Security and Compliance are essential topics for a available and scalable Cloud environment. In this session we will dive into Azure Policy to achieve organization-wide resource governance to secure and govern every existing and/or future resource deployed resource. In an enterprise scalable architecture, Azure Policy plays an essential role. The main topics of this session are: • How Azure Policy works • how we can implement Azure Policy at scale • Recommended policies • Automate compliance with remediation • Best practices for security

Azure provides an overwhelming number of security features, recommendations, and best practices. But if you had to make your Azure environment significantly more secure, where would you start? In this session, I will share the ten security controls I would prioritize first. Whether you are building a new Azure or improving a tenant, the challenge remains the same: identifying the measures that deliver the greatest reduction in risk with the highest impact. We will explore key areas such as identity protection, privileged access management, governance, segmentation, Defender for Cloud, workload protection, and operational readiness. You will leave the session with a practical roadmap that can be applied to both new and existing Azure environments.

The cloud usage growing in the recently months and years. Many companys right now evaluating and using cloud providers to extend here own datacenter or to migrate existing services to new providers. Servers and Virtual Machine are a big part of every IT environment. Microsoft releases Azure Arc two years ago as a Multicloud service, that extend the Azure management capapbilitites to servers anywhere. In this session we will dive into the many aspects of Azure Arc, how you can enroll Azure Arc, how you can manage and enable existing Azure services like Site Recovery, Backup or Microsoft Defender for Cloud on Server outside of Azure. This session will introduce all aspects of Azure Arc and how this service helps to central manage your servers from one single point of view.

In the current cloud age, we still encounter classic VPN connections to secure different communication channels. Microsoft has introduced Global Secure Access, a complete Security Service Edge (SSE) solution based on its own global network, which addresses precisely this challenge and is also a real game changer for leaving traditional VPN solutions behind. Global Secure Access is based entirely on Zero Trust principles and combines the functions of Entra Internet Access and Entra Private Access. In this session, we will take an in-depth look at Global Secure Access and its solution and see how easy it is, for example, to fully encrypt M365 traffic securely between the client and M365 and thus prevent stolen tokens from being reproduced, among other things, without any major configuration effort. We will also evaluate the possibilities of private access and look at why classic VPN solutions can become a thing of the past.

AVD is Microsoft's flagship for desktop virtualization, and you can highly secure the user's data and sessions with the Defender suite. Let us dig into the challenge of building, securing, and managing a secure virtual desktop environment based on Microsoft Technologies. After the session, attendees gained deep insights about securing AVD, working with ephemeral hosts, and connecting Defender Solutions and AVD.