What We Learned Implementing Zero Trust Security at Microsoft
summary
Microsoft describes their three-year Zero Trust implementation: the overall Zero Trust strategy, five primary scenarios they prioritized, the designs used for those scenarios, and the team/organizational changes made to keep implementation focused. Technologies are not enumerated in the abstract, but the content centers on design and operational lessons from Microsoft’s Zero Trust journey.
AI-written summary · about
chapters (32)
- 0:00Introductions
- 0:31Zero Trust team and goals
- 1:34Zero Trust pillars
- 2:54Verify before trust
- 3:57Cultural challenges
- 5:31Access and pillars
- 7:08User experience
- 9:10Cloud transformation
- 10:12Passwordless journey
- 12:11Access models
- 13:46Application inventory
- 14:41VPN data insights
- 15:23Device health baseline
- 17:01Communicating policies
- 18:29Program prioritization
- 19:37Modernizing campus network
- 20:44Application modernization
- 21:59Experience improvement
- 23:10Roadmap and alignment
- 25:00Device enforcement challenges
- 25:35Network experience changes
- 26:50Core team structure
- 28:47Budget and escalation
- 30:20Key takeaways
- 31:52Q&A: Authorization
- 34:03Q&A: Attribute access
- 37:42Q&A: Endpoint communication
- 39:31Q&A: Support tools
- 41:25Q&A: BYOD pushback
- 45:24Q&A: App management
- 47:42Q&A: Developer security
- 50:04Q&A: Identities
related talks
40mZero Trust in a Post-pandemic World
02h 48mZero Trust: the new normal!
49mZero Trust Application Architecture
40mLessons From Our Zero Trust Journey: Successes, Failures & Dodging Pitfalls
51mIt’s All Geek to Me: Communicating The Business Value of Zero Trust
18mImplementing Zero Trust at Enterprise Scale
45mZero Trust: Getting to Step One..and What to Do When You Get There
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company