AD7.11 Interactive Lab: Security Governance Exercise

Interactive Lab: Security Governance Exercise

This lab uses the investigation engine to walk you through the governance capstone: assembling the complete security program documentation. You'll draft the four essential policies (using the templates from AD7.2-AD7.4), produce a quarterly report from simulated monitoring data (AD7.5), complete the program summary (AD7.6), map controls to security framework requirements (AD7.7), and prepare a program handover for a colleague taking over during your holiday (AD7.10). Each decision point tests your understanding of what governance documents serve which audience — and why documentation is the layer that makes the technical program sustainable.

What you practised

This lab tested your ability to assemble governance documentation from the technical controls deployed throughout the course: translating configurations into policy language, producing the quarterly report from monitoring data, mapping controls to framework requirements, and creating handover documentation that enables program continuity. The key judgment calls: which policy sections need management approval vs which are purely technical, how to present metrics to management (numbers not jargon), and what level of detail enables a handover colleague to maintain the program independently.

Course completion

Congratulations. You've completed M365 Security: From Admin to Defender. You entered as someone who manages an M365 tenant. You leave having deployed, monitored, responded to, and documented a complete security program — identity protection, email defense, device compliance, data classification, structured monitoring, tested incident response, and auditable governance — all within your existing E3 licence at zero additional cost.