Understanding and Getting Started with ZERO TRUST

A look at what Zero Trust really is and how to get started.
🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!
▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
0:00 - Introduction
1:04 - How it was and evolution of requirements
6:20 - Zero trust core principles
10:59 - Why is VPN NOT the solution
14:06 - Identity
21:06 - Endpoints and devices
26:13 - Network
33:11 - Context, control and policy enforcement
41:05 - Infrastructure
43:33 - Applications
47:48 - Data
53:40 - Bringing it together and SIEM/SOAR
56:32 - Summary
▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Whiteboard:
🔗 github.com/johnthebrit/Random...
► Zero Trust Maturity Model:
🔗 aka.ms/zerotrustmaturitymodel
▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🔗 learn.onboardtoazure.com
🥇 Certification Content Repository
🔗 github.com/johnthebrit/Certif...
📅 Weekly Azure Update
🔗 • Azure Infrastructure U...
☁ Azure Master Class
🔗 • Microsoft Azure Master...
⚙ DevOps Master Class
🔗 • DevOps Master Class
💻 PowerShell Master Class
🔗 • PowerShell Master Class
🎓 Certification Cram Videos
🔗 • Microsoft Certificatio...
🧠 Mentoring Content
🔗 • Virtual Mentoring
❔ Question about my setup?
🔗 • My Setup
👕 Cure Childhood Cancer Charity T-Shirt Channel Store
🔗 johns-t-shirts-store.creator-...
SUBSCRIBE ✅ / @ntfaqguy
#microsoft #azure #johnsavillstechnicaltraining #doyouevenazure #onboardtoazure #cloud

[@NTFAQGuy]

Hey everyone, welcome to another video! Please make sure to read the description for the chapters and key information about this video and others. ⚠ P L E A S E N O T E ⚠ 🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there! 🕰 I don't discuss future content nor take requests for future content so please don't ask 😇 Thanks for watching! 🤙

[@jbahou]

"...that's a bit sus." lol. It's the subtle humor I enjoy the most. Great content as always, John!

[@MaorKlir]

A glorious presentation! (as always, if I might add). Keep on delivering all of that good stuff! 💪🏻

[@JonnyHjortland]

This is one of your most important videos focusing on identity, modern workplace, devices, monitoring and more. I have been advocating this massively the last couple of years. Microsofts Defender platform has become a markert leader and is getting a lot of attention and momentum. Microsoft Sentinel is a game-changer and you should create a separate video on it. Keep em coming!!

[@EdsonNascimentoEN]

I referred to your videos and passed on the Microsoft Security, Compliance, and Identity Fundamentals last weekend, and now I am watching this video it really makes perfect sense. Security is everything and you explained well the importance of it. Thanks for your amazing videos, John.

[@cook9628]

This is a masterclass in itself. Such a broad area covered with so much clarity. Genius !! Many Thanks John

[@NTFAQGuy]

Very welcome

[@andreelyusef3235]

One of the best videos on this topic I ever seen. Your page is truly in a class of its own.

[@karldavidson7674]

Another great video John! I am currently studying for my CCSP and az-305 so for me at least this video was the perfect blend of MS and essential cloud security principles. 🙏🙏

[@MrVampify]

I've been slowly developing a ZTNA + SDWAN infrastructure for my corp and though I was already doing a lot of this, this video was essential in filling in the gaps to my solution. Extremely well done video.

[@kimagran4071]

Great video and a fantastic breakdown of the Zero Trust concept! Thanks!

[@pradeeprajurs9080]

Excellent description of Zero Trust and Defense in Depth Concepts. Thanks again!

[@biohackingalchemy7996]

the OSSTMM created this idea in the year 2000. Read the OSSTMM, ZTA idea is covered in Chapter 5 called Trust. Im baffled they are trying to pass this off as something new. We have been doing it for 22 years!

[@oranais3074]

As always, the Maestro makes it so easy to understand. Many thanks mate.

[@NTFAQGuy]

Happy to help

[@nathanmcgee2732]

The part where you looked into my eyes and said, "This is huge" Great video, as always!

[@chucksnelling9417]

Awesome Work John!!! LOVE your videos

[@mangekyosharinganboy]

As always, AWESOME John!!

[@Dom.Martel]

Great video, very well explained and covers it all! Thank you.

[@pauljones8397]

Absolutely on point once again Mr Savill, BRAVO!!

[@tony6626]

Superb video as always John, a much needed but often overlooked consideration!

[@NTFAQGuy]

Glad you enjoyed it

[@johnfunk7568]

Another EXCELLENT section. Thanks John!!!

[@christianibiri]

This is a great explanation!, thank you John!

[@Moynzy]

Thank you, this has helped me with my SC900 training!

[@skyguy7868]

John Super explanation covering almost all aspects of a complex topic. Appreciate your efforts behind this evening sharing the whiteboard screen in the link 👍

[@NTFAQGuy]

Glad it was helpful!

[@felipemenfer]

Amazing video, so clear and concise. Thank you for sharing it.

[@Chaos1612mr]

Thanks, I need to roll out MFA in my company and think about Zero Trust. This has helped me understand alot!

[@mersongeorgep]

Every components of Zero Trust platform is well explained. It felt like a fast track , content loaded, super duper course. Thanks

[@xelerated]

For TRUST Trust metrics, testing, and controls you need the OSSTMM, The OSSMM also said "Trust is a vulnerability" years before "zero trust" was "invented"

[@ma34529]

This is the best video I've watched about Zero Trust and having all pieces explained and brought together.

[@NTFAQGuy]

Glad you enjoyed it!

[@oladimejimichaeloloyede7203]

WOW!!! I got connected to your channel a few days ago, I appreciate your videos.

[@NTFAQGuy]

Welcome!

[@lltagged]

Greatly appreciated as always - insanely good session!

[@NTFAQGuy]

Glad you enjoyed it!

[@areyouready4005]

Great content John, many thanks.

[@hadiasghari2266]

For a lost soul in Microsoft stack like me, this channel is a light in dark

[@lifechamp007]

I was waiting for your video on this topic - thank you very much John for all your hardwork !! #StayBlessednHappy

[@NTFAQGuy]

Same to you!

[@launebaer86]

Thank you for covering that topic!

[@NTFAQGuy]

My pleasure!

[@manco8888]

this is gold, one of your best videos

[@Restartallthethings]

As always, you rock Mr. John!

[@NTFAQGuy]

🫵

[@erikslorenz]

Excellent! I'm in a smaller company and in August we move to business central so almost everything is authenticated through azure ad

[@lifechamp007]

Super helpful, as always John !! #StayBlessednHappy

[@0xAMBIENT]

Signals, signals, signals! Thanks for the great video.

[@hadiasghari2266]

your channel is liquid gold

[@amithenry8639]

very good session , thanks for your efforts to spread knowledge, you have a gift to explain complex things in a simple way. 🙏

[@NTFAQGuy]

Thank you 🙏

[@ciscocore]

this video ended my search...one of the best... tutorials..

[@criptzom79]

Great work, thanks John

[@piotrstasinskij2929]

Thank You John for great video

[@qnximg]

Incredible content, congratulations. Thank you!

[@NTFAQGuy]

Glad you enjoyed it!

[@ankitshivam342]

amazing as always :) You are a Hero .

[@bitgamerx9574]

Very useful explanation of Zero Trust. Thanks ! Your biceps might be the strongest defense against a breach. 💪

[@biohackingalchemy7996]

the OSSTMM created this idea in the year 2000. Read the OSSTMM, ZTA idea is covered in Chapter 5 called Trust. Im baffled they are trying to pass this off as something new. We have been doing it for 22 years!

[@donaldmarshall8868]

This is one of your most important videos

[@elvinguerrero2596]

Very detailed explanation, than you so much.

[@NTFAQGuy]

You are welcome!

[@JamesOKeefe-US]

Wow, really amazing content. As a non cyber Manager this was totally approachable. Thank you for this!!

[@NTFAQGuy]

Glad it was helpful!

[@olegshalnov1028]

Great video, thanks!

[@Bridge-the-card-game]

Super interesting and well persented! Thank you

[@NTFAQGuy]

Glad it was helpful!

[@talltk]

Fantaastic video man! Lots of questions though…

[@NTFAQGuy]

Glad you enjoyed!

[@l.w.8313]

Amazing video!

[@davidadams421]

Very, very good.

[@prasadshivrajurkar6032]

Another great content video by John and I like the YTSilver Play Button 👍

[@NTFAQGuy]

Thanks 👍

[@MichaelToub]

great video!

[@markdriver8511]

Great video thanks :-)

[@chaminda512]

Thank you

[@nicospanatos6605]

on point !

[@wilsonpereira7350]

Very Nice.

[@NTFAQGuy]

Thanks!

[@johnsebastian4379]

I knew there was a reason I liked you. Old Vax/VMS man here myself.

[@NTFAQGuy]

Good old days :)

[@kenneth3762]

Quick question. How does MFA reduce fishing attacks? Do you mean that less accounts are compromised, so less "internal-based" phishing? Thanks and love your content!

[@NTFAQGuy]

Harder to trick a user with dummy site asking for username and password if then still need mfa to use

[@sieffy91]

We're trying to push our organization to a Zero Trust strategy. One roadblock we're experiencing revolves around 802.1x authentication for our Azure AD Joined devices. We have discussed possibly using a User certificate but the security team is opposed to this as it is less secure than a device cert. Only problem that we have with that is Azure AD only devices (not hybrid joined) can't receive device certs (at least not that I'm aware of). What would be the proper zero trust strategy to get around this? We are struggling to find alternatives as well if this is just not an option. Any suggestions would be greatly appreciated! Also great video, glad I found your channel!

[@NTFAQGuy]

Intune and other MDM can issue device certs.

[@simple-security]

Respectfully John I'd like to suggest the 'bring it all together' discussion should include Defender for Cloud. CSPM (cloud security posture management) in the form of Azure policy is a form of automated compliance controls. Throw in the AWS/GCP connectors and Azure Arc for on prem and you add a lot to your zero trust solution.

[@biohackingalchemy7996]

the OSSTMM created this idea in the year 2000. Read the OSSTMM, ZTA idea is covered in Chapter 5 called Trust. Im baffled they are trying to pass this off as something new. We have been doing it for 22 years!

[@TheWle831]

amazing video

[@NTFAQGuy]

Thanks!

[@mohamedndiaye5362]

Nice video for preparing sc-100 exam

[@mwonsil]

Excellent. With so much BS around the term, this was really well done.

[@ER-zj3jv]

sweet play button

[@OmarPerez-ml8dg]

Hi John i would like to see all your videos but i would like you to recommend me the order of all of your videos. and also share them.

[@NTFAQGuy]

learn.onboardtoazure.com :)

[@xelerated]

The OSSTMM said Trust is a vulnerability WAY before John K. "invented" it. not to mention Stephen Marsh actually invented Zero Trust in 1994. Tired of the facts getting mixed.

[@HolouisePetrucci]

Thank you our saviour buff Microsoft Jesus

[@NTFAQGuy]

Lol

[@kennethdunn7448]

🤔-🤖-👾-🎤-🥁-🎤-✌🏿

[@shyamjain4184]

Thanks John - another great video.

[@NTFAQGuy]

Glad you enjoyed it