Here are Microsoft's recommendations for managing security o