CISO series

Discover successful security strategies and valuable lessons learned from CISOs and Microsoft’s top security experts to help you navigate an ever-expanding threat landscape.

Featured image for Operational resilience begins with your commitment to and investment in cyber resilience

Operational resilience begins with your commitment to and investment in cyber resilience

Operational resilience cannot be achieved without a true commitment to and investment in cyber resilience.
Read more Operational resilience begins with your commitment to and investment in cyber resilience
Featured image for Preparing your enterprise to eliminate passwords

Preparing your enterprise to eliminate passwords

If you’re a CIO, a CISO, or any other exec at a company who is thinking about digital security, the user name/password paradigm is more than a hassle, it’s a true security challenge, which keeps many of us up at night. Today, I’m outlining the basic steps necessary to eliminate passwords, with the acknowledgement that we’re still on the journey. I believe we’ve mapped out the right path, but we aren’t finished yet.
Read more Preparing your enterprise to eliminate passwords
Featured image for Lessons learned from the Microsoft SOC Part 2b: Career paths and readiness

Lessons learned from the Microsoft SOC Part 2b: Career paths and readiness

In our second post about people—our most valuable resource in the SOC—we talk about our investments into readiness programs, career paths, and recruiting for success.
Read more Lessons learned from the Microsoft SOC Part 2b: Career paths and readiness
Featured image for Lessons learned from the Microsoft SOC—Part 2a: Organizing people

Lessons learned from the Microsoft SOC—Part 2a: Organizing people

In the second of our three-part series, we focus on the most valuable resource in the SOC—our people.
Read more Lessons learned from the Microsoft SOC—Part 2a: Organizing people
Lessons learned from the Microsoft SOC—Part 1: Organization Featured image for Lessons learned from the Microsoft SOC—Part 1: Organization

Lessons learned from the Microsoft SOC—Part 1: Organization

In the first of our three part series, we provide tips on how to manage a security operations center (SOC) to be more responsive, effective, and collaborative.
Read more Lessons learned from the Microsoft SOC—Part 1: Organization
Featured image for CISO series: Talking cybersecurity with the board of directors

CISO series: Talking cybersecurity with the board of directors

To maintain a board’s confidence, you need to engage them in your strategy early and often.
Read more CISO series: Talking cybersecurity with the board of directors
Featured image for CISO series: Strengthen your organizational immune system with cybersecurity hygiene

CISO series: Strengthen your organizational immune system with cybersecurity hygiene

Cybersecurity hygiene is about maintaining cyberhealth by developing and implementing a set of tools, policies, and practices to increase your organization's resiliency in the face of attacks and exploits.
Read more CISO series: Strengthen your organizational immune system with cybersecurity hygiene
Featured image for CISO series: Secure your privileged administrative accounts with a phased roadmap

CISO series: Secure your privileged administrative accounts with a phased roadmap

If you are working on initiatives to secure your privileged accounts (and I hope you are), this post is designed to help.
Read more CISO series: Secure your privileged administrative accounts with a phased roadmap
Lessons learned from the Microsoft SOC—Part 1: Organization Featured image for CISO series: Lessons learned—4 priorities to achieve the largest security improvements

CISO series: Lessons learned—4 priorities to achieve the largest security improvements

In this blog, Jonathan Trull shares methods he uses to prioritize where and how he spends his resources to achieve the largest security improvements.
Read more CISO series: Lessons learned—4 priorities to achieve the largest security improvements
Featured image for CISO series: Build in security from the ground up with Azure enterprise

CISO series: Build in security from the ground up with Azure enterprise

Shawn Anderson, a former CISO, now meets with CISOs every other week to answer their questions on moving to the cloud and where to start. Today, Shawn shows you how you can use the Azure enterprise scaffold to migrate to the cloud—even in a hybrid-cloud environment.
Read more CISO series: Build in security from the ground up with Azure enterprise
Featured image for CISO series: Partnering with the C-Suite on cybersecurity

CISO series: Partnering with the C-Suite on cybersecurity

In my last blog, we looked at five communication techniques that can help engage business managers in the work of cybersecurity. This week, we’ll look at how to use those techniques to bring the C-Suite into the conversation.
Read more CISO series: Partnering with the C-Suite on cybersecurity
Featured image for CISO series: Building a security-minded culture starts with talking to business managers

CISO series: Building a security-minded culture starts with talking to business managers

Protecting the company and its users against data leaks is no longer just the responsibility of IT and security operations. Everyone from the board to Firstline Workers has an important role to play.
Read more CISO series: Building a security-minded culture starts with talking to business managers