Microsoft Bolsters Zero Trust for AI with Enhanced Tools

Microsoft has expanded its Zero Trust for AI strategy by updating two key tools: the Zero Trust Assessment tool and the Zero Trust Workshop. The enhancements help organizations evaluate their security posture, prioritize remediation, and apply zero trust principles to AI agents and software development.

The Zero Trust Assessment is a free tool that evaluates an organization's Microsoft security configuration against zero trust best practices. It covers seven pillars: identity, devices, data, network, infrastructure, security operations, and AI. The AI pillar introduces zero trust checks for secure AI adoption.

Microsoft has also introduced a DevSecOps pillar to the Zero Trust Workshop with 15 control groups and 91 tasks. This helps development teams apply zero trust principles throughout the software development lifecycle. The framework translates zero trust principles into guidance for development teams, CI/CD pipelines, source repositories, dependencies, artifacts, and infrastructure as code.