diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md
index e95d391260..7da72b8611 100644
--- a/windows/security/threat-protection/TOC.md
+++ b/windows/security/threat-protection/TOC.md
@@ -181,7 +181,7 @@
 #### [Configure attack surface reduction](windows-defender-atp/configure-attack-surface-reduction.md)
 ##### [Hardware-based isolation](windows-defender-application-guard/install-wd-app-guard.md)
 ###### [Group Policy settings](windows-defender-application-guard/configure-wd-app-guard.md) 
-##### [Application control](windows-defender-application-control/windows-defender-application-control-deployment-guide.md)
+##### [Application control](windows-defender-application-control/windows-defender-application-control.md)
 ##### [Exploit protection](windows-defender-exploit-guard/enable-exploit-protection.md)
 ###### [Customize exploit protection](windows-defender-exploit-guard/customize-exploit-protection.md)
 ###### [Import/export configurations](windows-defender-exploit-guard/import-export-exploit-protection-emet-xml.md)
diff --git a/windows/security/threat-protection/windows-defender-atp/configure-attack-surface-reduction.md b/windows/security/threat-protection/windows-defender-atp/configure-attack-surface-reduction.md
index 37062fcdb7..254660783a 100644
--- a/windows/security/threat-protection/windows-defender-atp/configure-attack-surface-reduction.md
+++ b/windows/security/threat-protection/windows-defender-atp/configure-attack-surface-reduction.md
@@ -13,4 +13,21 @@ ms.localizationpriority: high
 ms.date: 07/01/2018
 ---
 
-# To do: Amitai and Andrea and Justin
+# Configure attack surface reduction
+
+You can configure attack surface reduction with a number of tools, including:
+
+- Microsoft Intune
+- System Center Configuration Manager
+- Group Policy
+- PowerShell cmdlets
+
+
+The topics in this section describe how to configure attack surface reduction. Each topic includes instructions for the applicable configuration tool (or tools).
+
+## In this section
+Topic | Description
+:---|:---
+[Enable hardware-based isolation for Microsoft Edge](../windows-defender-application-guard/install-wd-app-guard.md) | How to preprare for and install Application Guard, including hardware and softeware requirements
+[Enable application control](./windows-defender-application-control/windows-defender-application-control.md)|How to control applications run by users and potect kernel mode processes.
+[Configure end-user antivirus interaction](configure-end-user-interaction-windows-defender-antivirus.md)|Configure how end-users interact with antivirus, what notifications they see, and whether they can override settings