Zero Trust isn't a single project — it's a journey that needs both a plan and a way to measure progress. Microsoft just brought those two pieces together under one roof, with fresh pillars on both sides. Here's the roundup.
The Framework: Two Tools, One Mission
Microsoft now frames Zero Trust around a simple pairing: plan with the Workshop, assess with the Assessment. Both live together at the new Microsoft Zero Trust hub, alongside a step-by-step guide for running a full Zero Trust strategy session.
Tool 1: Zero Trust Workshop — Now with DevSecOps
The Workshop is the planning side — an interactive tool to build your Zero Trust roadmap. It just picked up an 8th pillar: DevSecOps, bringing application security and dev practices formally into the framework.
- 8 pillars, including the new DevSecOps pillar
- First-Then-Next structure to prioritize what to tackle and when
- Auto-generated summaries and implementation plans tailored to your org
Try it: Launch Workshop →
Tool 2: Zero Trust Assessment — Expanded Coverage
The Assessment is the measurement side — it connects to your Microsoft Entra tenant and automates posture checks. Coverage now spans 7 pillars, with Infrastructure, Security Operations, and AI added this round, plus a revamped Overview page for aggregated insights.
- 7 pillars, including Infrastructure, Security Operations, and AI
- Connects directly to your Entra tenant for automated checks
- Guides you through prioritized, actionable remediation
- New Overview page for a single view of risk across pillars
Try it: Run Assessment →
(We covered the Assessment's pillar expansion in our previous roundup — this is the fuller picture, now paired with the Workshop.)
See It First
Not ready to connect a tenant yet? Walk through a live demo of the Assessment experience — including the new Infrastructure, Security Operations, and AI pillar views — before you run it for real. 👀
Explore: View Assessment Demo →
Go Deeper
- Step-by-Step Delivery Guide — for running a full Zero Trust strategy session, partner or internal
Bottom Line
Plan with the Workshop, measure with the Assessment — that's Microsoft's Zero Trust pitch now, and the toolset finally matches it. If you've only run the Assessment so far, the Workshop's new DevSecOps pillar is worth a look.
No comments:
Post a Comment