Security and Compliance are essential topics for a available and scalable Cloud environment. In this session we will dive into Azure Policy to achieve organization-wide resource governance to secure and govern every existing and/or future resource deployed resource. In an enterprise scalable architecture, Azure Policy plays an essential role. The main topics of this session are: • How Azure Policy works • how we can implement Azure Policy at scale • Recommended policies • Automate compliance with remediation • Best practices for security

Azure provides an overwhelming number of security features, recommendations, and best practices. But if you had to make your Azure environment significantly more secure, where would you start? In this session, I will share the ten security controls I would prioritize first. Whether you are building a new Azure or improving a tenant, the challenge remains the same: identifying the measures that deliver the greatest reduction in risk with the highest impact. We will explore key areas such as identity protection, privileged access management, governance, segmentation, Defender for Cloud, workload protection, and operational readiness. You will leave the session with a practical roadmap that can be applied to both new and existing Azure environments.

The cloud usage growing in the recently months and years. Many companys right now evaluating and using cloud providers to extend here own datacenter or to migrate existing services to new providers. Servers and Virtual Machine are a big part of every IT environment. Microsoft releases Azure Arc two years ago as a Multicloud service, that extend the Azure management capapbilitites to servers anywhere. In this session we will dive into the many aspects of Azure Arc, how you can enroll Azure Arc, how you can manage and enable existing Azure services like Site Recovery, Backup or Microsoft Defender for Cloud on Server outside of Azure. This session will introduce all aspects of Azure Arc and how this service helps to central manage your servers from one single point of view.

AVD is Microsoft's flagship for desktop virtualization, and you can highly secure the user's data and sessions with the Defender suite. Let us dig into the challenge of building, securing, and managing a secure virtual desktop environment based on Microsoft Technologies. After the session, attendees gained deep insights about securing AVD, working with ephemeral hosts, and connecting Defender Solutions and AVD.

Windows Server ist nach wie vor das Rückgrat vieler Rechenzentren – und gleichzeitig ein bevorzugtes Ziel für Angriffe: Credential Theft, Lateral Movement, Ransomware und Misskonfigurationen gehören zu den häufigsten Ursachen für Sicherheitsvorfälle in On‑Prem-Umgebungen. In dieser Session betrachten wir die wichtigsten Security-Bausteine für Windows Server aus Sicht von Admins und Architekten. In dieser Session gehen wir relevante Härtungsmaßnahmen vom Windows Server ein. Sichere Baselines, Rollen- und Feature‑Reduktion, Patch‑ und Update‑Strategien sowie der Schutz kritischer Verwaltungsoberflächen (RDP/WinRM/PowerShell Remoting). Anschließend gehen wir auf die AD und Identity‑Themen ein z.B. Tiering, LAPS und Privileged Access, bis zu Kerberos/NTLM‑Risiken und dem Absichern von Service Accounts. Außerdem betrachten wir wie sich Server mittlerweile mit Azure Arc und dem Einsatz von Defender for Servers weiter härten und absichern lassen.