MS- RAMP AD Hardening checklist

Question

Hello,

Could someone assist in providing a comprehensive checklist for Active Directory configurations aligned with Microsoft's Rapid Modernization Plan (RAMP)? I've reviewed the article at https://learn.microsoft.com/en-us/security/privileged-access-workstations/security-rapid-modernization-plan and have compiled a checklist based on its recommendations.

Are there additional aspects of our current Active Directory infrastructure that should be assessed or updated to comply with the latest RAMP guidelines?

We have also implemented Red Domain in our environment so what are the compliance checks for the current Red Forest and overall AD architecture against MS RAMP standards.

Thanks!