Updated Data and Networking pillars in the Zero Trust Assessment tool.<\/p>\n
A new Zero Trust reference architecture for AI.<\/p>\n
Practical patterns and practices for securing AI at scale.<\/p>\n
Here\u2019s what\u2019s new and how to use it. <\/p>\n
Why Zero Trust principles must extend to AI<\/p>\n
AI systems don\u2019t fit neatly into traditional security models. They introduce new trust boundaries\u2014between users and agents, models and data, and humans and automated decision-making. As organizations adopt autonomous and semi-autonomous AI agents, a new class of risk emerges: agents that are overprivileged, manipulated, or misaligned can act like \u201cdouble agents,\u201d working against the very outcomes they were built to support.<\/p>\n
By applying three foundational principles of Zero Trust to AI:<\/p>\n
Verify explicitly\u2014Continuously evaluate the identity and behavior of AI agents, workloads, and users.<\/p>\n
Apply least privilege\u2014Restrict access to models, prompts, plugins, and data sources to only what\u2019s needed.<\/p>\n
Assume breach\u2014Design AI systems to be resilient to prompt injection, data poisoning, and lateral movement.<\/p>\n
These aren\u2019t new principles. What\u2019s new is how we apply them systematically to AI environments.<\/p>\n
A unified journey: Strategy \u2192 assessment \u2192 implementation<\/p>\n
The most common challenge we hear from security leaders and practitioners is a lack of a clear, structured path from knowing what to do to doing it. That\u2019s what Microsoft\u2019s approach to Zero Trust for AI is designed to solve\u2014to help you get to next steps and actions, quickly.<\/p>\n
Zero Trust Workshop\u2014now with an AI pillar<\/p>\n
Building on last year\u2019s announcement<\/a>, the Zero Trust Workshop<\/a> has been updated with a dedicated AI pillar, now covering 700 security controls across 116 logical groups and 33 functional swim lanes. It is scenario-based and prescriptive, designed to move teams from assessment to execution with clarity and speed.<\/p>\n The workshop helps organizations:<\/p>\n Align security, IT, and business stakeholders on shared outcomes.<\/p>\n Apply Zero Trust principles<\/a> across all pillars, including AI.<\/p>\n Explore real-world AI scenarios and the specific risks they introduce.<\/p>\n Identify cross-product integrations that break down silos and drive measurable progress.<\/p>\n The new AI pillar specifically evaluates how organizations secure AI access and agent identities, protect sensitive data used by and generated through AI, monitor AI usage and behavior across the enterprise, and govern AI responsibly in alignment with risk and compliance objectives.<\/p>\n Zero Trust Assessment\u2014expanded to Data and Networking<\/p>\n As AI agents become more capable, the stakes around data and network security have never been higher. Agents that are insufficiently governed can expose sensitive data, act on malicious prompts, or leak information in ways that are difficult to detect and costly to remediate. Data classification, labeling, governance, and loss prevention are essential controls. So are network-layer defenses that inspect agent behavior, block prompt injections, and prevent unauthorized data exposure.<\/p>\n Yet, manually evaluating security configurations across identity, endpoints, data, and network controls is time consuming and error prone. That is why we built the Zero Trust Assessment to automate it. The Zero Trust Assessment<\/a> evaluates hundreds of controls aligned to Zero Trust principles, informed by learnings from Microsoft\u2019s Secure Future Initiative (SFI)<\/a>. Today, we are adding Data and Network as new pillars alongside the existing Identity and Devices coverage.<\/p>\n Zero Trust Assessment tests are derived from trusted industry sources including:<\/p>\n Industry standards such as the National Institute of Standards and Technology (NIST), the Cybersecurity and Infrastructure Security Agency (CISA), and the Center for Internet Security (CIS).<\/p>\n Microsoft\u2019s own learnings from SFI.<\/p>\n Real-world customer insights from thousands of security implementations.<\/p>\n And we are not stopping here. A Zero Trust Assessment for AI pillar is currently in development and will be available in summer 2026, extending automated evaluation to AI-specific scenarios and controls.<\/p>\n Overall, the redesigned experience delivers:<\/p>\n Clearer insights\u2014Simplified views that help teams quickly identify strengths, gaps, and next steps.<\/p>\n Deep(er) alignment with the Workshop\u2014Assessment insights directly inform workshop discussions, exercises, and deployment paths.<\/p>\n Actionable, prioritized recommendations\u2014Concrete implementation steps mapped to maturity levels, so you can sequence improvements over time.<\/p>\n Zero Trust for AI reference architecture<\/p>\n Our new Zero Trust for AI reference architecture (extends our existing Zero Trust reference architecture) shows how policy-driven access controls, continuous verification, monitoring, and governance work together to secure AI systems, while increasing resilience when incidents occur.<\/p>\n The architecture gives security, IT, and engineering teams a shared mental model by clarifying where controls apply, how trust boundaries shift with AI, and why defense-in-depth remains essential for agentic workloads.<\/p>\n Practical patterns and practices for AI security<\/p>\n Knowing what to do is one thing. Knowing how to operationalize it at scale is another. Our patterns and practices<\/a> provide repeatable, proven approaches to the most complex AI security challenges, much like software design patterns offer reusable solutions to common engineering problems.<\/p>\n PatternWhat it helps you doThreat modeling for AIWhy traditional threat modeling breaks down for AI\u2014and how to redesign it for real-world risk at AI scale<\/a>.AI observabilityEnd-to-end logging, traceability, and monitoring to enable oversight, incident response, and trust at scale<\/a>.Securing agentic systemsActionable guidance on agent lifecycle management, identity and access controls, policy enforcement, and operational guardrails<\/a>.Principles of robust safety engineeringCore safety engineering principles and how to apply them when designing and operating real-world AI systems<\/a>.Defense-in-depth for Indirect prompt injection (XPIA)How Indirect Prompt Injection works, why traditional mitigations fail, and how a defense\u2011in\u2011depth approach\u2014spanning input handling, tool isolation, identity, memory controls, and runtime monitoring\u2014can meaningfully reduce risk.<\/p>\n See it live at RSAC 2026<\/p>\n If you\u2019re attending RSAC\u2122 2026 Conference<\/a>, join us for three sessions focused on Zero Trust for AI\u2014from expanding attack surfaces to hands-on, actionable guidance.<\/p>\n WhenSessionTitleMonday, March 23, 2026, 1:00 PM PT-2:00 PM PTRSA Partner Roundtable<\/a>, by Lorena Mora (Senior Product Manager CxE), Charis Babokov (Senior Product Marketing Manager, Microsoft Intune), and Jodi Dyer (Senior Product Marketing Manager, Microsoft Intune)Zero Trust Workshop: Devices PillarWednesday, March 25, 2026, 11:00 AM PT-11:20 AM PTZero Trust Theatre Session, by Tarek Dawoud (Principal Group Product Manager, Microsoft Security) and Hammad Rajjoub (Director, Microsoft Secure Future Initiative and Zero Trust)Zero Trust for AI: Securing the Expanding Attack SurfaceWednesday, March 25, 2026, 12:00 PM PT-1:00 PM PTAncillary Executive Session, by Travis Gross (Principal Group Product Manager, Microsoft Security), Eric Sachs (Corporate Vice President, Microsoft Security), and Marco Pietro (Executive Vice President, Global Head of Cybersecurity, Capgemini), moderated by Mia Reyes (Director of Security, Microsoft). Building Trust for a Secure Future: From Zero Trust to AI ConfidenceThursday, March 26, 2026, 11:00 AM PT-12:00 PM PTRSAC Post-Day Workshop, by Travis Gross, Tarek Dawoud, Hammad RajjoubZero Trust, SFI, and ZT4AI: Practical, actionable guidance for CISOs<\/p>\n Get started with Zero Trust for AI<\/p>\n Zero Trust for AI brings proven security principles to the realities of modern AI. Whether you\u2019re governing agents, protecting models and data, or scaling AI without introducing new risk, the tools, architecture, and guidance are ready for you today.<\/p>\n Get started:<\/p>\n To continue the conversation, join the Microsoft Security Community<\/a>, where security practitioners and Microsoft experts share insights, guidance, and real world experiences across Zero Trust and AI security. <\/p>\n Learn more about Microsoft Security solutions on our\u00a0website<\/a> and\u00a0bookmark the\u00a0Microsoft Security blog<\/a>\u00a0for expert insights on security matters. Follow us on LinkedIn (Microsoft Security<\/a>) and X (@MSFTSecurity<\/a>)\u00a0for the latest cybersecurity news and updates.<\/p>\n![\"Image](\"https:\/\/www.newsbeep.com\/il\/wp-content\/uploads\/2026\/03\/ZT-Workshop-scaled.webp.webp\")
<\/p>\n![\"Image](\"https:\/\/www.newsbeep.com\/il\/wp-content\/uploads\/2026\/03\/Picture4.webp.webp\")
<\/p>\n![\"Image](\"https:\/\/www.newsbeep.com\/il\/wp-content\/uploads\/2026\/03\/Picture5.webp.webp\")
<\/p>\n