Azure security documentation

Azure offers security advantages that support your compliance efforts, provide cost-effective security for your organization, and help protect your hybrid and multi-cloud platforms, applications, and data.

What's new

Learn about the Microsoft Entra family of multicloud identity and access solutions

Concept

Build a Zero Trust Foundation

Concept

Back up and restore plan to protect against ransomware

Concept

Protect your multicloud environment with unified security management and advanced threat protection

How-To Guide

Understand security coverage by the MITRE ATT&CK framework

Overview

Combine SIEM and XDR to defend against modern attacks

What's new

Sunset for SHA-1 Online Certificate Standard Protocol signing

Concept

Use watchlists in Microsoft Sentinel

Modernize security operations

• Introduction to Azure security
• Shared responsibilities for cloud computing
• Protect against ransomware

Data security & governance, risk, and compliance

• Introduction to information protection and governance in Microsoft 365
• Azure Policy service
• Deploy an information protection solution with Microsoft Purview

Secure identities and access

• Securing identity with Zero Trust
• Securing privleged access
• Building apps with a Zero Trust approach to identity

Security guidance for each phase of your cloud migration journey

Strategy and planning

Define business justification and expected outcomes of adoption

• Define a security strategy
• Envision a security end state
• Develop a cloud adoption plan

Implementation and operation

Migrate and modernize security operations management

• Application migration, modernization, and innovation
• Cloud management for operations team and architects
• Unlock new technical skills and expand capabilities

Cloud architecture

Design, build, and continuously improve your cloud architecture

• Security architecture design
• Security pillar of your architecture
• Microsoft Cybersecurity Reference Architectures

Continued learning

Discover learning paths that help you improve your security in the cloud

• Information protection and governance in Microsoft 365
• Secure your cloud applications in Azure
• Implement perimeter security

Additional security guidance

Microsoft Learn

If you're new to security, build your skills with Microsoft Learn

Microsoft Cloud Adoption Framework for Azure

Secure methodology designed to help cloud architects and business decision makers create and implement security strategies for the cloud

Azure security fundamentals

For every phase of your cloud journey, learn how to secure your cloud solutions on Azure

Azure Security Benchmark

Best practices and recommendations to secure your cloud deployments

Azure Well-Architected Framework

Design principles for a securely architected system hosted on cloud or on-premises datacenters

Azure Architecture Center

A set of guiding tenets that can be used to protect your applications and data from threats

Microsoft Security Best Practices

Collection of best practices that provide clear actionable guidance for security related decisions, includes Azure and Microsoft 365

Secure development

Learn how to develop and deploy secure applications on Azure with our sample apps, best practices, and guidance

Security services and capabilities

Microsoft Sentinel

See and stop threats before they cause harm

• Overview
• Onboard Microsoft Sentinel
• Learn: Cloud-native security operations with Microsoft Sentinel

Microsoft Defender for Cloud

Unify security management and advanced threat protection across hybrid cloud workloads

• Overview
• Protect your resources
• Learn: Secure your cloud apps and services

Microsoft Defender for Identity

Improve security of hybrid environments from cyber attacks and insider threats

• Overview
• Deploy Microsoft Defender for Identity with Microsoft 365 Defender
• Learn: Defend against attacks

Azure Key Vault

Create and maintain keys that access and encrypt your cloud resources

• Overview
• Set and retrieve a secret
• Learn: Manage secrets in your server apps

Microsoft Defender for Cloud Apps

Cloud Access Security Broker (CASB) that operates on multiple clouds

• Overview
• Get started
• Detect and manage suspicious activity

Microsoft Defender for IoT

Threat detection for IoT/OT environments

• Overview
• Get started with Defender for IoT
• Learn: Enhance IoT solution security

Azure Information Protection

Control and secure emails, documents, and sensitive data

• Overview
• Deploying the client
• Discovering your sensitive content

Azure Active Directory

Multi-tenant, cloud-based identity and access management service

• Overview
• Security operations guide
• Learn: Secure Azure Active Directory users with Multi-Factor Authentication

Microsoft 365 Defender

Security solutions that protect your enterprise across attack surfaces

• Overview
• Get started
• Security operations guide