Define an adoption strategy

This article is part of a series that provides guidance as you design a cloud security posture management (CSPM) and cloud workload protection platform (CWPP) solution for multicloud resources with Microsoft Defender for Cloud. It helps you define ownership, priorities, and lifecycle planning before large-scale onboarding.

Adoption strategy objectives

Consider your high-level business needs, the resource and process ownership model for your organization, and an iteration strategy to continuously add resources to your solution.

Plan your adoption strategy

Think about your broad requirements:

  • Determine business needs. Keep first steps simple, and then iterate to accommodate future change. Decide your goals for a successful adoption, and then the metrics to use to define success.

  • Determine ownership. Figure out where multicloud capabilities fall under your teams. Review the articles on determining ownership requirements and determining access control requirements to answer these questions:

    • How should your organization use Defender for Cloud as a multicloud solution?
    • What capabilities do you want to adopt for cloud security posture management (CSPM) and cloud workload protection platform (CWPP)?
    • Which teams own the different parts of Defender for Cloud?
    • What is your process for responding to security alerts and recommendations? Consider Defender for Cloud's governance feature when making decisions about recommendation processes.
    • How can security teams collaborate to prevent friction during remediation?
  • Plan a lifecycle strategy. As new multicloud resources onboard into Defender for Cloud, you need a strategic plan in place for that onboarding. You can use auto-provisioning capabilities for easier agent deployment.

Next step