{"id":89529,"date":"2019-06-11T09:00:45","date_gmt":"2019-06-11T16:00:45","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/?p=89529"},"modified":"2023-05-15T22:57:24","modified_gmt":"2023-05-16T05:57:24","slug":"4-best-practices-help-you-integrate-security-into-devops","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/","title":{"rendered":"4 best practices to help you integrate security into DevOps"},"content":{"rendered":"<p>Microsoft\u2019s transition of its corporate resources to the cloud required us to rethink how we integrate security into the agile development environment. In the old process, we often worked on 6- to 12-month development cycles for internal products. The security operations team was separate from the application development team and was responsible for ensuring that applications met security requirements. There was time to troubleshoot security between the two teams. Once we shifted to a shorter development cycle, we had to compress the new process to bake security into DevOps.<\/p>\n<p>Our experience has led us to adopt four best practices that guide our thinking about integrating security with DevOps:<\/p>\n<ol>\n<li>Inventory your cloud resources.<\/li>\n<li>Establish a governance structure for cloud services.<\/li>\n<li>Give DevOps accountability for security.<\/li>\n<li>Redefine centralized security.<\/li>\n<\/ol>\n<p>This post walks you through these tenets with some advice we hope you can apply to your own organization.<\/p>\n<h3>Inventory your cloud resources<\/h3>\n<p>Cloud subscriptions are so easy to spin up that many organizations don\u2019t have a comprehensive understanding of which teams are using which services. This makes it challenging to manage your costs and enforce security policies. If you are uncertain which services you are currently paying for, billing is good place to start.<\/p>\n<h3>Establish a governance structure for cloud services<\/h3>\n<p>Once you understand your cloud inventory, you can begin the work of making sure your investments align with your business strategies. This may mean limiting which services your organization uses to maximize the ones that will help you meet your business goals. Then, align your organization to your cloud strategy by defining a governing structure:<\/p>\n<ul>\n<li>Develop business scenarios that define acceptable use and configuration of cloud resources.<\/li>\n<li>Define architecture and patterns for the cloud services you plan to use.<\/li>\n<li>Limit who can create new subscriptions.<\/li>\n<\/ul>\n<h3>Give DevOps accountability for security<\/h3>\n<p>The only way to effectively enforce security policies in a short development cycle is to integrate security into the application development process. Early in our evolution, we dropped security team members into application development teams to create a single team with shared goals. This revealed cultural challenges and unexamined assumptions. Initially, both the application developers and the security team expected to conduct their jobs as they had in the past. Application developers wrote code and then security operations queued up issues to address. This proved unworkable for two reasons. Security analysts were queuing up too many security tasks to fit within the cycle. The application developers were often confused because security operations underestimated how well they understood the nuances of security.<\/p>\n<p>The only way to meet our goals was to shift accountability for security to the DevOps teams. We wanted application developers to try to solve security issues as part of their process. This required education, but we also implemented some practices that encouraged the team to take on that responsibility:<\/p>\n<ul>\n<li><strong>Secure DevOps Kit for Azure<\/strong>\u2014The <a href=\"https:\/\/azsk.azurewebsites.net\/index.html\" target=\"_blank\" rel=\"noopener noreferrer\">Secure DevOps Kit for Azure<\/a> provides scripts that can be configured for each resource. During development and before production, DevOps can easily validate that security controls are at the right level.<\/li>\n<li><strong>Security scorecard<\/strong>\u2014The scorecard highlights which members of the team are skilled at addressing security and encourages people to improve and collaborate with each other.<\/li>\n<li><strong>Penetration testing<\/strong>\u2014When a red team conducts a penetration test of an application, the results typically inspire the team to take security more seriously.<\/li>\n<\/ul>\n<h3>Redefine centralized security<\/h3>\n<p>We experimented with eliminating a central security team entirely, but ultimately, we realized that we needed a centralized team to monitor the big picture and set baselines. They establish our risk tolerance and measure security controls across subscriptions. They also automate as much of the security controls as they can. This includes configuring the Secure DevOps Kit for Azure. This team also needed training to better understand the vulnerabilities of the cloud. Tabletop exercises to talk through possible attacks with red teams was one way they got up to speed.<\/p>\n<p>As our evolving process suggests, our biggest challenge was shifting culture and mindset. We recommend that you take time to define roles and start with a small team. You can expect to continuously discover better ways to improve teamwork and the security of your process and your applications.<\/p>\n<h3>Get started<\/h3>\n<p>For more details on how we evolved our security process for the cloud, watch the <a href=\"https:\/\/www.microsoft.com\/en-us\/itshowcase\/speaking-of-security-cloud-migration\" target=\"_blank\" rel=\"noopener noreferrer\">Speaking of security: Cloud migration<\/a> webinar and get the <a href=\"http:\/\/www.github.com\/azsk\" target=\"_blank\" rel=\"noopener noreferrer\">Secure DevOps Kit for Azure<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn how Microsoft evolved its culture, teams, and practices to integrate security into an agile development process that supports a cloud-based world.<\/p>\n","protected":false},"author":96,"featured_media":89530,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ms_queue_id":[],"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","footnotes":""},"content-type":[3659],"topic":[],"products":[],"threat-intelligence":[],"tags":[3742,3825,3822,3809],"coauthors":[1916],"class_list":["post-89529","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","content-type-best-practices","tag-azure","tag-developers","tag-microsoft-security-insights","tag-security-strategies"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>4 best practices to help you integrate security into DevOps<\/title>\n<meta name=\"description\" content=\"Learn how Microsoft evolved its culture, teams, and practices to integrate security into an agile development process that supports a cloud-based world.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"4 best practices to help you integrate security into DevOps\" \/>\n<meta property=\"og:description\" content=\"Learn how Microsoft evolved its culture, teams, and practices to integrate security into an agile development process that supports a cloud-based world.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2019-06-11T16:00:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-16T05:57:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-full.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2000\" \/>\n\t<meta property=\"og:image:height\" content=\"1333\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Microsoft Security Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-full.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Microsoft Security Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/microsoft-secure-blog-staff\/\",\"@type\":\"Person\",\"@name\":\"Microsoft Security Team\"}],\"headline\":\"4 best practices to help you integrate security into DevOps\",\"datePublished\":\"2019-06-11T16:00:45+00:00\",\"dateModified\":\"2023-05-16T05:57:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/\"},\"wordCount\":739,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-card.jpg\",\"keywords\":[\"Azure\",\"Developers\",\"Microsoft Security Insights\",\"Security strategies\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/\",\"name\":\"4 best practices to help you integrate security into DevOps\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-card.jpg\",\"datePublished\":\"2019-06-11T16:00:45+00:00\",\"dateModified\":\"2023-05-16T05:57:24+00:00\",\"description\":\"Learn how Microsoft evolved its culture, teams, and practices to integrate security into an agile development process that supports a cloud-based world.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-card.jpg\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-card.jpg\",\"width\":440,\"height\":268},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"4 best practices to help you integrate security into DevOps\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"name\":\"Microsoft Security Blog\",\"description\":\"Expert coverage of cybersecurity topics\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization\",\"name\":\"Microsoft Security Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Security Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"4 best practices to help you integrate security into DevOps","description":"Learn how Microsoft evolved its culture, teams, and practices to integrate security into an agile development process that supports a cloud-based world.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/","og_locale":"en_US","og_type":"article","og_title":"4 best practices to help you integrate security into DevOps","og_description":"Learn how Microsoft evolved its culture, teams, and practices to integrate security into an agile development process that supports a cloud-based world.","og_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/","og_site_name":"Microsoft Security Blog","article_published_time":"2019-06-11T16:00:45+00:00","article_modified_time":"2023-05-16T05:57:24+00:00","og_image":[{"width":2000,"height":1333,"url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-full.jpg","type":"image\/jpeg"}],"author":"Microsoft Security Team","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-full.jpg","twitter_misc":{"Written by":"Microsoft Security Team","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/author\/microsoft-secure-blog-staff\/","@type":"Person","@name":"Microsoft Security Team"}],"headline":"4 best practices to help you integrate security into DevOps","datePublished":"2019-06-11T16:00:45+00:00","dateModified":"2023-05-16T05:57:24+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/"},"wordCount":739,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-card.jpg","keywords":["Azure","Developers","Microsoft Security Insights","Security strategies"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/","name":"4 best practices to help you integrate security into DevOps","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-card.jpg","datePublished":"2019-06-11T16:00:45+00:00","dateModified":"2023-05-16T05:57:24+00:00","description":"Learn how Microsoft evolved its culture, teams, and practices to integrate security into an agile development process that supports a cloud-based world.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-card.jpg","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2019\/06\/Secure-DevOps-Kit-for-Azure-card.jpg","width":440,"height":268},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/06\/11\/4-best-practices-help-you-integrate-security-into-devops\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/"},{"@type":"ListItem","position":2,"name":"4 best practices to help you integrate security into DevOps"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","name":"Microsoft Security Blog","description":"Expert coverage of cybersecurity topics","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#organization","name":"Microsoft Security Blog","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-content\/uploads\/2018\/08\/cropped-cropped-microsoft_logo_element.png","width":512,"height":512,"caption":"Microsoft Security Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/#\/schema\/logo\/image\/"}}]}},"msxcm_display_generated_audio":false,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Security Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/security\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/89529","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/users\/96"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/comments?post=89529"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/posts\/89529\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media\/89530"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/media?parent=89529"}],"wp:term":[{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/content-type?post=89529"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/topic?post=89529"},{"taxonomy":"products","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/products?post=89529"},{"taxonomy":"threat-intelligence","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/threat-intelligence?post=89529"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/tags?post=89529"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/wp-json\/wp\/v2\/coauthors?post=89529"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}