Manage security posture by using Microsoft Defender for Cloud - Part 2

Cloud security isn't just about finding vulnerabilities. It is about understanding risk, exposure, attack paths, external assets, and compliance posture, then using that information to prioritize and remediate the most important security issues.

In this session, Oluwafemi Akinfenwa, Cloud Specialist, will take participants deeper into Microsoft Defender for Cloud, focusing on Cloud Security Posture Management (CSPM), External Attack Surface Management (EASM), attack-path analysis, and regulatory compliance.

What You Will Learn

1. Identify Security Risks with Cloud Security Posture Management

Learn how CSPM in Microsoft Defender for Cloud can be used to identify, prioritize, and investigate security risks across Azure environments.

Key areas include:

• Foundational CSPM vs. Defender CSPM capabilities
• Cloud Secure Score and risk-based prioritization
• Security recommendations
• Attack-path analysis
• Identifying externally exploitable attack paths
• Security risks affecting cloud and AI workloads
• Using Cloud Security Explorer to investigate risks with graph-based queries

2. Discover External Assets and Vulnerabilities with Microsoft Defender EASM

Your organization's attack surface extends beyond the Azure resources you know about.
Participants will explore Microsoft Defender External Attack Surface Management (EASM) and how it can provide an outside-in view of internet-facing infrastructure.

You will learn about:

• EASM capabilities and asset discovery
• Asset types and asset states
• Recursive discovery
• Using seeds to discover unknown internet-facing assets
• Identifying vulnerabilities and security hygiene risks
• EASM dashboards
• Integrating EASM findings with Defender CSPM
• Analyzing attack paths originating from internet-exposed resources

3. Evaluate Regulatory Compliance in Defender for Cloud

Security posture also includes understanding whether your Azure environment meets applicable security and regulatory requirements.
This module explores how Defender for Cloud can help organizations:

• Understand compliance standards, controls, and assessments
• Work with the Microsoft Cloud Security Benchmark
• Navigate the Regulatory Compliance dashboard
• Investigate failing compliance controls
• Assign regulatory standards to Azure subscriptions
• Define and manage compliance scope
• Generate compliance reports
• Communicate compliance posture to stakeholders
• Understand the relationship with Microsoft Purview Compliance Manager

Who Should Attend?

This session is ideal for:

• Cloud Security Engineers
• Azure Security Engineers
• Cybersecurity Professionals
• Cloud Architects
• Azure Administrators
• DevSecOps Engineers
• Security Operations Professionals
• GRC & Compliance Professionals
• AI Security Professionals
• Professionals preparing for Microsoft security certifications
• IT professionals transitioning into Cloud & AI Security

Join us and build practical Cloud & AI Security skills.

Learn | Connect | Grow | Secure