# Cyber Security and Vulnerability Implementation

> Built an access-certification governance process and a continuous vulnerability management program for a healthcare client.

Canonical: https://mikereams.com/work/cyber-security-and-vulnerability-implementation

Year: 2019  
Technology: Azure Active Directory, Active Directory, Exchange Online, Microsoft Sentinel, Microsoft Azure, Microsoft 365  
Topics: Security, Vulnerability, Cyber Security, IT Governance  
Diagrams: [TLS Certificate Architecture Standard](https://mikereams.com/diagrams/tls-certificate-architecture-standard)

![Cyber Security and Vulnerability Implementation](https://mikereams.com/work/d74b5ee666109dad35fe588717f39d88759aab72-1920x1080.png)

## The situation

A healthcare client needed to protect patient and business data from internal and external threats, and to know who had access to which applications.

## What I did

- **Access certification.** Delivered the governance process framework for certifying application access — regular, recorded reviews of who can reach which systems — and introduced standards for the transformation work that followed.
- **Security baseline.** Evaluated the environment against security best practices and implemented the missing controls.
- **Vulnerability management.** Set up a continuous four-step cycle — scan, assess risk, prioritize and fix, repeat — to find weaknesses in procedures, design, implementation or internal controls before they could be triggered by accident or exploited on purpose.