Microsoft Security Guidance Training IV 2804

Session 1: Security Risk Management
This session introduces the Security Risk Management Guide, which has been designed by Microsoft to help organizations establish a process for risk assessment, cost benefit analysis, and implementation of security countermeasures. The guide also provides information on establishing an ongoing process of security risk management. The session takes a qualitative approach to risk management, tying in best practices from both the industry as well as Microsoft’s internal IT Group.

Topics
•    Security Risk Management Concepts
•    Identifying Security Risk Management Prerequisites
•    Assessing Risk
•    Conducting Decision Support
•    Implementing Controls and Measuring Program Effectiveness

Session 2: Assessing Network Security
This session helps customers plan and implement processes to help identify where they are vulnerable to network attacks and provides guidance on how to remediate issues identified in the assessment process. The session covers planning and performing security assessments, implementing penetration testing for intrusive network attacks, and presents checklists that will help identify and remediate common issues. Also described are the use of tools and processes for scanning systems for vulnerabilities.

Topics
•    Planning Security Assessments
•    Gathering Information About the Organization
•    Penetration Testing for Intrusive Attacks
•    Case Study: Assessing Network Security for Northwind Traders

Session 3: Network Isolation Using Group Policy and IPSec
This session covers the information and tasks needed to implement data isolation using Group Policies and IPSec within an organization. The session describes several scenarios where IPSec can be used to enhance network security and focuses on the creation of network isolation zones using IPSec. In addition, this session describes how to use Group Policies and Active Directory groups to restrict access to specific servers. This session will provide a scenario-focused view of Group Policies and IPSec based on Microsoft’s prescriptive guidance.

Topics
•    Overview of Internet Protocol Security
•    Understanding Network Isolation Using IPSec
•    Understanding Advanced Network Isolation Scenarios

Session 4: Identity and Access Management
This session describes how identity management solutions can be used to create and manage user account information efficiently and securely across multiple systems within an enterprise. You will see how identity information may be shared and synchronized even when distributed across several different locations. The session also shows how access management solutions can help to ensure that user accounts are granted the appropriate access to resources across different systems in an enterprise network.

Topics
•    Overview of Identity and Access Management Concepts
•    Identity Management
•    Intranet Access Management
•    Extranet Access Management
•    About Microsoft Clinics

Microsoft Official Clinic learning products provide students with technical information on Microsoft products or technologies while discussing real-world considerations for their implementation. Clinics highlight features and functionality through product demonstrations.