All 18 of the Microsoft Cybersecurity Reference Architectures (MCRA) videos are now up!
We cover detailed technical information + context on security threats and business risk.
Share and Enjoy!
https://t.co/Q3twt7q4X0
Many thanks to my incredible co-presenters!
The SAF documentation site and June 2026 MCRA just went live on Microsoft Learn!
Check it out and let us know what you think!
https://t.co/afotqKE4mQ
Note: This is the first release and we will be continuing to add to it. Send us your feedback, requests, and ideas.
This is based on the workshops we deliver to Microsoft Unified customers (SecOps/SOC, Data Security, Infrastructure and Development, Access and Identity, and more).
end 🧵
SAF also ties together all of Microsoft's historical guidance (SDL, IR playbooks, Immutable laws of security, etc.) into a single organized framework that guides your security modernization journey.
I started off with an episode describing free resources from Microsoft, The Open Group, and The Zero Trust Playbook that you can use to improve your cyber security program, metrics, risk management, architecture, technology, SOC, and more.
Hey y'all I just recorded my first video in my new 'Mark on Cybersecurity' YouTube channel!
Lots more to come! Let me know what you think and what topics you would like me to cover
https://t.co/xejQXKPnvg
There is a big difference between using an engineered/supported agent like in Microsoft Defender focused on a single task vs. flexible interactive security interfaces like Security Copilot vs. asking any old random frontier model to do security.
End 🧵
I keep hearing people are "Automating Tier 1 with AI" (or some other job) and I think words really matter here.
◾ Are you trying to replace a human person with AI? Assigning a human role to AI?
◾ Are you automating the tasks currently being done by people?
a short 🧵
This was a main theme of my recent Tampa BSides talk "Security is a Team Sport (and we are NOT playing like a team) - slides downloadable here - https://t.co/XK0MyOZTix
Security can never “win the game” - it's not the job we signed up for.
We are the defense squad so we don't score goals or points - we just keep opponents from scoring points.
The organization can’t succeed without a good offense or without a good defense.
At the end of the day, security is a team sport where we have to work together!
Navigating this journey and earning this credibility requires communication and empathy to build relationships, trust, and partnership as well as political savvy and careful positioning.
end 🧵
One of the most critical skillsets for CISOs is their ability to navigate the power structure of an organization (e.g. politics)
I included this slide in my recent Tampa BSides talk (slides posted, recording pending) - https://t.co/XK0MyOZTix
🧵
Almost every CISO starts in a default starting position of being blamed. They must grow influence over business decisions with a goal of becoming “integral“ to decisions where business leaders wouldn't feel comfortable making a big decision without their counsel and thoughts.