Real-World M365 Cybersecurity Training Curriculum
MS Entra ID Training October - November
Introduction to Entra ID (Azure Active Directory)
- Identity Access Management
- User Provisioning
- User Role Assignment
- User Access Reviews
- User Deprovisioning
- Security and Dynamic Role creation
- Enterprise Application Registrations
- Identity Protection
- User risky policy config
- Sign-in risky policy config
- Multifactor Authentication registration Policy
- Risky User Reports
- Authentication Methods config
- Password Protection config
- Password reset config
- Privileged Identity Management
Conditional Access Policies
- Geo-fencing
- MFA for all users
- MFA for all admins
- MFA for all guest
- Require Phishing-resistant MFA for Admins
- Blocking legacy authentication
- No persistent browser session
- Require Device Compliance
- Require ReAuth and Disable Browser Persistence
- Use Application Enforced Restrictions for unmanaged devices
MS Defender Training January - March
- Incident & Alerts Investigations & Triaging
- Incident Management
- Alert Service Settings
- Alert Email Notification settings
- Alert Tuning
- Defender security configuration settings.
- Threat Hunting
- Actions & User Submissions
- Phishing Reporting & Triaging
- Threat Intelligence
- Threat Analytics
- Intel Explorer
- Intel Profiles
- Intel Projects
- Intro to MS Sentinel (Log Aggregator)
- Incident triaging & Log Analysis from Sentinel
- Enabling Sentinel Analytics Rules
- Installing Data Connectors
- Sentinel Workbooks
- Email & Collaboration
- Explorer Analysis for Malware / Phish
- Quarantine Email Reviews
- Utilizing the Exchange Message Trace
- Security Awareness Training (Social Engineering Attacks, Phishing Training)
- Attack Simulation Testing & Training
- Threat Policies & Configurations
- Preset Security Policies
- Anti-Phishing Policies
- Anti-Spam Policies
- Anti-Malware Policies
- Safe Attachments
- Safe Links
- Tenant Allow/Block Lists config
- Cloud App Discovery Policies
MS Endpoint (Intune) Training April - June
- Device Management
- Device Configuration Settings
- Device Compliance Settings
- Defender security configuration settings
- Intune configuration settings
- Windows device management
- App Protection Policies Config
- Android Mobile App Protection Policies Config
- iOS Mobile App Protection Policies Config
- Security baseline configurations
- Administrative configuration settings
- Attack Surface Reduction (ASR)
- Anti-virus policy configuration
- Endpoint Privilege Identity Management
- Disk Encryption Policies
- Firewall Policies
- Endpoint Detections & Response (EDR)
- Tenant Administration
MS Compliance Training July - September
- Assessment implementations - SOC 2 and CMMC 2.o
- Data Loss Prevention (DLP) Policies
- Information Protection Policies
- Data Life Cycle Management
- Real-World Annual Internal SOC 2 Audit Exercise
MS Teams
- Introduction to MS Teams Management
- Project - Creating Teams Channels and Access Control Management
- Project Management & Tracking in Teams
MS SharePoint
- Introduction to SharePoint Site Creation
- Project - Creating a Security Awareness Training Site
- Managing Access in SharePoint
- SharePoint Policies Config
Enterprise Risk Assessment
- Enterprise Risk Assessment
- Leveraging Enterprise Risk Response Strategies
- Implementing Enterprise Risk Management Framework
- Risk Register Documentation
Third-Party Vendor Risk Assessment
- Performing an Onboarding Vendor Risk assessment
- NDA Obligations
- Building a Vendor Management Dashboard for vendor Tracking & Remediations
- Performing Annual Vendor Risk Assessment & Reporting
Incident Response Testing
- Performing annual Incident Response Testing (Cybersecurity Tabletop Exercises)
- Report Documentation for Evidence Gathering.
- CISA Incident Response Resources
Asset Management & Configuration Audit
- Asset (System Inventory) Management
- Systems and Application Audit Documentation
- Performing Quarterly Audits
- Reporting Risks and Remediation Efforts
- Vulnerability Management
Physical Access Review
- Performing Quarterly Audits
- Physical Access Control Implementation Scenarios
- Evidence Gathering & Documentation
Policy & Procedure Drafting & Review
- Risk Management Policy & Procedure
- Physical Access Policy & Procedure
- Information Security Policy & Procedure
- Security Awareness Policy & Procedure
- Access Control Policy & Procedure
- Identification & Authentication Policy & Procedure
- Incident Response Policy & Procedure
- Secure System Development Life Cycle Standard
