Question 1

What is this Zero Trust workshop for?

Accepted Answer

It is a facilitated maturity check aligned with NIST SP 800-207. You walk seven pillars (governance, identity, devices, network, apps, data, visibility), score what exists today, and leave with a PDF you can use in architecture or steering meetings.

Question 2

Do I need Microsoft/Azure to use it?

Accepted Answer

No. Tasks describe outcomes (MFA everywhere, no implicit LAN trust, app-layer enforcement) without naming products. Use whatever IdP, firewall, and SIEM you already run.

Question 3

How is this different from the Microsoft Zero Trust Workshop?

Accepted Answer

Microsoft's workshop links each task to their services and licenses. This version keeps the pillar-by-pillar workshop format but maps to NIST SP 800-207 so mixed or on-prem environments can use the same script.

Before you go...