LEARNCYBERSECURITY

Local index

Search this platform

Menu

Knowledge Hub / Security architecture

Security and compliance foundations

What are we protecting, from what, and with which controls?

Assets, threats, vulnerabilities, risk, controls, shared responsibility, defense in depth, Zero Trust and GRC.

Last verified
2026-09-20
Review interval
90 days
Status
In review

01 / Overview

What are we protecting, from what, and with which controls?

Security work starts by naming the asset and an adverse outcome, then selecting controls that reduce likelihood or impact. Compliance supplies obligations and evidence requirements; it is not identical to security. In cloud services, the customer and provider retain different responsibilities depending on the service model.

Level
Intermediate
Units
1
Estimated time
34 min
What you will learn
    Know first
    • Network foundations
    • Computer
    Learning materials
    • Visuals: 1
    • Documents: 1
    1. 01Security and compliance foundations34 min
    Start topic →

    02 / Learn

    Learn

    1. Security and compliance foundations

      Learn the language of assets, threats, risk, controls, shared responsibility, defense in depth, Zero Trust and GRC.

      Open lesson →

    03 / Concepts

    Concepts

    Risksecurity-risk
    The uncertainty and potential effect of an adverse event on an objective or asset.
    Controlsecurity-control
    A measure that modifies risk; controls may prevent, detect, respond or recover.
    Shared responsibilityshared-responsibility
    Cloud providers and customers are each accountable for defined parts of the service and data lifecycle.

    06 / Visuals

    Visuals

    1. Layered security controls around data and services with risk still present.

      security-layers-v1

      technical-diagram · verified
      Open visual →

    06B / Documents

    Documents

    1. Official SC-900 Study Guide

      Microsoft's current exam-objective reference. It verifies scope but does not replace the platform's own lessons.

      external reference only · external-only
      Open document →

    07 / Security

    Security

    1. A control is evidence only after its scope, owner, operating state and failure mode are understood.

    08 / Troubleshooting

    Troubleshooting

    1. Do not equate compliance evidence with absence of risk; inspect the actual control and the system boundary it covers.

    09 / Quick checks

    Quick checks

    Level 2sc900-zero-trust-principle

    Which statement matches a core Zero Trust principle?

    Which statement matches a core Zero Trust principle?
    1. Why is Zero Trust a decision model rather than one product?

    10 / GRAPH

    Related concepts

    Used in certifications

    These links reuse canonical knowledge; the certification page does not own or duplicate the topic.

    11 / Resources

    Resources

    1. Study guide for Exam SC-900

      Microsoft · official-doc · free

      Resources ↗
    2. Describe security and compliance concepts

      Microsoft · course · free

      Resources ↗
    3. Zero Trust overview

      Microsoft · official-doc · free

      Resources ↗

    12 / Sources and freshness

    Sources and freshness

    Last verified
    2026-09-20
    Review interval
    90 days
    Source version
    SC-900 skills measured 2026-07-28 · Microsoft Learn checked 2026-09-20