The MCRA in a nutshell
Nov 14th, 2022 by Jesper Kråkhede
If you have attended one of my workshops, you have probably seen me put up a very busy slide with a lot of boxes and icons, and then say ‘don´t panic’. That is the Microsoft Cybersecurity Reference Architectures, the MCRA.
At a high level, the MCRA is a set of diagrams that show how security capabilities fit together. It describes Microsoft´s security capabilities, but just as much how they integrate with what you already have, including third party tools and on-premises systems. It covers identity, devices, applications, data, infrastructure, security operations and more, and connects them to Zero Trust principles.
What can it help with? A few things I use it for.
As a map. When a customer wants to know where something fits, or what they might be missing, the MCRA gives a structured overview to start from.
As a gap analysis. Take the architecture, mark what you have and what you use. The empty boxes are where to look next.
As a common language. Architects, engineers and management can look at the same picture and talk about the same thing.
And as a learning tool. Each section links to more detailed guidance.
It is not a blueprint to copy. Every organisation is different. But it saves a lot of time compared to starting from a blank whiteboard.
A good map doesn´t walk the road for you. It just keeps you from getting lost.