Merge pull request #1 from drewnicholas1111/drewnicholas1111-patch-1

Update Module-5-Improving-your-Secure-Posture.md

Labs/Modules/Module-5-Improving-your-Secure-Posture.md

@@ -197,7 +197,21 @@ SecurityResources
 | extend SecureControl = properties.displayName, unhealthy = properties.unhealthyResourceCount, currentscore = properties.score.current, maxscore = properties.score.max
 | project SecureControl , unhealthy, currentscore, maxscore
 ```
+### Exercise 5: Creating Governance Rules and Assigning Owners
+Security teams are responsible for improving the security posture of their organizations but they may not have the resources or authority to actually implement security recommendations. Assigning owners with due dates and defining governance rules creates accountability and transparency so you can drive the process of improving the security posture in your organization.
+
+Stay on top of the progress on the recommendations in the security posture. Weekly email notifications to the owners and managers make sure that they take timely action on the recommendations that can improve your security posture and recommendations.
+
+1. Return to Microsoft Defender for Cloud blade and Click on **Environment settings**. Click the down arrow on **Azure** to show the subscription, and then click the down arrow on **Azure Susbcription 1** to show the workspace. Notice the Defender coverage is 11/11 plans for the subscription and 2/2 plans for the workspace, meaning that you are now fully protected using Microsoft Defender for Cloud.
+    ![Environment settings](../Images/mdfc-envsettings.png?raw=true)
+3. From Settings's sidebar, select **Governance Rules** which is found under the **Policy Settings** section.
+    <img width="339" alt="image" src="https://user-images.githubusercontent.com/15238159/179999129-68ba1e61-4a15-4583-9d7c-47e08d073eeb.png">
+4.
+
+| project SecureControl , unhealthy, currentscore, maxscore
+```
+
 
 More details on the [official article](https://docs.microsoft.com/en-us/azure/security-center/secure-score-security-controls) or on the [blog post](https://techcommunity.microsoft.com/t5/azure-security-center/querying-your-secure-score-across-multiple-subscriptions-in/ba-p/1749193)
 
-### Continue with the next lab: [Module 6 - Workload Protections](../Modules/Module-6-Azure-Defender.md)
+### Continue with the next lab: [Module 6 - Workload Protections](../Modules/Module-6-Azure-Defender.md)