It’s really hard to know where to start when you or your team are assigned the task of securing the company from cyber threats.

If you’ve been in the game a while, you’ve probably noticed that cyber security has become part of everyone’s job, not just those who wear hoodies.

Microsoft have made a collection of resources that can help you plan, track, and progress your security roadmap for your company or for your customers.

Where can I get it?

https://aka.ms/ztworkshop

What is “the workshop”?

‘Workshop’ is a bit of a heavy loaded term. It’s a workshop if you make it one, but the tangible bits of the resource consist of:

  • An Excel sheet: this is your tracker
  • A wiki site: this explains what you need to do through articles and videos
  • A PowerShell 7 module: used to run the automated tests

It’s your choice as to how formal you wish to make this process, smaller teams may wish to grab the materials and crack on.

The Spreadsheet

Did you know Excel could look like this? I didn’t.

This Excel sheet is your main tool that you and your team will use to track the progress to securing your workloads. The main sections are highlighted as blue on the sheet tabs, and each individual item is divided from left to right into:

  1. First
  2. Then
  3. Next

You start with the things you should consider first, then move on to the meat of the work, and uber prepared and mature cloud-native workers might choose to visit the “next” tasks.

Each item has a few elements:

  • The circular pill icon denotes the license needed
  • The title itself is clickable which will take you to a wiki page detailing what it means and what you need to do
  • A dropdown indicates which status you can mark it as to track progress

(this shows the page when clicked)

Why should I use this? Won’t it all be Microsoft stuff?

You use this to track how far your company is along their security maturity journey. You don’t have to use the Microsoft product to solve the job, but what you might realise is there’s a Microsoft solution you never knew about and that could work in your favour when it comes to budgeting and consolidation.

As I always like to say, good configuration of what you have is always a far better path than poor configuration of 15 other tools without centralised management. It’s also harder to hire people who know them all.

More Screenshots of the Intune for Windows bit <3