Elisa Oyj

Workshop contains introduction to Microsoft Defender for Cloud, assessment and action phases to customer's applications in cloud and next steps

In this workshop Elisa's experts are introducing Microsoft Defender for Cloud's Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) capabilities and accomplishes an initial configuration and assessment for your public cloud security overview. CSPM Security recommendations are categorized and solved one by one and you get a good point of view for your whole public cloud infrastructure's security status. Cloud Workload Protection is configured to protect workloads in Azure and other clouds as well in on-premises.

This workshop is targeted for companies that are already using public cloud and at least one of the following is valid:

  • Company is planning to implement or evaluate Microsoft Defender for Cloud capabilities
  • Company does not have public cloud security tools in use
  • Company is planning to use some cloud security tools

Workshop is divided for topics and days:

Day 1

  • Overview of the Microsoft Defender for Cloud
  • Initial assessment of Azure recommendations
  • Possible environment connections to other clouds

Day 2

  • Microsoft Defender for Cloud configurations for Cloud Workload Protection (CWP)
  • Microsoft Defender for Cloud alert handling
  • Deep dive assessment and recommendations to fix any of Azure side Cloud Security Posture Management (CSPM) recommendations

Day 3-4

  • Used if required for other Cloud Security Posture Management (CSPM) recommendations solving with Customer and their software vendors.
  • Possibility also to pilot other security tools such as Azure DDoS Protection, Azure Firewall, Application Gateway, Front Door etc. in Azure to protect Cloud Workloads in Azure.

Optional work items:

  • Continuous posture monitoring by Elisa with SLA backed start of remediation
  • Inner workload assessment based on Defender for Cloud also in on-premises