Initial commit - 611 cybersecurity skills across all subdomains

skills/implementing-conditional-access-policies-azure-ad/SKILL.md

@@ -0,0 +1,37 @@
+---
+name: None
+description: Configure Microsoft Entra ID (Azure AD) Conditional Access policies for zero trust access control. Covers signal-based policy design, device compliance requirements, risk-based authentication, named l
+domain: cybersecurity
+subdomain: identity-access-management
+tags: [iam, identity, access-control, azure-ad, entra-id, conditional-access, zero-trust]
+version: "1.0"
+author: mahipal
+license: MIT
+---
+# Implementing Conditional Access Policies in Azure AD
+
+## Overview
+Configure Microsoft Entra ID (Azure AD) Conditional Access policies for zero trust access control. Covers signal-based policy design, device compliance requirements, risk-based authentication, named locations, session controls, and integration with NIST SP 1800-35 zero trust architecture.
+
+## Objectives
+- Implement comprehensive implementing conditional access policies in azure ad capability
+- Establish automated discovery and monitoring processes
+- Integrate with enterprise IAM and security tools
+- Generate compliance-ready documentation and reports
+- Align with NIST 800-53 access control requirements
+
+## Security Controls
+| Control | NIST 800-53 | Description |
+|---------|-------------|-------------|
+| Account Management | AC-2 | Lifecycle management |
+| Access Enforcement | AC-3 | Policy-based access control |
+| Least Privilege | AC-6 | Minimum necessary permissions |
+| Audit Logging | AU-3 | Authentication and access events |
+| Identification | IA-2 | User and service identification |
+
+## Verification
+- [ ] Implementation tested in non-production environment
+- [ ] Security policies configured and enforced
+- [ ] Audit logging enabled and forwarding to SIEM
+- [ ] Documentation and runbooks complete
+- [ ] Compliance evidence generated