Microsoft Frameworks for Azure
Implementation guidance for Azure solutions
8 Design Pillars for a Successful Secure Landing Zone
Identity & Access
Management
Entra ID
SSO, MFA
Conditional Access
RBAC
PIM
Security, Governance,
Compliance, Logging
Defender for Cloud
Azure Firewall
Key Vault
Azure Policy
Sentinel
Network Topology &
Connectivity
Virtual Networks
NSGs
Azure Firewall
Load Balancer
VPN / ExpressRoute
Resource
Organization
Management Groups
Governance Structure
Subscription Design
Capacity, Resiliency,
DC / DR Governance
Azure Capacity
Availability Zones
Site Recovery
Backup
BCP
Management, Operations,
Monitoring, Reporting
ARM
Automation
Azure Monitor
Log Analytics
App Insights
Billing &
Scalability
Azure Billing
Cost Management
Budgets
Reserved Instances
Savings Plans
Platform Automation
/ DevOps
Azure DevOps
Pipelines
IaC
ARM / Bicep
Terraform
Azure Compliance Offerings
- ISO 27001:2013
- ISO 27017:2015
- ISO 27018:2014
- ISO 22301:2012
- ISO/IEC 27701:2019
- ISO 9001:2015
- ISO 20000-1:2011
- SOC 1 Type 2
- SOC 2 Type 2
- SOC 3
- CIS Benchmark
- CSA STAR Certification
- CSA STAR Attestation
- CSA STAR self-assessment
- WCAG 2.0 (ISO 40500:2012)
- FedRAMP high
- EAR
- ITAR
- DoD DISA SRG Level 5
- DoD DISA SRG Level 4
- DoD DISA SRG Level 2
- DFARS
- DoE 10 CFR Part 810
- NIST SP 800-171
- NIST CSF
- Section 508 VPATs
- FIPS 140-2
- CJIS
- IRS 1075
- CNSSI 1253
- PCI DSS Level 1
- GLBA (US)
- FFIEC (US)
- Shared assessments (US)
- SEC 17a-4 (US)
- CFTC 1.31 (US)
- FINRA 4511 (US)
- SOX (US)
- 23 NYCRR 500 (US)
- OSFI (Canada)
- FCA + PRA (UK)
- APRA (Australia)
- FINMA (Switzerland)
- FSA (Denmark)
- RBI + IRDAI (India)
- Argentina PDPA
- Australia IRAP Unclassified
- Australia IRAP PROTECTED
- Canada Privacy Laws
- China GB 18030:2005
- China DJCP (MLPS) Level 3
- China TRUCS/CCCPPF
- EU EN 301 549
- EU ENISA IAF
- EU model clauses
- GDPR
- Germany C5
- Germany IT-Grundschutz workbook
- India MeitY
- Japan CS mark gold
Shared Responsibility Model
Subscription Vending
- Ensures every new subscription follows a standardized, compliant baseline (policies, RBAC, tags, governance).
- Eliminates manual setup and reduces configuration drift or inconsistent environments.
- Improves security by automatically applying guardrails, networking rules, and monitoring from day one.
- Accelerates provisioning with automated, self-service subscription creation.
- Reduces operational overhead for the cloud team and improves scalability.
- Provides predictable, well-governed landing zones aligned with organizational architecture.
- Enables faster project onboarding while maintaining central control and visibility.
Cloud destinations for VMware workloads
Azure VMware Solution
Fastest path to the cloud
Use VMware technology stack on Azure for symmetry with on premises
Retain VMware skills, familiar tooling
Migrate quickly/datacenter exit, no application modifications required
Private-cloud destination
Requires a portable VCF subscription from Broadcom
Azure IaaS and PaaS
Replatform for ops efficiency
Shift to Azure compute, storage, and networking infrastructure
Leverage Azure and cloud skills
Modernize with flexible IaaS and PaaS services (e.g., Azure Virtual Desktop, SQL Database, Azure App Service)
Public-cloud destination
No VMware subscriptions required
Azure PaaS
Refactor for maximum agility and innovation
Build-in DevOps tools, templates, and pre-configured environments
Shift focus to only app logic and data
Integrate with services like Cosmos DB, Azure Functions, Logic Apps, and Azure Kubernetes Service
Public-cloud destination
No VMware subscriptions required
Migration & Modernization Approach
Migrate VMware to Azure
Move “cloud ready” workloads with minimal refactoring
Fast, low-risk vMotion to Azure VMware Solution
Land on modern infrastructure with Azure scale
Optimize to Maximum Value
Free up resources with managed VMware
Optimize costs with elasticity
Scale storage independently
Modernize with Azure Services
Connect to 200+ Azure services
Security with Defender
Free extended updates
Continue your Modernization Journey
Modernize applications to Azure PaaS
Modernize databases
Azure Local for edge use cases
Benefit across your team
Business Foundation
Service Module
What is it?
The service module Business Foundation covers the basic needs of our Managed Services customers.
In this module standard activities are covered that every customer needs when having a Success Plan
What we do
Point of Coordination (SPOC)
Dynamics 365 and Azure
What does the customer get?
Platform Support Services
Service Module
What is it?
The service module Platform Support Services focuses on all the support services HSO offers regarding (Azure) Infrastructure and Platform support. This includes monitoring, optimizations, and support services.
Based on this secure and updated platform multiple actions can be executed this will be described in the module Development and Continuous improvements
What we do
What does the customer get?
Business Continuity
Service Module
What is it?
Within the service module Business Continuity, HSO ensures the continuity of the Dynamics 365 and Azure environment platform from an application management point of view.
This means remedying application failures without changing its functionality. These failures can also be detected by our monitoring services. This implies that the user can report the loss of functionality of the Dynamics application to us, but also that we can detect incidents ourselves (monitoring).
Service & Data Availability
Service Module
What is it?
The service modules Service & Data Availability focusses on backup and recovery services. HSO will ensure that Azure workloads, and Dynamics 365 Cloud Hosted environments are backed up, disaster proofed, and highly available.
HSO will develop a backup and DR plan based on policies best suited for the business, considering a few critical areas including safety, and long-term retention of sensitive data for audit and compliance regulations
Development & Continuous Improvement
Service Module
What is it?
With the service module Development & Continuous Improvement, we adapt the existing functionality of your business applications and extend it with new functionality to continuously improve your business processes and platforms.
Monitoring & Business Insights
Service Module
What is it?
The service module Monitoring & Business Insights covers monitoring and insights over the Microsoft stack including applications, infrastructure, data, and integrations.
With this service, HSO will be the guard for her customers. To protect and monitor the environment 24/7!
Modern Workplace Management
Service Module
What is it?
With the service module Modern Workplace we offer the necessary service to run and optimize the modern workplace environment including the 1st, 2nd and 3rd line support for the end users.
With the service module Network Management we can fully monitor and support network components like firewalls, routers and switches.
Cost Management
Service Module
What is it?
The service module Cost Management ensures optimizing and controlling the Microsoft Azure Cloud consumption. Cost and performance of cloud resources also involves understanding the interplay of cloud consumption and business processes while continuously monitoring the full stack.
With the module “Cost management” we provide full visibility of the future cloud environment source expenses and helps you decrease them. It answers both cost related and utilization-related questions.
Security & Compliance
Service Module
What is it?
The Microsoft Trusted Cloud was built on the foundational principles of security, privacy, compliance, and transparency, and these four key principles guide the way we do business in the cloud.
With the service module Security & Compliancy HSO supports our customers on the area’s which are not covered by Microsoft, to identify security risks and define the measures to mitigate the risks by offering our competencies in the areas.