diff --git a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md
index 3fae7e6b59..31d3e5474f 100644
--- a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md
+++ b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md
@@ -28,18 +28,50 @@ Deploying Microsoft Defender ATP is a three-phase process:
- + |
+
![]() Plan |
- - + |
+
![]() Onboard |
-
+
+ ![]() Configure + |
+
+ + | ++ + | ++ + | +
+
+ ![]() Plan + |
+
+
+ ![]() Onboard + |
+
+
![]() Configure |