Best Practices

• Investigate how SDI can help you protect your network.

• Start a project to analyze traffic patterns in your network today.

• Configure domain controllers to request computer authentication but allow fallback to user authentication to support non-domain-joined computers.

• Require all new service owners to threat-model their services and document the interfaces they expose, to whom, and why.

• Support SDI in your security policy to codify the practice of blocking all traffic that is not necessary.