Identity
- ✓ Least privilege and no shared accounts
- ✓ Privileged access is time-bound
- ✓ Workload identities replace embedded secrets
Azure DevOps Academy · Production operations
Security Baseline
Apply minimum identity, network, data, supply-chain and audit controls before production use.
Delivery teams, DevOps engineers and technical leadsOperational evidence required
Platform controls
- ✓ Encryption in transit and at rest
- ✓ Network exposure is intentional
- ✓ Dependencies and images are scanned
Evidence
- ✓ Audit logs retained
- ✓ Exceptions have expiry dates
- ✓ Security ownership is documented
Evidence standard
Do not mark this guide complete because a document exists. Completion requires reviewed configuration, test evidence, named ownership, known-risk decisions and a repeatable operating procedure.