Site Map
Every page on this site, on one page
This page lists every page on the site in one place, grouped by section, so you can scan or search (Ctrl/Cmd+F) the whole workbook at once. Use the page contents (right) to jump between sections. Each entry links to the rendered page.
Note
This list is generated on every site build from the pages the build renders, by scripts/generate_sitemap.py, so it always matches the site. To regenerate it locally without a full build:
python scripts/generate_sitemap.py374 pages in 22 sections.
Project
Client-Server to Hybrid-Cloud Series
- Section overview
- Prologue — Why Modernization Is Hard
- Chapter 00 — The Problem Nobody Talks About
- Applicability and Scope
- Chapter 01 — Platform Foundation
- Chapter 02 — Analyzing the Client/Server Estate
- Chapter 03 — Analysis → Plan → Delivery
- Chapter 04 — Identity: Hierarchical Directory → Flat Cloud Identity + Attribute-Driven Structure
- Chapter 05 — Policy: Group Policy → Device Management + Conditional Access
- Chapter 06 — Services: DNS, DHCP, IPAM in the Hybrid-Cloud Model
- Chapter 07 — Compute: Domain-Joined → Cloud Identity + Device Management + Hybrid Management
- Chapter 08 — Access Plane: SASE, Zero Trust, MFA, Certificate-Based Auth
- Chapter 09 — Migration Roadmap: Phased Plan, Gates, Rollback
- Chapter 10 — Leadership Takeaway: Instruments vs. Orchestra
- Appendix A — Federal Requirements Mapping
Detailed Projects
- Section overview
- Continuous Monitoring & Evidence Fabric — Project Charter
- Continuous Monitoring & Evidence Fabric — Project Plan
- Data Platform Identity Transformation — Project Charter
- Data Platform Identity Transformation — Project Plan
- Endpoint & Device Modernization — Project Charter
- Endpoint & Device Modernization — Project Plan
- Identity Lifecycle & Provisioning — Project Charter
- Identity Lifecycle & Provisioning — Project Plan
- Network & Access Modernization — Project Charter
- Network & Access Modernization — Project Plan
- Privileged Access & Administrative Identity — Project Charter
- Privileged Access & Administrative Identity — Project Plan
- Supply Chain & Software Bill of Materials — Project Charter
- Supply Chain & Software Bill of Materials — Project Plan
Project Management
Education, Training and Test Plans
Architecture
- Section overview
- Boundary Impact Model
- Change Control and Provenance Doctrine
- Continuous Monitoring Strategy
- Delegation Matrix
- Drift Engine
- Evidence Chain
- Gap Closure Register
- Governance Platform Coverage and Gap Doctrine
- GPO-to-Cloud Governance Gaps
- Identity and Directory Transformation Inventory
- Intune-First Asset Onboarding
- Single Source of Truth (SSOT)
- Three-Layer Rule Model
- Where Data Lives — Devices and Azure Resources
- Architecture Series
- Directory Migration
Reference Architecture
Operational Guides
- Section overview
- The Federal Modernization Program Active Directory Interaction Guide
- Conditional Access Policy Library
- DNS Modernization Guide
- The Federal Modernization Program End User Training Guide
- GPO Modernization — Parse and Crosswalk
- GPO Sunset Program
- PIM Self-Request with Approval
- The Federal Modernization Program PKI Modernization Guide
- The Federal Modernization Program Read-Only AD Assessment Guide
- Operational Guides
- Zero Trust Assessment
- F. Access Plane
- Federal AI Identity Governance
- Client Server To Hybrid Cloud
- D. Directory Migration (DM_\*)
- Help Desk / Cloud Services — Entra ID Operations
- Identity
- Intune + Azure Arc Modernization
- M365 Optimize Inspection Exemption — Decision Instruments
- G. Network Transformation
- A. Platform Substrate
- H. Program Management
- Siem Telemetry Emission
- E. Target Surface (Hybrid Cloud)
- B. Transformation Engine
- Zero Trust Assessment Dashboard
Guides
Learning
Case Studies
- Section overview
- Active Directory to Cloud Identity — Reference Framing Pattern
- Cloud Boundary — Case Study
- Cloud Boundary — Framing Pattern
- Federal Modernization — Case Study
- Federal Modernization — Framing Pattern
- Alternative Collaboration Path — Google Workspace
- Identity Modernization — Case Study
- Case Studies
- Federal Civilian AD → Entra ID + SQL Estate — Reference Deployment Pattern
- SQL Server Identity Transformation — Case Study
- SQL Server Identity Transformation
- Appendix A — Requirements Mapping
- Appendix B — Security-Approval (ATO) Kit
- Applicability — Where the Series Applies as Written
- Book_01 — The Authentication Inheritance Problem
- What Windows Authentication Actually Is
- Why the Inheritance Must End
- Book_02 — The Estate Itself
- The Shape of Twenty Years
- The Estate Inventory
- Rationalization: Utilization, Versions, and Dependencies
- The Retain, Consolidate, Retire Decision
- Book_03 — Discovery: The Authentication Audit
- The Authentication-Audit Script: What It Measures and Why
- Reading the Audit: Classification and Triage
- Book_04 — Arc as the Identity Bridge
- What Arc Provides to SQL Server
- Arc Deployment Sequencing for SQL Server Hosts
- Book_05 — The Login Migration: Windows Principals to Entra Logins
- Three Principal Types — User, Group, Service Principal
- What the Engine-Authentication Decision Settles
- Book_06 — Eliminating NTLM at the SQL Layer
- NTLMv1, NTLMv2, and the Patterns That Generate NTLM
- The Three Phases of NTLM Elimination for SQL Server
- Book_07 — Access Control: Groups, Roles, and Dynamic Membership
- Groups, Roles, and How Membership Reaches the Engine
- Dynamic Membership, Delegation, and Privileged Access
- Book_08 — The Application Chain: LDAP-Bound and SQL-Consuming Applications
- The Four-Class Pattern Applied to SQL-Consuming Applications
- Connection String Migration: The Last Mile
- Book_09 — The Transformed Posture: Continuous Governance and the 2027 Milestone
- The Closure Condition for the SQL Server Authentication Transformation
- The 2027 Milestone: What Done Looks Like
- Book_10 — Certificate Authority: From ADCS to Microsoft Cloud PKI
- Where SQL Server Touches ADCS
- Book_11 — Epilogue: The Platform Question
- SQL Server Identity Transformation — Narrative Series
- SQL Server Identity Transformation
SQL Server Implementation Companion
- Section overview
- Implementation Book 01 — Prerequisites & Using This Companion
- Implementation Book 02 — Estate Discovery & the Consolidation Gate
- Implementation Book 03 — The Authentication Audit
- Implementation Book 04 — Arc Deployment & the Managed Identity
- Implementation Book 05 — Login Migration & Parallel-Run Validation
- Implementation Book 06 — NTLM Detection & Remediation
- Implementation Book 07 — Groups, Administrative Units & the Conditional Access Perimeter
- Implementation Book 08 — The Application Chain & Connection-String Migration
- Implementation Book 09 — Continuous Monitoring & the CCM-BIR Closure Record
- Implementation Book 10 — Certificate Discovery for SQL Server’s ADCS Dependencies
Whitepapers
- Section overview
- AD to Entra ID — The Structural Migration Problem
- Assessment Tools vs. Closing BOD-25-01 Findings
- Table of Contents
- Federal AI Governance — Submission Readiness Brief
- Table of contents
- Federal SSOT Alignment
- What Changed at FedRAMP — and What Agencies Can Now Ask Microsoft For
- Field Office WAN Transformation and Distribution Point Consolidation
- FMP vs Microsoft Native Tools — Gap Analysis
- FMP Git Server Interfaces — Windows Server 2025 Deployment
- Flipping 50,000 Devices to Hybrid Join — The Governed and Ungoverned Paths
- DNS Record Types and Universal DDI Ecosystem Integrations — Reference Companion
- Next Generation DNS
- Modernization Governance — Whitepaper
- Table of contents
- Network Transport and Governance
- Next Generation DNS
- Whitepaper Reading Guide
- ScubaGear Integration — Whitepaper
- The Session vs. Telemetry Divide — Why Identity Architecture Splits at the FedRAMP Boundary
- The Session vs. Telemetry Divide
- Table of Contents
- SD-WAN vs. DIA Under TIC 3.0
- Ticket-to-Machine Appendices — Code Review, Access Governance, PKI, and Vendor Landscape
- Ticket-to-Machine, Not Ticket-to-Human
- Zero Trust Governance Principles
- Zero Trust Governance — Whitepaper
- Zero Trust Requires Whole-Agency Scope — Network, CSPs, and VMware as One System
- Microsoft Zero Trust Assessment and CISA SCuBA — How They Relate
The Physics of a Single Source of Truth
- Section overview
- Executive Summary — The Centralization Question
- Logical Centralization and the Single Source of Truth
- Token-Based Security as the Enabler
- The Speed-of-Light Tax
- SD-WAN and Differentiated Transport
- The Governed Path — Token-Bound Transport and the Application-Aware Overlay
- Matching Consistency Classes to Network Classes
- Reference Architecture — the Federal Modernization Program SaaS Data Plane
Executive Briefs
- Section overview
- Adapter Ecosystem Overview — Executive Brief
- Drift Engine Overview — Executive Brief
- Evidence Fabric Overview — Executive Brief
- KSI Conformance Overview — Executive Brief
- Executive Brief — Modernization Overview
- Executive Briefs
- Reciprocity & Single-ATO Overview — Executive Brief
- Zero-Trust Overview
Executive Governance Series (full chapters)
Modernization Specifications
Modernization
Libraries
Compliance
- Section overview
- Compliance ServiceNow Kit Expansion Roadmap
- Compliance — Evidence & Authorization Contract
- Federal Compliance Series - Moderate — Overview
- Moved
- Compliance — Day-2 Operator Runbook (Compliant Rewrite)
- Compliance Training Program
- Book 00 — Federal Compliance Series
- Vol 0 Book 00a — Federal Compliance — Executive Brief
- Federal Compliance — Existing Product Inventory Questionnaire
- Federal Compliance — Series Control Crosswalk
- Vol I Book 00 — Federal Compliance — Volume I Overview: Foundation & Transport
- Vol I Book 01 — Federal Agency Cloud Landing Zone
- Vol I Book 02 — Federal Compliance — Network Access Control: 802.1X and Device Identity
- Vol I Book 03 — Federal Compliance — Certificates & Tokens: Cryptographic Identity
- Vol I Book 04 — Federal Compliance — OPM HRIT and the Identity & Organizational SSOT
- Vol I Book 05 — From Mainframe to Application-Aware Modernization
- Vol I Book 06 — Federal Telecommunications Modernization
- Vol I Book 07 — Federal Compliance — Network Enforcement Substrate: Cisco, Palo Alto, Juniper and the NIAP/STIG/FIPS Path
- Vol II Book 00 — Federal Compliance — Volume II Overview: Data Platform
- Vol II Book 01 — Federal Compliance — SQL Server Authentication Modernization
- Vol II Book 02 — Federal Compliance — SQL Server Implementation Guide
- Vol II Book 03 — Federal Compliance — Database Consolidation and Network Physics
- Vol III Book 00 — Federal Compliance — Volume III Overview: Security Operations
- Vol III Book 01 — Federal Compliance — Privileged Access Management
- Vol III Book 02 — Federal Compliance — Vulnerability Management
- Vol III Book 03 — Federal Compliance — Patch & Systems Management: The SI-2 / CM Closure Plane
- Vol III Book 04 — Federal Compliance — Cloud-Native Security Posture & Containers
- Vol III Book 05 — Federal Compliance — Data Protection: Microsoft Purview and Cryptographic Key Management
- Vol III Book 06 — Federal Compliance — SIEM, XDR, and Detection Engineering: Microsoft Sentinel and Defender Integration
- Vol III Book 07 — Federal Compliance — Multi-Cloud Evidence Fabric: One Compliance Picture from Many Stacks
- Vol IV Book 00 — Federal Compliance — Volume IV Overview: Governance & Assurance
- Vol IV Book 01 — Federal Compliance
- Vol IV Book 02 — Federal Compliance — Supply Chain Risk Management
- Vol IV Book 03 — Federal Compliance — Program Management & Governance
- Vol IV Book 04 — Federal Compliance — PII Processing and Transparency
- Vol IV Book 05 — Federal Compliance — Cybersecurity Training & Awareness
- Vol IV Book 06 — Federal Compliance — Authorization Package & ConMon
- Vol IX Book 00 — Federal Compliance — Volume IX Overview: ServiceNow Day-2 Operations
- Vol IX Book 01 — Federal Compliance — Helpdesk & ITSM Catalog
- Vol IX Book 02 — Federal Compliance — Landing Zone Front Door
- Vol IX Book 03 — Federal Compliance — App Registration Governance
- Vol IX Book 04 — Federal Compliance — Teams Telephony Catalog & Teams SCuBA Drift
- Vol IX Book 05 — Federal Compliance — SaaS Integration Governance
- Vol IX Book 06 — Federal Compliance — Identity & Access Governance
- Vol V Book 00 — Federal Compliance — Volume V Overview: Training & Certification
- Vol V Book 01 — Federal Compliance — The Compliance Track
- Vol V Book 02 — Federal Compliance — The Implementation Track
- Vol V Book 03 — Federal Compliance — Assessment, Rubrics & Certification
- Vol V Book 04 — Federal Compliance — Vendor Training & Lab Environments
- Vol VI Book 00 — Federal Compliance — Implementation Overview
- Vol VI Book 01 — Federal Compliance — Landing Zone & Network as Code
- Vol VI Book 02 — Federal Compliance — Identity & Access as Code
- Vol VI Book 03 — Federal Compliance — Detection Engineering: The In-Boundary Analytics Rule Library
- Vol VI Book 04 — Federal Compliance — Response Automation: The SOAR Playbook Library
- Vol VI Book 05 — Federal Compliance — Data Protection Deployment
- Vol VI Book 06 — Federal Compliance — Configuration Baselines & Hardening
- Vol VI Book 07 — Federal Compliance — Evidence & ConMon Pipeline Deployment
- Vol VI Book 08 — Federal Compliance — Validation & Test Harnesses
- Vol VII Book 00 — Federal Compliance — Volume VII Overview: ServiceNow Automation for Federal Control Compliance
- Vol VII Book 01 — Federal Compliance — CMDB Reconciliation & Asset Identity
- Vol VII Book 02 — Federal Compliance — M365 Federal Control Compliance Automation
- Vol VII Book 03 — Federal Compliance — Azure Federal Control Compliance Automation
- Vol VII Book 04 — Federal Compliance — Control Attestation, Evidence & KSI
- Vol VII Book 05 — Federal Compliance — The ServiceNow Compliance App
- Vol VII Book 06 — Federal Compliance — AWS Federal Control Compliance Automation
- Vol VII Book 07 — Federal Compliance — VMware Federal Control Compliance Automation
- Vol VII Book 08 — Federal Compliance — Native Cloud IAM/RBAC Access-Governance Automation
- Vol VIII Book 00 — Federal Compliance — Volume VIII Overview: Multi-Cloud DDI Landing-Zone Automation
- Vol X Book 00 — Federal Compliance — Volume X Overview: The Series on the Governance Substrate
- Federal Compliance Series - Moderate
- Federal Compliance Series - Moderate — Executive Brief
- Federal Compliance Series - Moderate — Executive Summary
- Federal Compliance Series - Moderate — Volume I: Foundation & Transport
- Federal Compliance Series - Moderate — Volume II: Data Platform
- Federal Compliance Series - Moderate — Volume III: Security Operations
- Federal Compliance Series - Moderate — Volume IV: Governance & Assurance
- Federal Compliance Series - Moderate — Volume IX: Day-2 Operations
- Federal Compliance Series - Moderate — Volume V: Training & Certification
- Federal Compliance Series - Moderate — Volume VI: Implementation
- Federal Compliance Series - Moderate — Volume VII: Automation
- Federal Compliance Series - Moderate — Volume VIII: Multi-Cloud DNS/DHCP/IPAM
- Federal Compliance Series - Moderate — Volume X: Governance-Substrate Integration
- Federal Compliance Series — Book Summaries
- Federal Compliance Series — Volume 0 Books
- Federal Compliance Series — Volume I Books
- Federal Compliance Series — Volume II Books
- Federal Compliance Series — Volume III Books
- Federal Compliance Series — Volume IV Books
- Federal Compliance Series — Volume IX Books
- Federal Compliance Series — Volume V Books
- Federal Compliance Series — Volume VI Books
- Federal Compliance Series — Volume VII Books
- Federal Compliance Series — Volume VIII Books
- Federal Compliance Series — Volume X Books
Hr Driven Iam
- Section overview
- Chapter 00 — Overview and Applicability
- Chapter 01 — Why HR Is the Source of Authority
- Chapter 02 — Federal HR 2.0 and the Core HCM Platform
- Chapter 03 — Attribute Authority
- Chapter 04 — The Provisioning Pipeline
- Chapter 05 — The Canonical Attribute Schema
- Chapter 06 — Joiner, Mover, Leaver
- Chapter 07 — Credentials and Certificates Across Joiner, Mover, Leaver
- Chapter 08 — From Attributes to Access
- Chapter 09 — Drift, Metrics and Evidence
- Chapter 10 — Execution Plan
- Chapter 11 — Reference Deployment (Illustrative)
Next Generation Ddi
- Section overview
- Applicability
- DNS Is Now the Control Plane
- Split-Brain DNS: The Structural Problem
- Federal Requirements: NIST SP 800-81 Rev. 3, FedRAMP and Zero Trust
- The Active Directory DNS Departure
- Edge Interception, Encrypted DNS and Rogue DHCP
- DNS Identity, Certificates and DNSSEC
- Cloud Private Endpoints, SDN and IPAM Consistency
- Reference Architecture and the Five Critical Decisions
- The Migration Sequence
- Operating the Control Plane: Delegation, Automation and Evidence
- Platform Selection, Cost and Residual Risk
- Appendix A — DNS Record Types and Ecosystem Integrations
- Appendix B — Requirements Mapping and Sources