Security and Compliance in Azure

Understanding Microsoft Azure

Kevin James

Technical Lead and Training Architect

Think security

• Logging into an unsecured online banking application
  • Username, password, and money at risk from theft
• Data security and compliance maintain customer trust in organizations
• Global regulations have legal implications for businesses

Azure Security Center

• Provides robust security
• Offers unified security management
• Advanced threat protection
• Provides recommendations and insights for enhanced security

Azure Policy

• Enforces organization-wide standards
• Assesses compliance at scale
  • Corporate and regulatory

Azure Blueprints

• Consistent deployments
• Combines templates and policies
• Offer blueprint to meet GDPR requirements

Data Protection and Identity

 

Encryption

• Secures data at rest
• Protects data in transit

Encryption

• Secures data at rest
• Protects data in transit
• Like safe plus armored truck
• Encrypted data thwarts breaches

Role-based access control

• Utilizes role-based access control (RBAC) to allocate permissions
• Includes custom and predefined roles for select users or groups
• Supports extensive roles:
  • Contributor
  • Owner
  • Reader
  • RBAC administrator
  • User access administrator

Network security

 

Network security groups

• Filters inbound and outbound traffic
• Administrators set and enforce security rules

Firewall

• Provides advanced threat protection
• Filters and analyzes network traffic
• Allows only safe and approved connections

DDoS protection

• DDoS floods sites with fake traffic
  • Inaccessible to real users

DDoS protection

• DDoS floods sites with fake traffic
  • Inaccessible to real users
• Azure DDoS acts as security guard
• Allows genuine users only
• Guards continuously against large-scale attacks

Managing security

 

Managing security

Sentinel

• Detects and manages threats

Managing security

Sentinel

• Detects and manages threats

$$

Azure Information Protection

• Helps govern and classify sensitive information

Managing security

Sentinel

• Detects and manages threats

$$

Azure Information Protection

• Helps govern and classify sensitive information

$$

Key Vault

• Securely stores classified information

Compliance

• Committed to compliance standards
  • e.g., ISO, IEC, GDPR

Let's practice!

Understanding Microsoft Azure