Question

A financial services company is beginning its Zero Trust journey using the Microsoft Zero Trust adoption framework. The CISO wants the security team to structure the initiative so that executive stakeholders can see how security investments map to measurable organizational outcomes, and so that work is sequenced in a way that both business and technical leaders can track. According to the Microsoft Zero Trust adoption framework, what should the team do first to organize the effort?

Accepted Answer

Define business scenarios that align Zero Trust objectives to organizational outcomes, then plan the technical work needed to achieve each scenario.

Answer

Deploy Microsoft Entra Conditional Access policies across all applications to enforce least-privilege access immediately.

Answer

Enable Microsoft Defender for Cloud on all subscriptions to establish a secure score baseline before any planning.

Answer

Segment the corporate network into micro-perimeters to prevent lateral movement as the foundational Zero Trust control.