Empowering Microsoft Partners with Essential Security Resources and Partner-to-Partner Solutions

In today's digital age, security is not just a concern; it's a critical imperative. With Microsoft detecting an astounding 345 million cyberattacks daily, the need for robust security measures has never been more pressing as we embrace the transformative power of generative AI. Partners play a pivotal role in this journey, offering solutions that drive AI innovation and safeguard it against malicious intents. That’s why AI transformation and security go hand in hand – you simply can’t have one without the other.

The Secure Future Initiative is a pivotal program designed to bolster security measures for Microsoft partners, ensuring a resilient and trustworthy digital ecosystem. This initiative focuses on enhancing cybersecurity protocols, providing advanced tools, and fostering a culture of security awareness. By leveraging cutting-edge technologies and comprehensive training, Microsoft partners can safeguard their operations against evolving threats. The Secure Future Initiative not only aims to protect data and infrastructure but also to empower partners with the knowledge and resources needed to navigate the complex landscape of cybersecurity confidently. This commitment to security underscores Microsoft’s dedication to creating a safer, more secure future for all its partners.

Microsoft recently expanded its scope to ensure that our approach remains robust and adapts to the growing threat landscape.

Three key principles that underpin Microsoft's SFI approach:

• Secure by design: security comes first when designing any product or service.
• Secure by default: security protections are enabled and enforced by default, requiring no extra effort.
• Secure operations: security controls and monitoring are continuously improved to meet current and future threats.

A few ways we are informing our prioritization is by continuously learning from our own threat intelligence, the security community, and from past security incidents to improve our methods and practices.

The Microsoft Cloud Security Benchmark provides a comprehensive framework for evaluating and improving your cloud security posture. It is a crucial resource for ensuring that your security measures are up to date and effective against current threats.

Official Partner Training Gallery

The Official Partner Training Gallery serves as your central hub for all partner training materials. This gallery is regularly updated with the latest webinars and resources, making it an indispensable tool for staying current. Partners are encouraged to bookmark this page and revisit it frequently, particularly after the summer, as new content will be added regularly.

Bookmark: https://aka.ms//NIS2-readiness

Navigating Cybersecurity Compliance: Webinars on Zero Trust, NIS2, and DORA

In the rapidly evolving landscape of cybersecurity, understanding regulatory frameworks like the Network and Information Systems 2 (NIS2) Directive and the Digital Operational Resilience Act (DORA) is more crucial than ever. Our series of webinars, including specialized sessions featuring cybersecurity legal advisors, is designed to equip partners with the knowledge and tools necessary to navigate the intricate legal language of these directives. These sessions provide invaluable guidance on aligning these regulations with Microsoft solutions, ensuring that your customers achieve robust compliance and security.

Understanding NIS2 and DORA

The NIS2 Directive, set to become the most comprehensive European cybersecurity directive to date, will come into effect in October 2024. It aims to harmonize cybersecurity requirements across member states, establishing a benchmark of "minimum measures." These measures encompass a wide range of aspects, including:

• Conducting risk assessments
• Implementing policies and procedures for cryptography
• Establishing security protocols for employees with access to sensitive data
• Employing multifactor authentication
• Providing cybersecurity training

Additionally, NIS2 mandates companies to devise plans for handling and reporting security incidents and managing business operations during and after such events.

Similarly, DORA is a European Union regulation slated for implementation in January 2025. It focuses on fortifying the IT security of financial entities, such as banks, insurance companies, and investment firms, to ensure their resilience against severe operational disruptions. Key aspects of DORA include:

• ICT risk management
• Third-party risk management
• Digital operational resilience testing
• Reporting major ICT-related incidents to competent authorities

Leveraging Microsoft Solutions for Compliance

Our resources are crafted to help partners understand the full scope of NIS2 and DORA, utilizing Microsoft Security solutions to support customer compliance efforts effectively. The following webinars and guides provide a comprehensive view:

• Level 200 Partner Webinar: NIS2/Zero Trust
• On-Demand Webinars: NIS2 – Strengthening Europe's Cybersecurity Resilience
• DORA: Guidance and Key Assets for Partners
• NIS2 Campaign in a Box
• NIS2 Resource Guide for SMB Partners
• Mapping NIS2 Principles to Microsoft Security Technology
• Unlocking Business Opportunities with NIS2/DORA

By participating in these webinars and utilizing the provided resources, partners can ensure they are well-equipped to support their customers' journey toward compliance with NIS2 and DORA. Together, we can help strengthen cybersecurity resilience and operational readiness across Europe and beyond.

Playbooks for Building Offers

To assist partners in building offers around Nis2, Dora, and other regulatory requirements, we have developed detailed playbooks. These playbooks map technology to Microsoft solutions, providing a clear guide on leveraging Microsoft technologies to meet regulatory requirements. This resource is essential for any partner looking to enhance their security offerings. For a almost full overview of resources you can login and check Microsoft Transform.

• Modern Work - Secure Productivity: Guidance on ensuring secure productivity for modern workplaces.
• Security - Threat Protection: Strategies and solutions for comprehensive threat protection.

- SMB Partner Playbook - Threat Protection

- Drive SMB Growth: Use Playbook, Cohort Sales Guide, and sales tools

Leverage collaboration with Microsoft and become part of the account plan for managed customers. Enhance your business profile, share leads, and receive referrals in the Partner Center. Make sure to utilize free security features and keep track of training opportunities through Microsoft Transform.

Consider building an AI solution with the Microsoft Purview AI Hub which automatically classifies newly generated AI data to identify when sensitive data is being shared and tracks the number of users interacting with AI apps and their associated risk level.

Partners can also benefit from specialized incentives, such as the Microsoft Defender for Cloud Incentive, to enhance their security offerings and gain a competitive edge. There are many more security incentives which you can check in the updated incentive guide at Microsoft Partner Commercial Incentives Guide. Get specialized to get access to the bigger incentives, read more about incentives and the specializations to get more out of your partnership.

To further leverage AI for security, consider Microsoft Copilot for Security across our security portfolio and beyond, this provides richer embedded experiences and generative AI capabilities within familiar and trusted products.

Customizable Marketing Assets

Our 'campaign in a box' initiative offers customizable marketing assets that partners can easily adapt by adding their logo. This significant investment from Microsoft aims to enable partners to effectively market their solutions. These assets are designed to help you reach your target audience and communicate the value of your security offerings.

MCAPS Start for Partners is in the books, but the learning doesn't have to stop. 🤓The keynote and every session are available on demand. Visit the website to check out all this great content: https://msft.it/6041lrJ8b

Partner-to-Partner Solutions

We are proud to highlight some of the innovative partner-to-partner solutions from our esteemed partners:

• Frieser & Schuckmann: Gain knowledge, implement the NIS2 and demonstrate compliance with one package. With the Cyber Basics NIS2 package you have everything at your fingertips to comply with the NIS2. The preliminary work has already been done for you by the lawyers of Waveland European Lawyers, who have fully analyzed the NIS2. Together with the cybersecurity specialists from Frieser & Schuckmann, who will carry out the necessary technical security assessment for you.
• Cloud Life | We Secure Society : Offering advanced cloud security solutions to protect your digital assets. Cloud Life focuses on securing connectivity, device hardening, threat monitoring, and security posture management, ensuring comprehensive protection for IoT devices
• Northwave Cyber Security : Northwave has developed a new monitoring solution for MSPs to provide advanced threat detection and response to your end clients. Leverage your existing IT management services and our world-class threat analysis and response capabilities to better protect your clients and enhance their resilience.
• EightFence : Eightfence has developed a scalable MXDR/SOC service for SMBs using Microsoft 365 Business Premium, Defender for Cloud, and Sentinel, ensuring comprehensive security for small to medium-sized businesses. Contact Tim de Vries
• Nedscaper : Delivering comprehensive security assessments and compliance services. Nedscaper offers Managed Extended Detection and Response (MXDR) services integrated with Microsoft Sentinel, helping organizations predict and mitigate cyber threats before they impact business operations
• TD SYNNEX Chorus : Enabling seamless integration of security solutions across various platforms. TD SYNNEX Chorus provides AI-powered prevention, detection, response, and hunting across endpoints and cloud workloads, ensuring a robust security posture for organizations
• Arrow Electronics Microsoc: Offering a wide range of cybersecurity products and services to enhance your security posture. Arrow Microsoc focuses on providing comprehensive cybersecurity solutions tailored to meet the unique needs of different organizations.

Collaboration with Microsoft

Understand the Microsoft Customer Engagement Methodology (MCEM) for Partners connects Microsoft sales, support, industry solutions delivery, and partners to bring more value to the customer by placing them at the heart of every deal. By employing this methodology, we can co-innovate and co-develop with our customers, understanding their unique needs and desired outcomes.

Free Solution Assessments for Partners and Customers.

Leverage collaboration with Microsoft and becoming part of the account plan for managed customers or collaborate with the Microsoft sales teams and if you really want to shine through the clouds make sure you have the following in place:

• Business Profile - this is connected to both the Microsoft seller view and to Microsoft customers on the partner profile page including competencies at Microsoft Appsource customer page.
• Share leads and receive referrals in Partner Center to collaborate with the sales teams.
• Make sure you have all the free security features set up to protect your own and your customer business, as a reference read my earlier blog: Security for Microsoft Partners.
• Customer associations - for partners who don't sell licenses but are working with Microsoft customers there are ways to make your contributions visible. For Azure set up Partner Admin Link and for Modern Work the association Claiming Partner of Record.
• Microsoft Security Partners - Partners can receive an additional incentive specifically for Infrastructure & Database Migration engagements that include Defender for Cloud consumption in Azure Migrate and Modernize partner led.
• #Skillingisbilling - make sure you have your team certified, at least with the basics.. Next to Microsoft Learn, for partners you can access free training for the SC-900 Security Fundamentals, SC-100 Microsoft Cybersecurity Architect, SC-200: Microsoft Security Operations Analyst, SC-400 Information Protection and Compliance Administrator Associate. For reference check out the clickable training certification poster to define your path.
• Keep track of free partner training opportunities and materials at Transform for Partners.

Upcoming Resources & Training

Fortify your Data Security with Microsoft Purview Workshop August 20-22, 2024 | APAC (IST) August 21-23, 2024 | Americas (PDT) Register now

Migrating your SIEM Solution to Microsoft Sentinel Bootcamp  August 27-28, 2024 | APAC (IST) August 28-29, 2024 | EMEA (BST), Americas (PDT) Register now

Deploy and Optimize Microsoft Sentinel Workshop  September 4-5, 2024 | APAC (IST) September 5-6, 2024 | EMEA (BST), Americas (PDT) Register now

Data Security and Governance for Copilot for M365 with Microsoft Purview  September 10, 2024 | APAC (IST)  September 11, 2024 | Americas (PDT) Register now

A Deep Dive into Implementing Copilot for Security Workshop  September 17-19, 2024 | APAC (IST) September 18-20, 2024 | EMEA (BST), Americas (PDT) Register now

Modern Sec Ops Partner Airlift  September 9-10, 2024 | Americas (PDT) September 10-11, 2024 | APAC (IST), EMEA (BST) Register now

On-Demand Training Register now

To simplify discoverability of on-demand content, we have centralized on-demand videos in the Partner Project Ready Workshops – Security Portal.

• Data Security and Governance for Copilot for M365 with Microsoft Purview Boot Camp
• Implementing Microsoft Defender for Endpoint Workshop
• Microsoft Copilot for Security Partner Bootcamp (February & April)
• Threat Protection and Incident Response with Microsoft Sentinel Workshop
• Migrating to Microsoft Sentinel Bootcamp
• Fortify your Data Security with Microsoft Purview Workshop
• Get ready for NIS2: Get technically ready to comply with NIS2 requirements and generate new opportunities with Microsoft Security Solutions
• Identity & Access Management with Microsoft Entra Workshop
• Microsoft Defender for O365, Identity & CloudApps Bootcamp
• Threat Protection and Incident Response with Microsoft SIEM and XDR Bootcamp
• Prepare for New Threats with Microsoft Security Copilot
• Microsoft Entra Updates and Azure AD Renaming Guidelines
• Secure Cloud-Native Applications with Microsoft Defender for Cloud-Integrated Solutions
• Security Through the Lens of Zero Trust
• Secure All Things with Microsoft Security Solutions
• Implementing Microsoft Defender for Endpoint Workshop
• Azure Security Management Deep Dive
• Azure Network Security Deep Dive
• Implementing Cloud Security with Microsoft 365 Defender Solutions

Days of the Defender Register now

• Firewall Protection
• Defend Against Threats with Microsoft Sentinel
• Identify & Access Management with Microsoft Entra
• Compliance and Privacy with Microsoft Purview and Priva
• Capture the Flag

 Microsoft LevelUp for Partners

On-demand content covering sales, pre-sales, and technical skilling with labs. Request access to Microsoft LevelUp. Request access by emailing AskGPSEnablement@microsoft.com. In the subject line, include "LevelUp Access Request" in the body of your email, and indicate your name, work email address, and organization name.

Video: Introducing Microsoft LevelUp for Partners

Woman in Cybersecurity

In case you any woman (or mn) who is ready to find a new direction of start of career, let her or him know that Ilse Parra and Ellen van Meurs in partnership with Microsoft Security partners "Women in Cybersecurity". This is an accessible course to get introduced to both the SC900 Security Fundamentals and a valuable network with my Microsoft colleagues and security partners! From last years group I learned that 7 students have landed a security job! Very cool and I am curious who is next?

Internal Use Benefits

Yesterday Microsoft announced the following in a blog on Internal Use Rights: ''Last January, we launched three new distinct benefits packages: Partner Launch Benefits, Partner Success Core Benefits, and Partner Success Expanded Benefits. These packages are purpose-built to meet the varied needs of our partners at different stages of growth and are designed to help take your business to the next level. They complement Solutions Partner and ISV Success core and expanded benefits already available for partners. More details on what is included in these benefits packages is available on the partner website, including total retail value of the packages: Partner Launch Benefits (USD13,000+), Partner Success Core Benefits (USD62,000+), and Partner Success Expanded Benefits (USD390,000+).

Now, I’m thrilled to announce that starting January 22, 2025, we are adding over 20 in-demand product licenses to our benefits packages. This includes game-changing Microsoft Copilot products, Microsoft Defender for Endpoint, and Microsoft GitHub.

Don't miss out—access select partner benefits packages, Solutions Partner designations, or specializations today to be among the first to enjoy these new benefits as soon as they launch in January 2025.''

Check these resources about the changes and the extensive (security) benefits you can leverage to optimize and secure your own operations with the attained competencies.

• Benefits offerings transition walking deck 
• Microsoft AI Cloud Partner Program Benefits guide
• Compare offerings
• FAQ

Also consider all the security free features that Microsoft offers to secure your business. You can read more about these and what to consider as first steps at Security for Microsoft Partners.

Final words

Thank you for making it to the end of this blog! I hope you found some useful resources and information . My final words, thank you Nikoleta Gamanova and Ilse Parra for sharing all your insights for me to help build this blog!