Triage Security Findings - Defender Initial Score

[ExpressDead]

Hold a meeting to triage initial security findings in the most "production like" environment your code will be deployed into. Address the relevant findings using Defender for Cloud recommendations or using the customer's tooling. Create backlog items as needed.

ACTIONS

Hold a triage meeting to review security recommendations.
Address recommendations, create backlog items to remediate findings as appropriate.
Record the observed Defender score here.

[ydaponte]

@ExpressDead - as a best practice we are adding a DoD for all User stories and tasks. Can you also define the DoD on all the tasks you've added to the backlog please? Thank you!

[jayce21-ms]

Update:

The initial Defender Score should be based on the security findings from the environment where the production code is deployed.

DoD:

Triage the initial security findings
Review Defender Recommendations to prioritize mitigations
Create backlog items to remediate as appropriate.
Record current Defender Score (repeat for each Sprint or Milestone until completion)