Compliance & Regulatory Requirements

Compliance Resources

Understand how regulations such as NIS2 and DORA translate into technical security controls, governance requirements and operational practices. Explore guidance, technical sessions and training resources designed to help security and IT teams align their environments with evolving regulatory expectations.

Most compliance material stops at the legal text. What technical teams actually need is the layer beneath it: which controls satisfy which requirement, what evidence an auditor will ask for, and how to configure a Microsoft environment so the answer is already in place before the assessment starts.  

What you'll find here

NIS2 Guidance

How the directive's detection, handling and reporting duties map onto Microsoft Security capabilities, including the reporting deadlines that shape how you build monitoring.

Compliance-focused technical sessions

Working sessions aimed at the implementation questions rather than the policy ones.

Regulatory best practices

Baseline configurations and operational practices that hold up across more than one framework, so you're not rebuilding for each.

Deployment Guides

Deployment & Configuration Resources 

Access practical guidance for deploying and configuring Microsoft Security solutions. From initial planning and architecture considerations through to configuration and operational best practices, these resources help accelerate secure implementations.

The guides are written to be used during a deployment rather than read beforehand. Each one assumes you already know the product and need the specifics: the order to do things in, the settings that matter, and the decisions worth making early because they're painful to reverse.

Available guidance

• Microsoft Business Premium.Getting the full security value out of the SMB stack, including the capabilities most customers never switch on.
• Microsoft Defender Suite. Deployment and configuration across endpoint, identity, Office and cloud workloads.
• Microsoft Purview Suite. Data protection, DLP and insider risk configuration, including the classification work that has to happen first.
• Security configuration best practices.Baseline settings and the reasoning behind them, so you can defend the choices to a customer.
• Architecture guidance.Reference designs and the decisions that shape them.
• Deployment checklists.Step-by-step sequences for working through a rollout without missing prerequisites. 
• Technical presentations.Material you can use directly in customer workshops and technical sessions.

New guides are added regularly as products and best practice change.

Security Proof of Concepts

Security POC Library

Evaluate Microsoft Security capabilities through technical demonstrations and proof-of-concept scenarios. Learn how security controls work in practice, validate configurations, and understand the impact of common security risks.

A proof of concept answers a question a slide deck can't: does this actually work, and what happens when it doesn't? The scenarios here show real attack paths against environments with gaps in their policies, then show the same attack against a properly configured tenant. It's the fastest way to make a security gap feel concrete to a customer who has been told they're already covered.

• Identity security gaps and how they get exploited

• Endpoint protection scenarios

• Data protection and compliance controls

• Conditional Access implementations

• Threat detection and response

• Security policy validation

Scenarios covered

• Recorded demonstrations
  Watch an attack and the defence against it, end to end.

• Technical walkthroughs
  Step-by-step explanations of why a control behaves the way it does.

• Attack simulations
  Demonstrations of what a missing or misconfigured policy actually exposes.

• Lab environments
  Hands-on environments for testing before you touch a customer tenant.

• Elite presentations
  Presentation material to take into customer conversations.

Available formats

Security policy templates for Microsoft cloud environments

Deploy Microsoft security policies at scale — without starting from scratch for every customer tenant

Security Policy Templates are pre-configured security policies covering key areas of the Microsoft security ecosystem, including Identity, Endpoint, Application, Data, and Infrastructure security.

Instead of manually recreating and configuring policies for every customer environment, templates can be imported at scale directly into customer cloud tenants using Microsoft Graph APIs, with the required permissions and administrative roles.

All security policies are imported in OFF mode by default. This means the deployment itself has no immediate impact on the customer environment. Once imported, security teams can review the configuration, validate the settings, and then enable the policies and scope them to the appropriate groups when ready.

Standardize. Automate. Scale.

Deploy and deliver faster with ALSO at no extra costs.

Security Policy Templates

What’s Included in ALSO Security Policy Templates?

ALSO Security Policy Templates are license-aware Microsoft security baselines designed for scalable deployment across customer tenants.

Baselines are tailored to the customer’s licensing, including:

• Microsoft 365 Business Premium
• Business Premium + Defender Suite
• Business Premium + Purview Suite
• Business Premium + Defender + Purview Suite
• Microsoft 365 E3
• E3 + Defender Suite
• E3 + Purview Suite
• Microsoft 365 E5
• Microsoft 365 E7

Included Policies:

• Conditional Access policies 
• Intune configuration policies -Windows, Windows Server, macOS, iOS, Android & Linux
• Intune compliance policies - Windows,  macOS, iOS, Android & Linux
• Intune remediation scripts - Windows, Windows Server, macOS, iOS, Android & Linux
• Intune applications — Windows, macOS, iOS & Android
• Intune App Protection policies - iOS & Android
• Sensitivity Labels, Auto-labeling & DLP policies
• And more

This library is currently under development, with new templates and implementation assets being added over time.

Professional Services Support

Need Technical Assistance?

Leverage the expertise of our security consultants and architects for consultancy, deployments, workshops, advanced configurations and security assessments. Our team provides hands-on guidance to help customers achieve successful and secure outcomes.

Some engagements need more than documentation. Where a deployment is unusually complex, where a customer environment doesn't fit the standard pattern, or where you simply need a second pair of eyes before going live, our consultants and architects  work alongside your team rather than replacing them.

Where the team helps most:

• Technical Microsoft security consultancy
• Deployment of Microsoft security services
• Security architecture setup and review 
• Help with troubleshooting
• Security assessments and health checks

Meet the team

At ALSO we're more than a distributor. We have a growing team of Microsoft security specialists, technical consultants, architects and enablement experts who work with partners every day to turn opportunities into successful deployments.

You're not filing a ticket into a queue. These are named people with real specialisms, and you can book time with them directly.

Vladislav Johansen

Technical Lead, Microsoft Security, ALSO

Magnus Mikkelsen

Microsoft Security Technical Presales, ALSO

Not sure who to ask?  

Send us the question instead. Tell us about the environment and where you're stuck, and we'll route it to whoever is best placed to answer.

Looking for the Sales Angle?

This page is built for technical teams. If you're looking at Microsoft Security from a go-to-market or commercial perspective, including positioning, packaging and how to build the opportunity, that material lives on its own page.  

New to ALSO?

Whether you're expanding into security, cloud, AI or other growth areas, success depends on more than access to technology. It takes the right ecosystem, expertise, services and platforms to turn opportunities into profitable business.

As Europe's technology provider, ALSO helps partners identify opportunities, adopt new technologies and build scalable business models through a unique combination of Supply, Solutions and Services. We help you navigate change, reduce complexity and create sustainable growth.  

Expert guidance on Microsoft licensing and bundles

Scalable services to accelerate your cloud business

Access to training. GTM assets, and pre-sales support

Send us your questions

And we will reach out

Need help with deployment, configuration, security assessment, or Microsoft Security implementation? Tell us a little about yourself and how we can assist.

Join Our Microsoft Security Trainings  

Live Technical Sessions on Defender, Purview & Entra 

Microsoft Purview in Action: Protecting Sensitive Data and Ensuring Compliance 

Date: on demand

Language: English

Speaker: Oualid El Bakkari (ALSO)

Best Hardening Tips to Lock Down External AI in 2026 using Microsoft Security Stack 

Date: 08.10.2026

Time: 10:00 - 11:00 CET

Language: English

Speaker: Vladislav Johansen (ALSO)

Protecting Your Identities with Microsoft Defender for Identity and Microsoft Entra ID Protection 

Date: 05.11.2026

Time: 10:00 - 11:00 CET

Language: English

Speaker: Oualid El Bakkari (ALSO)

Top Defender for Endpoint Misconfigurations and How to Fix Them in the Portal

Date: 24.09.2026

Time: 10:00 - 11:00 CET

Language: English

Speaker: Magnus Mikkelsen (ALSO)

Are you protecting the device—or the data? 

Date: 19.11.2026

Time: 10:00 - 11:00 CET

Language: English

Speaker: Magnus Mikkelsen (ALSO)

Top 5 Misconfigurations in Conditional Access and How to Avoid Them 

Date: 10.12.2026

Time: 10:00 - 11:00 CET

Language: English

Speaker: Vladislav Johansen (ALSO)

On-demand Microsoft Security Trainings  

Sessions on Defender, Purview & Entra 

Oualid EL Bakkari

Microsoft Security Technical Presales, ALSO