Data#3 Cyber Resilience with Surface: 2-Weeks Implementation

Our Cyber Resilience with Surface Pilot solution helps you take control of your hybrid and remote worker Microsoft Surface devices, ensuring they can be securely deployed and managed on an ongoing basis using the Surface Management Portal, Surface Device Firmware Configuration Interface (DFCI), Intune and Windows Autopilot. We build Intune in your existing Microsoft 365 tenant and leverage the tool-sets within this platform that enable you to secure Surface devices, and deploy standard configuration and apps to pilot devices

This solution provides you with the hands-on experience to evaluate how Surface can be secured from the cloud.

Secure Surface Devices:

• The new Surface Management Portal provides a centralised solution to self-serve, manage, and monitor Surface devices at scale.
• The Surface Management Portal provides insights into device compliance, support activity, and warranty coverage.
• With DFCI profiles built into Intune, Surface UEFI management extends the modern management stack down to the UEFI hardware level.
• DFCI supports zero-touch provisioning, eliminates BIOS passwords, provides control of security settings including boot options and built-in peripherals.

Take control of hybrid and remote worker devices:

• Deploy new or updated apps to devices, no matter where they are
• Change configuration and security policies on devices, no matter where they are
• Report on update compliance of your fleet

Automatically deploy new laptops and re-provision existing:

• Standardised environment deployed for new devices, automatically
• Ability to remotely re-provision laptops, thus extending the life of the hardware and implementing the same standard across all devices
• Leverage the latest operating system included on new devices

Manage organisation-owned mobiles and apps and data on personal mobiles:

• Control everything you need to on mobile devices, including security settings, configuration policies and apps
• Manage the apps and data that belong to your organisation on personal devices
• Perform remote actions on mobile devices, such as wiping the entire device, or just deleting an organisational app and its data

Outcomes include::

• Surface devices secured using the Surface Management Portal and DFCI
• Automated deployment using Windows Autopilot
• Leverages Windows 10 or Windows 11
• Office 365 apps deployed as part of the automated build
• Basic configuration policy applied using Intune
• Microsoft Updates configured using Intune
• Intune inventory reporting
• BitLocker device encryption
• Basic functionality testing
• Up to 3 pilot devices deployed