index.yml

### YamlMime:Hub

title: Azure security documentation
summary: Azure offers security advantages that support compliance efforts, and provide cost-effective security for your organization, and help protect your hybrid and multicloud platforms, applications, and data.
brand: azure

metadata:
  title: Azure security documentation
  description: Azure offers security advantages that support your compliance efforts, provide cost-effective security for your organization, and help protect your hybrid and multicloud platforms, applications, and data.
  ms.service: security
  ms.topic: hub-page
  author: msmbaldwin
  ms.author: mbaldwin
  ms.date: 02/12/2026

highlightedContent:
  items:
    - title: Zero Trust security in Azure
      itemType: concept
      url: ./fundamentals/zero-trust.md
    - title: AI shared responsibility model
      itemType: concept
      url: ./fundamentals/shared-responsibility-ai.md
    - title: Ransomware protection in Azure
      itemType: concept
      url: ./fundamentals/ransomware-protection.md
    - title: Microsoft Defender for Cloud
      itemType: overview
      url: /azure/defender-for-cloud/defender-for-cloud-introduction
    - title: Unified security operations with Microsoft Sentinel
      itemType: overview
      url: /unified-secops-platform/overview-unified-security
    - title: Network security best practices
      itemType: how-to-guide
      url: ./fundamentals/network-best-practices.md
    - title: Encryption overview
      itemType: concept
      url: ./fundamentals/encryption-overview.md
    - title: Identity management best practices
      itemType: how-to-guide
      url: ./fundamentals/identity-management-best-practices.md

conceptualContent:
  items:
    - title: Security fundamentals
      links:
        - url: ./fundamentals/overview.md
          itemType: overview
          text: Introduction to Azure security
        - url: ./fundamentals/shared-responsibility.md
          itemType: concept
          text: Shared responsibility in the cloud
        - url: ./fundamentals/end-to-end.md
          itemType: concept
          text: End-to-end security in Azure

    - title: Threat protection
      links:
        - url: ./fundamentals/ransomware-protection.md
          itemType: concept
          text: Ransomware protection in Azure
        - url: ./fundamentals/threat-detection.md
          itemType: concept
          text: Azure threat detection
        - url: ./fundamentals/backup-plan-to-protect-against-ransomware.md
          itemType: how-to-guide
          text: Back up and restore plan for ransomware

    - title: Zero Trust and identity
      links:
        - url: ./fundamentals/zero-trust.md
          itemType: concept
          text: Zero Trust security in Azure
        - url: /security/zero-trust/deploy/identity
          itemType: how-to-guide
          text: Securing identity with Zero Trust
        - url: ./fundamentals/identity-management-best-practices.md
          itemType: how-to-guide
          text: Identity management best practices
additionalContent:
  sections:
    - title: Security guidance for each phase of your cloud migration
      items:
        - title: Strategy and planning
          summary: Define business justification and expected outcomes of adoption                 
          links: 
            - url: /azure/cloud-adoption-framework/strategy/define-security-strategy
              text: Define a security strategy
            - url: /azure/cloud-adoption-framework/secure/
              text: Envision a security end state
            - url: /azure/cloud-adoption-framework/plan/
              text: Develop a cloud adoption plan

        - title: Implementation and operation
          summary: Migrate and modernize security operations management                   
          links: 
            - url: /azure/cloud-adoption-framework/ready/landing-zone/
              text: Application migration, modernization, and innovation
            - url: /azure/cloud-adoption-framework/manage/
              text: Cloud management for operations team and architects
            - url: /azure/cloud-adoption-framework/innovate/
              text: Unlock new technical skills and expand capabilities

        - title: Cloud architecture
          summary: Design, build, and continuously improve your cloud architecture
          links: 
            - url: /azure/architecture/guide/security/security-start-here
              text: Security architecture design
            - url: /azure/architecture/framework/security/overview
              text: Security pillar of your architecture
            - url: /security/cybersecurity-reference-architecture/mcra
              text: Microsoft Cybersecurity Reference Architectures

        - title: Continued learning
          summary:  Discover learning paths that help you improve your security in the cloud
          links: 
            - url: /training/modules/m365-compliance-information-governance/
              text: Information protection and governance in Microsoft 365
            - url: /training/paths/secure-your-cloud-apps/
              text: Secure your cloud applications in Azure
            - url: /training/modules/perimeter-security/
              text: Implement perimeter security

    - title: Additional security guidance
      items:
        - title: Microsoft Learn training
          summary: Build your skills with Microsoft Learn security training
          url: /training/browse/?products=azure&roles=security-engineer%2Csecurity-operations-analyst
        - title: Microsoft Cloud Adoption Framework
          summary: Security methodology for cloud architects and decision makers
          url: /azure/cloud-adoption-framework/secure/
        - title: Azure security fundamentals
          summary: Learn how to secure your cloud solutions on Azure
          url: ./fundamentals/index.yml
        - title: Azure Security Benchmark
          summary: Best practices and recommendations to secure your cloud deployments
          url: /security/benchmark/azure/introduction
        - title: Azure Well-Architected Framework
          summary: Security pillar for cloud and hybrid architectures
          url: /azure/architecture/framework/security/overview
        - title: Secrets management best practices
          summary: Safeguard cryptographic keys, certificates, and secrets
          url: ./fundamentals/secrets-best-practices.md

    - title: Security services and capabilities
      items:
        - title: Microsoft Sentinel
          summary: See and stop threats before they cause harm
          links: 
            - url: ../sentinel/overview.md
              text: Overview
            - url: ../sentinel/quickstart-onboard.md
              text: Onboard Microsoft Sentinel
            - url: /training/paths/security-ops-sentinel/
              text: "Learn: Cloud-native security operations with Microsoft Sentinel"

        - title: Microsoft Defender for Cloud
          summary: Unify security management and advanced threat protection across hybrid cloud workloads                 
          links: 
            - url: /azure/defender-for-cloud/defender-for-cloud-introduction
              text: Overview
            - url: /azure/defender-for-cloud/tutorial-protect-resources
              text: Protect your resources
            - url: /training/paths/sc-200-mitigate-threats-using-azure-defender/
              text: "Learn: Mitigate threats using Microsoft Defender for Cloud"


        - title: Microsoft Defender for Identity
          summary: Improve security of hybrid environments from cyber attacks and insider threats                 
          links: 
            - url: /defender-for-identity/what-is
              text: Overview
            - url: /defender-for-identity/deploy-defender-identity
              text: Deploy Microsoft Defender for Identity with Microsoft Defender XDR
            - url: /training/modules/defender-identity-defend-attacks/
              text: "Learn: Defend against attacks"

        - title: Azure key management
          summary: Key management solutions in Azure
          links: 
            - url: ./fundamentals/key-management.md
              text: Key management in Azure
            - url: ./fundamentals/key-management-choose.md
              text: Choosing a key management solution
            - url: /azure/key-vault/
              text: Azure Key Vault
            - url: /azure/key-vault/managed-hsm/
              text: Azure Managed HSM
            - url: /azure/payment-hsm/
              text: Azure Payment-HSM

        - title: Microsoft Defender for Cloud Apps
          summary: Cloud Access Security Broker (CASB) that operates on multiple clouds
          links: 
            - url: /defender-cloud-apps/what-is-defender-for-cloud-apps
              text: Overview
            - url: /defender-cloud-apps/get-started
              text: Get started 
            - url: /defender-cloud-apps/tutorial-suspicious-activity
              text: Detect and manage suspicious activity
            - url: /training/modules/microsoft-cloud-app-security/
              text: "Learn: Secure your cloud apps and services"

        - title: Microsoft Defender for IoT
          summary: Threat detection for IoT/OT environments
          links: 
            - url: ../defender-for-iot/overview.md
              text: Overview
            - url: ../defender-for-iot/getting-started.md
              text: Get started with Defender for IoT
            - url: /training/paths/enhance-iot-solution-security-by-using-azure-defender/
              text: "Learn: Enhance IoT solution security"

        - title: Microsoft Entra ID
          summary: Cloud-based identity and access management service
          links: 
            - url: /entra/fundamentals/whatis
              text: Overview
            - url: /entra/architecture/security-operations-introduction
              text: Security operations guide
            - url: /training/modules/secure-aad-users-with-mfa/
              text: "Learn: Secure users with multifactor authentication"

        - title: Microsoft Defender XDR
          summary: Security solutions that protect your enterprise across attack surfaces
          links: 
            - url: /microsoft-365/security/defender/microsoft-365-defender?view=o365-worldwide
              text: Overview
            - url: /microsoft-365/security/defender/get-started?view=o365-worldwide
              text: Get started 
            - url: /microsoft-365/security/defender/integrate-microsoft-365-defender-secops?view=o365-worldwide
              text: Security operations guide