Beyond 90 Days
The beyond 90 days
ESAE Phase 3 Outline
The third and final phase of the ESAE framework shifts you, the defender, to a more proactive security stance. Some of these steps are intensive and create a large amount of administrative overhead. It is a best practice to completely deploy these steps, but depending on the size of the organization and the risk appetite of an organization, completing these steps is not cost-effective..
- Modernize Roles and Delegation Model (Microsoft’s Tiered Delegation)
- SmartCard or Passport Authentication for all domain administrators
- Admin forest for Active Directory Administrators (Red Forest)
- Code Integrity Policy for DCs
- Shielded VMs for Virtual DCs
