Why manage AWS policies with Terraform instead of the console?
We're moving toward infrastructure as code, but I'm struggling to see how it improves day-to-day work for AWS policies. If each application is represented by a YAML or…
policy management
What are the real benefits of managing AWS policies with Terraform?
We're moving more of our infrastructure into code, but I'm struggling to see how it improves day-to-day work for AWS policy changes. If each application has a YAML…
Best Practices for Structuring App Control Policies
I'm rolling out Windows Defender Application Control (WDAC) using the Microsoft App Control Wizard. All target machines are running at least Windows 11 24H2. My current plan for…
What are the best practices for tracking policy acknowledgements efficiently?
I've encountered various scenarios in my previous jobs where policy distribution seemed to be complete, but tracking confirmations eventually fell apart. Dealing with spreadsheets, email threads, new hires…
Advice Needed: Choosing the Best DLP Solution for 10,000 Endpoints
I'm currently weighing three options for our organization's data loss prevention (DLP) solution: Forcepoint, Trellix, and Symantec. Given that we have approximately 10,000 Windows endpoints and are looking…
Should we choose an enterprise browser or security extensions for our organization?
We're trying to make a decision in our organization about whether to implement an enterprise browser for over 3,000 staff members or to utilize security extensions within Chrome…
How can I set fine-grained permissions for editing deployment images?
I'm looking for a way to allow a user named Foo to edit the image of a specific deployment without giving them permission to modify anything else. I…