{"id":31079738,"url":"https://github.com/compcode1/entra-control-stack-expanded","last_synced_at":"2025-09-16T10:59:22.637Z","repository":{"id":310107224,"uuid":"1038736412","full_name":"Compcode1/entra-control-stack-expanded","owner":"Compcode1","description":"This repository provides an expanded reference guide to the Entra Control Stack — a seven-layer security framework for structuring Microsoft Entra ID governance, identity protection, and continuous verification.","archived":false,"fork":false,"pushed_at":"2025-08-15T18:29:30.000Z","size":14,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-08-15T20:38:03.883Z","etag":null,"topics":["configurations","continuous-verification","entra-id","id-governance","identity-management"],"latest_commit_sha":null,"homepage":"","language":"Jupyter Notebook","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Compcode1.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-08-15T18:20:58.000Z","updated_at":"2025-08-15T18:31:24.000Z","dependencies_parsed_at":"2025-08-15T20:38:05.208Z","dependency_job_id":"e0e1d1be-e493-40e4-8c05-91d6fa61e2fb","html_url":"https://github.com/Compcode1/entra-control-stack-expanded","commit_stats":null,"previous_names":["compcode1/entra-control-stack-expanded"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/Compcode1/entra-control-stack-expanded","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Compcode1%2Fentra-control-stack-expanded","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Compcode1%2Fentra-control-stack-expanded/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Compcode1%2Fentra-control-stack-expanded/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Compcode1%2Fentra-control-stack-expanded/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Compcode1","download_url":"https://codeload.github.com/Compcode1/entra-control-stack-expanded/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Compcode1%2Fentra-control-stack-expanded/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275407721,"owners_count":25459379,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-16T02:00:10.229Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["configurations","continuous-verification","entra-id","id-governance","identity-management"],"created_at":"2025-09-16T10:59:19.784Z","updated_at":"2025-09-16T10:59:22.627Z","avatar_url":"https://github.com/Compcode1.png","language":"Jupyter Notebook","readme":"# Entra Control Stack Expanded\n\n## Overview\nThis repository provides an expanded reference guide to the **Entra Control Stack** — a seven-layer security framework for structuring Microsoft Entra ID governance, identity protection, and continuous verification.  \nThe content is designed as a consolidated study and operational reference, integrating each layer’s purpose, required Entra elements, implementation actions, and operational notes.\n\nUnlike simulation-based projects, this reference is purely conceptual and instructional. It captures best-practice controls and layer-by-layer recommendations in a consistent, reusable format.\n\n---\n\n## Structure\nThe notebook (`brightwave_analytics.ipynb`) is organized into seven core layers:\n\n1. **Authority Definition** – Establish and verify top-level administrative authority and role assignments.  \n2. **Scope Boundaries** – Define and enforce role scopes, delegation boundaries, and administrative segmentation.  \n3. **Privileged Identity Management (PIM) Controls** – Govern activation, approval, and auditing of privileged roles.  \n4. **Role Assignment Governance** – Maintain strict oversight of permanent and eligible role assignments.  \n5. **Access Governance** – Implement access reviews, entitlement management, and policy-based provisioning.  \n6. **Device Trust Enforcement** – Ensure only secure, compliant devices can access sensitive resources.  \n7. **Continuous Verification** – Maintain ongoing assurance through risk-based controls, analytics, and automated reviews.\n\n---\n\n## Use Cases\n- **Study Aid** – Supports SC-300 and AZ-500 exam preparation by aligning with core Entra governance concepts.  \n- **Operational Reference** – Serves as a baseline for tenant hardening and identity security architecture.  \n- **Governance Mapping** – Facilitates mapping Entra controls to NIST, CIS, and Zero Trust frameworks.\n\n---\n\n## File List\n- `brightwave_analytics.ipynb` — Main project notebook containing the expanded Entra Control Stack reference.\n\n---\n\n## Author\n**Steven Tuschman**  \n[GitHub: Compcode1](https://github.com/CompCode1)  \n[Website: steventuschman.com](https://steventuschman.com)  \n\n---\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcompcode1%2Fentra-control-stack-expanded","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcompcode1%2Fentra-control-stack-expanded","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcompcode1%2Fentra-control-stack-expanded/lists"}