If you have attended one of my workshops, you have probably seen me put up a very busy slide with a lot of boxes and icons, and then say \u2018don\u00b4t panic\u2019. That is the Microsoft Cybersecurity Reference Architectures, the MCRA.<\/p>\n
At a high level, the MCRA is a set of diagrams that show how security capabilities fit together. It describes Microsoft\u00b4s security capabilities, but just as much how they integrate with what you already have, including third party tools and on-premises systems. It covers identity, devices, applications, data, infrastructure, security operations and more, and connects them to Zero Trust principles.<\/p>\n
What can it help with? A few things I use it for.<\/p>\n
As a map. When a customer wants to know where something fits, or what they might be missing, the MCRA gives a structured overview to start from.<\/p>\n
As a gap analysis. Take the architecture, mark what you have and what you use. The empty boxes are where to look next.<\/p>\n
As a common language. Architects, engineers and management can look at the same picture and talk about the same thing.<\/p>\n
And as a learning tool. Each section links to more detailed guidance.<\/p>\n
It is not a blueprint to copy. Every organisation is different. But it saves a lot of time compared to starting from a blank whiteboard.<\/p>\n
A good map doesn\u00b4t walk the road for you. It just keeps you from getting lost.<\/p>\n","protected":false},"excerpt":{"rendered":"
If you have attended one of my workshops, you have probably seen me put up a very busy slide with a lot of boxes and icons, and then say \u2018don\u00b4t panic\u2019. That is the Microsoft Cybersecurity Reference Architectures, the MCRA. At a high level, the MCRA is a set of diagrams that show how security […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4,13],"tags":[114,115,26],"class_list":["post-1329","post","type-post","status-publish","format-standard","hentry","category-security-architecture","category-technology","tag-mcra","tag-microsoft","tag-security-architecture"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1329","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1329"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1329\/revisions"}],"predecessor-version":[{"id":1358,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1329\/revisions\/1358"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1329"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1329"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1329"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}