For awhile, my team had been going about Microsoft Defender for Cloud(MDFC), the wrong way. It had been a challenge to keep clear visibility of security centric user stories, exemptions, vulnerabilities, and regulatory compliance for my team. After doing a bit of research, I came across a method to continuously…