--- title: Enabling Modern Governance with balanced controls and training description: Training IT teams & developers on the latest security policy requirements of your organization is critical to success or failure of governance policies. image: https://blogs.incyclesoftware.com/hubfs/woman-eye-featured.jpg --- # Balancing Modern Governance Controls with Enablement Posted by Michael Spenny - January 13, 2021 ### Educating your IT teams and developers so they are up-to-date on the latest security policy requirements of your organization is critical to the success or failure of your security governance policies. - [**](https://www.facebook.com/sharer/sharer.php?u=https://blogs.incyclesoftware.com/enterprise-azure-governance/balancing-modern-governance-controls-with-enablement-training) - [**](https://www.linkedin.com/shareArticle?mini=true&url=https://blogs.incyclesoftware.com/enterprise-azure-governance/balancing-modern-governance-controls-with-enablement-training&title=&summary=&source=) - [**](https://twitter.com/home?status=) - [**](mailto:?&subject=https://blogs.incyclesoftware.com/enterprise-azure-governance/balancing-modern-governance-controls-with-enablement-training&body=https://blogs.incyclesoftware.com/enterprise-azure-governance/balancing-modern-governance-controls-with-enablement-training) ** ![header-picture](https://blogs.incyclesoftware.com/hubfs/balance-header-web.jpg "header-picture") ## **Balancing Controls ****with**** Enablement** There’s no better event in sports than playoff hockey. It’s fast-paced, gritty and every player knows the stakes are high. The rules are relaxed in playoff hockey too, to let the teams play and, in a sense, self-govern. When a player on the opposing team crosses the line in the physicality of a hit, that’s when the enforcer is called into the game. His job is to send a message to opposing players that this type of play won’t be tolerated and that there’s consequences for putting another players health and safety at risk.  For many organizations this describes the atmosphere surrounding a mission critical project. When budgets or milestones are at risk, rules can be relaxed. Don’t get me wrong I’m not advocating that this is a good approach to project management or to managing risk. In fact, I think this is a really bad idea and exposes the organization to a host of bad outcomes. There is a better way! ### **Avoid the Enforcer**  ![Future woman with cyber technology eye panel concept](https://blogs.incyclesoftware.com/hs-fs/hubfs/Stock%20images/Future%20woman%20with%20cyber%20technology%20eye%20panel%20concept.jpeg?width=300&name=Future%20woman%20with%20cyber%20technology%20eye%20panel%20concept.jpeg)Viewing this through the lens of security governance, the question becomes “how do we balance governance controls and team enablement, while at the same time, protecting our critical cloud resources?”  Effective governance of cloud security starts with recurring manual and automated processes designed to detect vulnerabilities and impose policies to remediate them. Much like the enforcer in hockey, Azure Policy remediation and effects bring your deployed cloud resources back into compliance when they've strayed outside your organization's acceptable governance policies. The following are a few examples to get you started along the path to updating security policy based on business change and feedback from the security and IT teams tasked with turning governance guidance into action.  1. **Initial risk assessment and planning** – starting point to identifying your organization’s unique security and compliance risk exposure  2. **Deployment planning** – before any workload is deployed to the cloud perform a security review to ensure compliance and to identify new risks that may require planning and remediation.  3. **Deployment testing** – as part of the deployment run vulnerability and policy compliance scans to validate security policy compliance.  4. **Annual planning** – this is an opportunity, one a year, to perform a high-level review of the security governance strategy. Collaborate with the business and IT teams to surface future business priorities and emerging security needs.  5. **Monthly audit and review** – perform a monthly audit on all cloud deployments to assure their continued alignment with security policy. This is also a time to review security incidents and activities and gauge whether existing security policies cover the current threat landscape.  [![Azure Governance Playbook FREE DOWNLOAD](https://no-cache.hubspot.com/cta/default/707613/12e14509-7f97-4632-9ac5-296ad0dc3b81.png)](https://cta-redirect.hubspot.com/cta/redirect/707613/12e14509-7f97-4632-9ac5-296ad0dc3b81) ### **The Enforcer Packs a Punch**  Educating your IT teams and developers so they are up-to-date on the latest security policy requirements of your organization is critical to the success or failure of your security governance policies. In those times when a security policy is ignored or bypassed, then you will need a process in place to enforce policy and bring workloads back into compliance. Take a look at the following examples for triggers and enforcement actions to put in place when policy violations are detected:  | Trigger  | Remediation Step(s)  | | --- | --- | | Cloud resource experiences a 25% increase in brute force or denial of service attacks  | Discussion between security team and workload owner to determine remedies (is DDoS prevention properly applied to these resources).  Continued monitoring.  | | Data source detected without appropriate privacy, security or business impact classification   | External access to data source will be denied until the classification is applied by the data owner and the appropriate level of data protection applied according to security governance policy.  | | Virtual machines discovered having access or malware vulnerabilities   | Appropriate patches and security software are installed to bring VM’s security posture in line with security governance policy.  | | Access to any resource not explicitly allowed by network access policies should trigger an alert to the security team  | Should trigger an alert to the security team and workload owner. Issue should be tracked and security policy guidance updated if revision is necessary.   |   ### Win the Trophy!  Educating and empowering your teams to innovate with proper security policy adherence is a win-win for your organization. Establishing sound and effective cloud security governance takes time but is worth the effort for both development teams and business leaders.   1. Do you have assets in Azure that have been created inconsistently?   2. Are your IT teams empowered to create resources in Azure?   3. Are your teams moving slowly because existing security policy governance isn’t cloud friendly?   If you answered yes to one or more questions you have security governance issues that are impeding team productivity. InCycle has worked with many organizations to accelerate adoption of winning security governance practices.   To learn more about modern governance and best practices, [download the Governance Playbook](https://www.incyclesoftware.com/playbook-for-modern-enterprise-and-cloud-governance)!   Topics: [Security](https://blogs.incyclesoftware.com/enterprise-azure-governance/topic/security) [![Modern Enterprise & Cloud Governance Playbook](https://no-cache.hubspot.com/cta/default/707613/e1a05ffb-2e33-417f-8064-4014f1877e61.png)](https://cta-redirect.hubspot.com/cta/redirect/707613/e1a05ffb-2e33-417f-8064-4014f1877e61) --- ### Recent Posts By Michael Spenny - 13 January, 2021 #### Collaborative Cloud Governance: Auditability & Visibility [![read more](https://cdn2.hubspot.net/hubfs/685080/IMG-TurboSodium/Sodium%20v2/blog/arrow-recent-blog-post.png "read more")](https://blogs.incyclesoftware.com/enterprise-azure-governance/collaborative-cloud-governance-auditability-and-visibility) By Michael Spenny - 13 January, 2021 #### How Does the Cloud & Azure Transform Traditional Governance? [![read more](https://cdn2.hubspot.net/hubfs/685080/IMG-TurboSodium/Sodium%20v2/blog/arrow-recent-blog-post.png "read more")](https://blogs.incyclesoftware.com/enterprise-azure-governance/how-does-the-cloud-azure-transform-traditional-governance) By Michael Spenny - 13 January, 2021 #### DevOps Enables Modern Governance [![read more](https://cdn2.hubspot.net/hubfs/685080/IMG-TurboSodium/Sodium%20v2/blog/arrow-recent-blog-post.png "read more")](https://blogs.incyclesoftware.com/enterprise-azure-governance/devops-enables-modern-governance) --- ### Sign-up for Governance Blog Updates # ![Partners Awards List - 2021](https://blogs.incyclesoftware.com/hs-fs/hubfs/PoY%20Award%202021/Partners%20Awards%20List%20-%202021.png?width=748&name=Partners%20Awards%20List%20-%202021.png) # All About Modern Governance InCycle's Modern Governance blog is the result of almost 20 years of industry experience and is ideal reading for medium and large organizations that are trying to navigate cloud adoption and are struggling to design and implement modern governance for either a team, business unit or across the enterprise. The blog is comprehensive and addresses various stakeholders, including operations, security, application development, accounting, and audit. The goal of the blog is to showcase modern governance drivers, new challenges that arise, and to provide actionable guidance for practitioners to complete a modern governance transformation. ### Azure Governance Playbook FREE guidance and tools to complete governance transformation. [![Learn More!](https://no-cache.hubspot.com/cta/default/707613/d0b6969d-3645-4839-ae95-84acb7ca61a2.png)](https://cta-redirect.hubspot.com/cta/redirect/707613/d0b6969d-3645-4839-ae95-84acb7ca61a2) ### Posts by Topic - [Cost Control (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/cost-control) - [Security (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/security) - [Structure & Responsibilities (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/structure-responsibilities) - [Visibility (5)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/visibility) - [Implementation & Adoption (4)](https://blogs.incyclesoftware.com/enterprise-azure-governance/tag/implementation-adoption) ### Most Popular Posts ### Blog Archive - [January 2021 (23)](https://blogs.incyclesoftware.com/enterprise-azure-governance/archive/2021/01) - [February 2021 (1)](https://blogs.incyclesoftware.com/enterprise-azure-governance/archive/2021/02) - [**](https://twitter.com/incyclesoftware?lang=en) - [**](https://ca.linkedin.com/company/incycle-software) - [**](https://www.facebook.com/InCycleSoftware/) ### About us At InCycle, we believe there is always a better way and today, that includes the cloud. [![InCycle Microsoft Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/Incycle%202017%20website%20resources/logo-InCycle-New-white.png?width=200&name=logo-InCycle-New-white.png "InCycle Microsoft Partner")](https://www.incyclesoftware.com/) ### Learn more - [Why Incycle?](https://www.incyclesoftware.com/why-incycle) - [Success Stories](https://www.incyclesoftware.com/customer-success-stories) - [Events](https://www.incyclesoftware.com/events) - [Careers](https://www.incyclesoftware.com/careers) - [About](https://www.incyclesoftware.com/about-incycle-software)   ### 1-800-565-0510 [info@incyclesoftware.com](mailto:info@incyclesoftware.com)  ### ![Microsoft GitHub Verified Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/GitHub%20Verified%20Partner%20-%20white-SQUARE.png?width=256&height=57&name=GitHub%20Verified%20Partner%20-%20white-SQUARE.png) ![Data & AI Solutions Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/Data%20%26%20AI%20Solutions%20Partner.png?width=125&height=144&name=Data%20%26%20AI%20Solutions%20Partner.png) ![Digital & App Innovation Solutions Partner](https://blogs.incyclesoftware.com/hs-fs/hubfs/Digital%20%26%20App%20Innovation%20Solutions%20Partner.png?width=125&height=144&name=Digital%20%26%20App%20Innovation%20Solutions%20Partner.png)   © 2025 InCycle Software [Privacy policy](https://www.incyclesoftware.com/privacy) ** ![](https://px.ads.linkedin.com/collect/?pid=302756&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=302756&fmt=gif)