{"id":17688,"date":"2018-11-01T19:00:03","date_gmt":"2018-11-01T19:00:03","guid":{"rendered":"https:\/\/cloudblogs.microsoft.com\/microsoftsecure\/?p=86341"},"modified":"2018-11-01T19:00:03","modified_gmt":"2018-11-01T19:00:03","slug":"ciso-series-build-in-security-from-the-ground-up-with-azure-enterprise","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/ciso-series-build-in-security-from-the-ground-up-with-azure-enterprise\/","title":{"rendered":"CISO series: Build in security from the ground up with Azure enterprise"},"content":{"rendered":"
<\/div>\n

As an executive security advisor at Microsoft and a former CISO, I meet with other CISOs every week to discuss cybersecurity, cloud architecture, and sometimes everything under the sun regarding technology. During these discussions with CISOs and other senior security executives of large enterprises\u2014who are in the beginning stages of a cloud migration\u2014I find they\u2019re excited about the increased flexibility of Microsoft Azure services and the consumption-based model it offers their business units. Regardless of where they are in the journey, they also have some concerns. For example, they need to figure out how to enforce security policies when IT no longer serves as the hub for services and applications.<\/p>\n

Specifically, they come to me with the following three questions:<\/p>\n

    \n
  1. We are interested in Microsoft and already have many of your security solutions. How do these tools translate to a hybrid-cloud solution and where do we start?<\/li>\n
  2. Security impacts many parts of the organization outside of the security team. Who do we need to bring to the table across the organization for this to be a successful migration to a secure cloud?<\/li>\n
  3. Can we create a roadmap or strategy to guide our journey to the cloud?<\/li>\n<\/ol>\n

    It really comes down to balancing agility with governance. Many of my customers have found that the Azure enterprise scaffold<\/a> and Azure Blueprints<\/a> (now in preview) can help them balance these two critical priorities. I hope my suggestions and insight help you to understand how to use these tools to smooth your cloud migration.<\/p>\n

    Establish a flexible hierarchy as the baseline for governance<\/h2>\n

    Scaffolding and blueprints are concepts borrowed from the construction industry. When a construction crew builds a large, complex, and time-consuming project they refer to blueprints and erect scaffolding. Together these tools simplify the process and provide guardrails to guide the builder. You can think of the Azure enterprise scaffold and Azure Blueprints in the same way.<\/p>\n