S6E28 - Automate Your Security Baseline with Microsoft’s Open-Source Assessment Tool
Let's Talk Azure!14 Marras 2025

S6E28 - Automate Your Security Baseline with Microsoft’s Open-Source Assessment Tool

In this episode, we dive into Microsoft’s Zero Trust Assessment - an open-source, automated tool that scans hundreds of Entra ID and Intune settings against NIST, CISA, CIS, and Microsoft’s own internal baselines. Discover how it aligns with the Secure Future Initiative, delivers actionable remediation, and turns Zero Trust from theory into measurable reality. Perfect for CISOs, SecOps teams, and anyone tired of spreadsheet audits.

Key Takeaways:

  • The Pain of Manual Zero Trust Audits
  • What the Zero Trust Assessment Actually Does
  • Why automate your security assessments

What did you think of this episode? Give us some feedback via our contact form, Or leave us a voice message in the bottom right corner of our site.

Read transcript

Jaksot(155)

S2E10 - Microsoft Entra – Azure AD – Identity Governance

S2E10 - Microsoft Entra – Azure AD – Identity Governance

Alan and Sam discuss how Identity Governance within Azure AD, part of Microsoft's Entra family of identity products can help with your user lifecycle. Alan takes the role of the 'Expert' and explains ...

9 Syys 202238min

S2E9 - Microsoft Entra Permission Management - First Look

S2E9 - Microsoft Entra Permission Management - First Look

Alan and Sam take a first look at Microsoft Entra permissions management. Sam takes the role of the 'Expert' and explains how the product allows you to discover and remediate permissions creep in your...

2 Syys 202244min

S2E8 - Securing Multi-Cloud environments with Microsoft Defender for Cloud

S2E8 - Securing Multi-Cloud environments with Microsoft Defender for Cloud

Alan and Sam discuss how Microsoft Defender for Cloud can help Secure your multi-cloud environments. Alan takes the role of the 'Expert' and explains how you can easily gain visibility of your multi-c...

26 Elo 202251min

S2E7 - Cloud Adoption Framework for Azure

S2E7 - Cloud Adoption Framework for Azure

Alan and Sam take a look at The Cloud Adoption Framework for Azure. Sam takes the role of the 'Expert' and explains his experience with the Cloud Adoption framework and highlights the reasoning about ...

19 Elo 202257min

S2E6 - Microsoft Entra – Securing and Managing Cloud Identities

S2E6 - Microsoft Entra – Securing and Managing Cloud Identities

Alan and Sam discuss how Azure AD, part of the Microsoft Entra family can secure your identity in the cloud. Alan takes the role of the 'Expert' and explains his viewpoint of the product and why we sh...

12 Elo 20221h 5min

S2E5 - Managing Compliance with Azure Policy

S2E5 - Managing Compliance with Azure Policy

Alan and Sam discuss all things Azure Policy, a way to manage Azure compliance at scale. Sam takes the role of the 'Expert' and explains his viewpoint of the product/tooling and why it can help organi...

5 Elo 202257min

S2E4 - Modern Device Management with Microsoft Endpoint Manager

S2E4 - Modern Device Management with Microsoft Endpoint Manager

Alan and Sam discuss how Microsoft Endpoint Manager (MEM) can simplify device management whilst making it easy to secure them. Alan takes the role of the 'Expert' and explains his viewpoint of the pro...

29 Heinä 202252min

S2E3 - Terraform - Deploy your Infrastructure as Code

S2E3 - Terraform - Deploy your Infrastructure as Code

Alan and Sam discuss Terraform, a popular choice in the Infrastructure as Code space. Sam takes the role of 'Expert' and explains his viewpoint of the product and why we should be utilising Terraform ...

22 Heinä 202251min