I often get the question: How secure is the cloud, really? Where is my data, and who can touch it? So let me take you on a tour, as far as public information allows, of how a Microsoft datacenter is protected. This post is long. It has to be. Start with the scale. Azure runs […]
Read Full Post »
I often get asked how Microsoft itself protects its admins. Part of the answer is public, and it has a name: SAW, Secure Admin Workstation. Microsoft has described SAWs in public material for several years. The idea is the same as the PAW I have written about for a long time, taken quite far. Engineers […]
Read Full Post »
If you have attended one of my workshops, you have probably seen me put up a very busy slide with a lot of boxes and icons, and then say ‘don´t panic’. That is the Microsoft Cybersecurity Reference Architectures, the MCRA. At a high level, the MCRA is a set of diagrams that show how security […]
Read Full Post »