India Cloud Security Summit , 2025 is a one day virtual event organized by the Microsoft 365 , Power Platform &amp; Cloud Security India User group . This event will completely focus on the Cloud Security services related to Microsoft 365 , Microsoft Azure, Microsoft Power Platform security and Dynamics 365 . This is the first of its kind from the Microsoft Community at India and we’re planning to cover all the aspects of Microsoft Cloud Security services in this event . In this one day virtual event we will deep-dive into Microsoft’s Cloud Security stack with hands-on sessions and labs, delivered to you by the experts and community leaders.
Join us virtually on 12th July 2025, from 9:30 AM to 7:30 PM IST, for expert-led sessions and hands-on labs across:
☁️ Microsoft 365 
🔒 Microsoft Azure 
⚙️ Microsoft Power Platform 
📊 Dynamics 365 
🛡️ Endpoint Security
Organized by the Microsoft 365, Power Platform &amp; Cloud Security India User Group, this event brings insights from MVPs, RDs, Microsoft employees, and global community leaders.
🎯 One goal: Help you strengthen your Microsoft cloud security posture from every angle.
📅 Save the date — you don’t want to miss this!

Designed by the Creative Team at Penthara Technologies

India Cloud Security Summit 2025

As AI continues to transform the Security industry, our mantra is Security for AI! Come learn about the SafeLinks protection integrated within M365 Copilot Chat and Office Apps and see how we are working towards keeping links generated by AI secure for our Copilot customers. 

Security for AI: SafeLinks protection in M365 Copilot Chat and Office Apps

Security teams face more threats than ever before  and often with limited time and resources. 
In this session, we will explore how Microsoft Security Copilot, an AI-powered assistant, helps simplify security operations. You will learn how it can speed up investigations, improve incident response, and provide helpful insights for decision-making.

Simplifying Cybersecurity with Microsoft Security Copilot

Multimodal AI systems grow more advanced—integrating text, image, audio, and video data—they also introduce a new set of challenges for cloud security professionals. In this session, we’ll explore the architecture, deployment, and protection of multimodal AI applications on the Azure Cloud.

This session is ideal for security engineers, cloud architects, and AI developers who are building or securing next-gen AI solutions on Azure. Expect demos, architecture blueprints, and actionable best practices to bring back to your team

Multimodal AI and Security Implications in Azure Cloud

Microsoft Defender for Office 365 recently expanded into Teams Protection. So come join us to learn all the goodness in protection we have to offer across URL, file, impersonation and what response tools are available to security admins in case of a breach or proactive visibility

Microsoft Defender for Office 365 Collaboration Protection

In this session, we will discuss Azure network security services that assist organizations in implementing the Zero Trust approach, specifically focusing on the third principle—assume breach. There is a growing need for a security model that can effectively adapt to modern complexity, accommodate the hybrid workplace, and, most importantly, safeguard applications and data regardless of location. Azure network security services are essential in fulfilling this role.

How can organization use Azure robust network security services boost Zero Trust for cloud security?

New Automatic Account Management: Enable Account settings on Windows LAPS Policy in Intune. Microsoft introduced new settings on Windows LAPS policies on Windows 11 24H2 Devices. And also previously added 2 settings is updated.

Windows LAPS is a Windows built-in solution can help you secure the built-in local administrator account that is present on each Windows device. LAPS policies are designed to manage various settings through Microsoft Intune.

LAPS Automatic Account Management in Windows 11 24H2 using Microsoft Intune

Phishing attacks continue to be a sophisticated threat in 2025, targeting users and systems to compromise sensitive information and spread malware. This session explores Microsoft Defender for Office, offering strategies to enhance your organization's email security.

Learn how to implement Microsoft Defender for Office, customize protection policies, and use advanced features like SafeLinks for Microsoft 365 Copilot, Chat, and Office apps. Discover new Collaboration Security capabilities for Microsoft Teams to counter threats like impersonation and malicious file sharing.

The session also covers authenticated email methods such as SPF, DKIM, and DMARC to secure email traffic. Practical demonstrations will show how these protocols reduce phishing risks and improve email deliverability.

Emphasizing practical anti-phishing strategies, including Awareness Simulation exercises.

Attendees will gain actionable techniques to protect their organizations against sophisticated email and collaboration-based threats.

Combatting Phishing in 2025: Defender for Office, Teams Security, and AI Protection

As organizations increasingly adopt Microsoft Fabric for unified data experiences, securing SQL databases within this platform becomes paramount. This session offers a comprehensive overview of the current security architecture for SQL databases in Fabric, including Microsoft Entra-based authentication, workspace-level access controls, native SQL permissions, and sensitivity labeling via Microsoft Purview. We’ll explore how these features work together to provide layered, role-based security that’s both robust and easy to manage.

Looking ahead, we’ll preview upcoming security enhancements designed to further streamline governance and compliance.

Securing your SQL database in Fabric

Sharing content externally is one of SharePoint Online’s most powerful and risky features. While it enables seamless collaboration with clients, vendors, and partners — it also opens doors to potential data leaks if not properly governed.

In this session, we’ll take a deep dive into configuring external sharing to balance collaboration and control. From organization-wide settings down to individual site permissions, you'll learn how to confidently manage external access in a secure, auditable, and scalable way.

We'll explore:

External sharing modes: Anyone, New and existing guests, Authenticated users only

How Microsoft Entra (Azure AD) B2B integration works with SharePoint

Best practices for guest access reviews, expiration policies, and lifecycle management

Controlling external sharing with sensitivity labels and site-level settings

Auditing and monitoring external activity using Microsoft Purview and Unified Audit Logs

Common pitfalls to avoid (like oversharing from OneDrive!)

Whether you're a SharePoint admin, security architect, or IT decision-maker, this session will equip you with practical tips and actionable strategies to secure external collaboration without blocking productivity.

Managing External Sharing in SharePoint: Striking the Right Balance

The goal of this session is to equip attendees with a practical understanding of data governance best practices within Microsoft Fabric, enabling them to build a secure, compliant, and trustworthy data platform.

Protecting Your Assets: Data Governance Best Practices in Microsoft Fabric

This is session focus on how to building and securing the Copilot Agents with Custom Connectors with OAuth2.0

Building and securing Microsoft Copilot Agent with Custom Connector

In this session, we will delve into the evolving OAuth attack landscape and explore how Microsoft Defender for Cloud Apps safeguards non-human identities accessing your SaaS environments.
This in-depth, hands-on session will highlight the Microsoft Defender for Cloud Apps playbook for managing OAuth interactions within the M365 environment. We will cover the latest OAuth attack vectors and demonstrate how Defender for Cloud Apps can effectively detect and mitigate these threats. Attendees will gain insights into the advanced capabilities of App Governance, including its ability to monitor and control app permissions and enforce security policies.
Whether you're a CISO, IT professional, security expert, or cloud enthusiast, this session will equip you with the knowledge and tools needed to navigate the complexities of OAuth security in the modern SaaS environment. Join us to enhance your security posture and stay ahead of emerging threats.

Navigating the Evolving OAuth Attack Landscape with Microsoft Defender for Cloud Apps

In this session, we will focus on discussing developing a proof of concept in real-time for implementing and optimizing threat detection and response using Microsoft Sentinel for Cloud. Specifically, we will:

- Begin by integrating data from Azure Activity and Microsoft Defender for Cloud.
- Configure both built-in and custom alerts.
- Explore how Logic Apps can be utilized to automate incident response workflows.

Join us to gain hands-on experience and insights into enhancing your security posture with Microsoft Sentinel for Cloud.

Implement and Optimize Threat Detection and Response with Microsoft Sentinel for Cloud

In today's world of growing cybersecurity threats, Zero Trust Architecture (ZTA) has become a crucial approach to securing data. This talk will explore why ZTA is vital for data protection and how Adaptive Authentication (AA) plays a key role in ensuring its success.

We will cover:
1) What Zero Trust Architecture is and its importance in protecting sensitive data.
2) An introduction to Adaptive Authentication (AA) and how it works in dynamic environments.
3) Real-world examples of AA in Cloud Native solutions and multi-cloud applications.

By the end of the session, you'll understand how AA enhances security and helps implement Zero Trust principles to safeguard your applications.

Adaptive Authentication & Zero Trust: Elevating Data Protection in the Cloud

Generative AI is transforming business innovation, with Gartner predicting that 80% of enterprises will adopt AI applications by 2026. However, rapid adoption introduces new security and compliance risks. A major concern for over 80% of security professionals is sensitive data exposure through AI systems. Businesses are already facing challenges such as unauthorized AI tools (shadow AI), data leaks, and increasing regulatory scrutiny. More than 62% of business leaders admit they do not fully understand AI-related regulations, further complicating security efforts.

To address these challenges, organizations must take a structured approach to securing and governing AI:

Prepare the Environment – AI adoption starts with classifying and labeling data while ensuring robust identity and access governance to prevent overexposure.

Discover Risks – Organizations must gain visibility into data flows, user access, and security gaps to prevent unauthorized access and unintended data exposure.

Protect AI Applications and Data – Continuous monitoring and protection against AI-specific threats like prompt injections and data leaks are crucial once AI systems are deployed.

Govern AI Usage – As AI regulations evolve, governance frameworks must be in place to detect and mitigate risks such as policy violations, ethical concerns, and misuse of sensitive content.

By implementing these security and governance measures, businesses can confidently adopt AI while minimizing risks and ensuring compliance with evolving regulations.

The AI Security Imperative: Governance, Compliance, and Risk Management

Microsoft 365 is a powerful collaboration and productivity solution and retains your data forever. The challenge arises when you need to dispose your data and be in line with your compliance policies and regulatory frameworks, especially when your data is everywhere in chats & channel messages, emails, documents and recordings.
This session will focus on Microsoft Purview Data Lifecycle Management with real world experience, ensuring you can successfully implement retention and records management with your organisation.

Deep dive into Microsoft Purview to manage your content compliance

As organizations adopt AI-powered solutions and user-submitted code becomes more common, security is no longer optional—it's foundational. In this session, explore how Azure Container Apps Dynamic Sessions enables zero-trust execution environments using Hyper-V isolated secure sandboxes.

Whether you're executing AI-generated code, running developer workloads, or building SaaS environments, each session runs in its ephemeral, isolated container—ensuring strong multi-tenant security with no shared kernel exposure.

We'll showcase how to securely embed Python interpreters, integrate with frameworks like LangChain, LlamaIndex, and Semantic Kernel, and support bring-your-own-container models—all while maintaining tight control over egress, resource limits, and runtime permissions.

Join us to learn how to scale secure, event-driven workloads without compromising your security posture—ideal for security architects, platform engineers, and cloud-native developers building the next generation of secure cloud apps.

Secure Sandboxes & Dynamic Sessions at Scale with Azure Container Apps

Windows 11 is the most secure Windows version built so far, and there are differences between securing a W10 and a W11-device.

In the times we live in with constant cyber threats we must learn and know about new security features to keep our devices protected, regardless if they are physical or virtual.

During this session we will cover our top 10 configurations we must configure in Windows 11. We will have a look at what they do and how they affect our devices.

Join for great tips on how to take your Windows security posture to the next level

10 security settings you must configure in Windows 11 - 2025 edition

How to protect your data and leverage the power of artificial intelligence

In this speaker slot, you will learn about the challenges and opportunities of data security in the age of AI. You will discover how to safeguard your data from unauthorized access, manipulation, and theft, while also harnessing the potential of AI to enhance your data analysis, insights, and decision making. You will also hear about the best practices and tools for data security and AI, as well as the ethical and legal implications of using AI on sensitive data.

This speaker slot is suitable for anyone who works with data and wants to learn more about data security and AI. Whether you are a data analyst, a data scientist, a data engineer, a data manager, or a data enthusiast, you will find this speaker slot informative and engaging.

 You will also have the opportunity to ask questions and interact with the speaker and other participants.



Data Security meets AI

In today's fast-paced world, AI and Generative AI solutions are rapidly expanding, providing unparalleled access to vast amounts of data. Ensuring the security of these solutions is paramount, as compromised applications can lead to significant data breaches and security risks. Are you still using Keys to access your Azure OpenAI / AI resources?  

In this demo-depend session, I will show you how to implement keyless authentication for Azure OpenAI and other Azure AI Services using RBAC, ensuring secure and seamless access.  

Using a .NET application as an example, I will demonstrate how to connect to Azure OpenAI and other AI services, using the OpenAI SDK and Azure AI SDKs. Additionally, I will show how to secure your application from code to deployment in production using, CI/CD pipelines and infrastructure-as-code. At the end of the session I will show you 5 key takeaways you can take with you and implement in your organization. 

Join me for a security upgrade! 

Securing Azure OpenAI and Azure AI Services: Best Practices for the field

Empowering employees to build their own solutions with the Power Platform can drive innovation and efficiency—but without the right governance, it can quickly become unmanageable. How can organizations strike the right balance between control and creativity?

In this session, we’ll explore a practical approach to establishing a governance framework that enables citizen developers while keeping administrative effort low. You’ll gain insights into best practices, technical solutions, and policies that support sustainable adoption of Power Apps, Power Automate, and Copilot Studio.

To bring governance to life, we’ll dive into two real-world customer scenarios:
- A simple, standard-based solution leveraging Microsoft 365 capabilities with minimal customization.
- A "gold-plated" solution featuring custom-developed components for organizations with advanced requirements.

Join me to learn how to create an environment where every employee can innovate securely and effectively—without overwhelming IT! 

Power Platform Governance: Unlocking Innovation While Staying in Control

This session is a level 300 session designed to provide a comprehensive understanding of how to enhance the security of Entra ID using Conditional Access and passkeys. The session begins with an overview of Entra ID, a robust identity management solution, and the importance of identity security in the current digital landscape.

The focus then shifts to Conditional Access, a critical component in maintaining security. Participants will learn how Conditional Access works and how it can be leveraged to strengthen Entra ID security. The session will delve into the steps for hardening Conditional Access, providing participants with practical knowledge they can apply in their organizations.

The session also covers the use of passkeys as an additional layer of security. Participants will learn how passkeys can be integrated with Entra ID and Conditional Access for enhanced security and perhaps even a passwordless solution.

No more identity theft! Harden your identity security today

Paul Simon once famously proclaimed in song that "There must be 50 ways to leave your lover". Its one of the most iconic and best recognised songs of the last century and one that we all hum along to for days after it comes on the radio.

I'm not sure if Paul ever gave us 50 ways, but it got me thinking - there must be 50 ways to secure your Azure?

Join me in this session where I guide you through the (approximately) 50 different ways you can secure your Azure Tenants and Subscriptions!

50 Ways to Secure Your Azure

Device Code Phishing is more common than you´d think. Simply because it works better than asking for a username and password.

This session will show you common attack scenarios targeting both regular users and admins (god forbid) with device code phishing, and of course what we can implement to prevent it from occurring. We will also look at enumeration from an external/guest point of view to identify an appropriate target to phish.

Device Code Phishing, how to detect and prevent those nasty phishers...

In a world where every identity is a potential attack vector, enforcing the right access at the right time is crucial. Microsoft Entra ID empowers organizations to secure access to apps and resources using adaptive, context-aware policies—but many teams only scratch the surface of what's possible.

This session dives into Conditional Access in action—helping you go beyond check-the-box MFA and implement real-world policies that reflect Zero Trust principles. I will explore:

How to design role-based and risk-based Conditional Access policies
Integration with identity protection signals (user risk, sign-in risk)
Securing legacy applications and hybrid identities
Monitoring, troubleshooting, and policy insights

Whether you're an identity admin, security architect, or cloud strategist, this session will help you build secure-by-default identity experiences—without blocking your users.

Mastering Access in a Zero Trust World: Real-World Conditional Access with Microsoft Entra ID

As cyber threats evolve, traditional security models are no longer sufficient to protect modern cloud environments. Zero Trust Security is a critical framework for securing identities, devices, applications, and data in Microsoft Azure.
In this session, we will explore the core principles of Zero Trust—verify explicitly, use least privileged access, and assume breach—and demonstrate how to implement them effectively in Azure. Attendees will learn how to leverage Conditional Access, Microsoft Defender for Cloud, network segmentation, Just-In-Time access, and other key security controls to build a robust Zero Trust architecture.
By the end of this session, you will have a clear roadmap for strengthening security in their Azure environments, reducing attack surfaces, and improving overall resilience against cyber threats.
Sign up and be secure!

Implementing Zero Trust Security in Microsoft Azure

In today’s hybrid work environment, employees frequently access business apps and data from personal devices. But how do you protect sensitive corporate information without enforcing full device management or compromising user privacy?

This session explores how Microsoft Intune's Mobile Application Management (MAM) capabilities offer a solution: enforcing security directly at the application level. We’ll demonstrate how App Protection Policies can isolate and secure corporate data within managed apps—across iOS, Android, and Windows—without requiring device enrolment.

Through real-world case studies and live demos, you’ll learn how to:

- Apply conditional access and enforce compliance via app-level controls
- Enable secure BYOD strategies using Microsoft Tunnel and MAM for Windows
- Leverage selective wipe, encryption, and access controls like PIN and biometric checks
- Use MAM alongside Windows 365 and Microsoft Edge for comprehensive endpoint protection

Join me to gain actionable insights on deploying MAM as part of a Zero Trust strategy that balances security and flexibility for your modern workforce.

Secure Corporate Data on Personal Devices with Intune App Protection Policies

Think your Microsoft 365 tenant is secure? Think again. This session delivers 20+ hard-earned lessons from the field to help you truly lock down your M365 environment. We’ll go deep into the hidden settings across Microsoft 365 admin centers - Entra, Intune, SharePoint, Teams, and beyond - and reveal the real-world misconfigurations, permission pitfalls, and policy blind spots you didn’t know you had. Skip the fluff and leave with actionable steps you can apply immediately.

Secure Your M365 Tenant Like a Boss (Admin Tips You’ll Thank Me For)

In a world where data breaches make headlines and compliance is non-negotiable, one architectural decision can change everything. Join us for a strategic deep dive into Azure Private Endpoints—the game-changing capability that lets you design cloud solutions with surgical precision and airtight security. Discover how to eliminate exposure to the public internet, mitigate risk, and align infrastructure with zero-trust principles. This session goes beyond theory to empower you with the insight to architect systems that are not just secure—but invisible. The cloud is evolving. Will your strategy keep up?

Silent Security: Architecting with Azure Private Endpoints for Ultimate Isolation

As organizations face sophisticated security threats, implementing robust Endpoint Security and embracing a Zero Trust model are essential for safeguarding devices. This session combines the power of Modern Endpoint Security and Zero Trust within Intune, providing a comprehensive guide to securing your endpoints.
Learn to identify and remediate at-risk devices, configure security policies, and integrate Defender for Endpoint to protect your org. We’ll cover configuring Zero Trust policies, enforcing compliance, and leveraging Conditional Access and app protection for threat management.

Device-centric Zero Trust with Microsoft Intune and Defender for Endpoint

Discover how Microsoft Purview helps you govern, classify, and secure data across your entire organization. This session covers key features like data discovery, classification, and compliance management—empowering you to build a trusted, well-managed data environment with ease.

Simplifying Data Governance with Microsoft Purview

Are you considering migrating your databases to the cloud but concerned about ensuring complete data security? Whether your data is hosted on-premises or in the cloud, implementing strong, multilayered security is essential to protect the data tier of your applications.

In this demo-centric session, you'll explore how defense-in-depth security strategies can safeguard your Azure SQL Database. Through practical demonstrations, you'll learn how to apply proven techniques across multiple layers of protection.

Key Topics Covered:

Network Security – Learn best practices for securing your network and managing access controls.
Azure Role-Based Access Control (RBAC) – Effectively assign and manage user permissions and roles.
Row-Level Security – Enforce fine-grained access control to protect sensitive data within your database.
Auditing – Monitor database activities to support compliance and accountability.
Advanced Threat Protection – Detect, respond to, and mitigate potential security threats in real-time.
Encryption Layers – Understand and implement encryption methods such as Transparent Data Encryption (TDE) and Always Encrypted.
By the end of this session, you'll walk away with actionable insights and hands-on knowledge to make confident, informed decisions about securing your Azure SQL databases.


Building the Ultimate Defense: Multi-Layered Security for Azure SQL Databases

In this discussion, Dwayne Natwick from Captain Hyperscaler, LLC will discuss how your organization can leverage Governance and Risk Management frameworks to build a cyber resilient and Risk aware organizational culture.  This will include talking about how frameworks defined within ITIL, ISO, NIST, and ISACA can provide customizable and actionable results to engineer and protect your data from exposure.

Share

Details

Virtual Event

Date / Time

Registration

Call for Speakers

Social / Web

X / Twitter

Hashtag

Website

Community Days | India Cloud Security Summit 2025