Board

Build your Zero Trust implementation roadmap with prioritized security tasks based on Microsoft and NIST best practices.

Identity Devices Data Network Infrastructure Security Operations AI

Sign in to check off items and track your progress.

Identity roadmap

13 recommendations, ordered by priority

Save Complete

FirstBasic, essential — do this before anything else

Windows Hardening

Enable LSA Protection and Credential Guard to Prevent Credential Theft

Identity & Access Management

Enforce MFA and Block Legacy Authentication with Conditional Access

SSH Hardening: Key-Based Authentication, Fail2ban, and Secure Daemon Configuration

Implement Role-Based Access Control (RBAC)

Enable Multi-Factor Authentication (MFA)

Turn on Password Hash Sync (PHS) Between Active Directory and Microsoft Entra ID

Disable Legacy Authentication to Prevent Password-Based Attacks

Require Phishing-Resistant MFA for Administrators

Microsoft 365 Security

Implement SPF, DKIM, and DMARC to Stop Email Spoofing

ThenStrongly recommended once the basics are done

Identity & Access Management

Implement the Active Directory Tiered Administration Model (Tier 0/1/2)

Install Microsoft Defender for Identity Sensor on All Domain Controllers

Email Security

Run an Effective Phishing Simulation and Awareness Program

NextAdvanced, future-proof security for mature environments

Identity & Access Management

Develop a Credential Strategy (Including Passwordless Authentication)

First

Then

Next

Windows Hardening

Enable LSA Protection and Credential Guard to Prevent Credential Theft

Identity & Access Management

Enforce MFA and Block Legacy Authentication with Conditional Access

SSH Hardening: Key-Based Authentication, Fail2ban, and Secure Daemon Configuration

Implement Role-Based Access Control (RBAC)

Enable Multi-Factor Authentication (MFA)

Turn on Password Hash Sync (PHS) Between Active Directory and Microsoft Entra ID

Disable Legacy Authentication to Prevent Password-Based Attacks

Require Phishing-Resistant MFA for Administrators

Implement the Active Directory Tiered Administration Model (Tier 0/1/2)

Install Microsoft Defender for Identity Sensor on All Domain Controllers

Develop a Credential Strategy (Including Passwordless Authentication)

Microsoft 365 Security

Implement SPF, DKIM, and DMARC to Stop Email Spoofing

Email Security

Run an Effective Phishing Simulation and Awareness Program

Optional analytics cookies help us improve Hardenly. They stay off unless you accept. Cookie policy