Azure-Samples
Triage Security Findings - Defender Initial Score
Hold a meeting to triage initial security findings in the most "production like" environment your code will be deployed into. Address the relevant findings using Defender for Cloud recommendations or using the customer's tooling. Create backlog items as needed.
ACTIONS
Hold a triage meeting to review security recommendations. Address recommendations, create backlog items to remediate findings as appropriate. Record the observed Defender score here.
@ExpressDead - as a best practice we are adding a DoD for all User stories and tasks. Can you also define the DoD on all the tasks you've added to the backlog please? Thank you!
Update:
The initial Defender Score should be based on the security findings from the environment where the production code is deployed.
DoD:
Triage the initial security findings Review Defender Recommendations to prioritize mitigations Create backlog items to remediate as appropriate. Record current Defender Score (repeat for each Sprint or Milestone until completion)
