IT Governance -Cyber Security Governance网络洗洗安全治理

1，是否都用公司电脑而不是个人电脑，设计数据安全

AD-Active Directory公司员工账户数据库

Entra ID -outlook，Teams,One drive

work group 普通家庭电脑

2.是否安装规定的指定的安全软件

Microsoft Defender

Defender for endpoint

AntiVirus

否则会中毒，会泄露公司信息

3.私人电脑是否无法登录公司邮箱，只用公司电脑才有权限登录公司的相关系统和账户

4.MFA，Bitloceker,Defender,Intune-MS 企业管理软件，Password Policy

员工-账户entra-电脑 intune-安全检查compliance-访问公司资源conditional access-整体安全管理-cyber security governance

5.entra-人账户，Intune-公司设备

 

Entra

负责“你是谁”

 

Intune

负责“你用什么电脑”

 

Compliance

负责“电脑是否安全”

 

Conditional Access

负责“让不让你进”

 

Defender

负责“防病毒”

 

BitLocker

负责“防止电脑丢失泄密”

 

MFA

负责“防止账号被盗”

 

Cyber Security Governance

负责“全球所有国家都遵守这些规则”

 

• Whether company devices are correctly joined to our AD/Entra environment and are not operating in a workgroup.
• Whether the required security software is installed on the devices.
• Whether access to Technogym Microsoft services is restricted to company-managed devices only.
• Whether the standard Technogym security policies applied to the other branches are also applied to the Japan branch devices.