# Note #4: Zero Trust Pilars

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1737751608513/57148a3d-c571-420a-b02f-263a3a2c1ba8.png?auto=compress,format&format=webp&q=75 align="left")

1. **Identity**
    
    * Users and workloads
        
    * Authentication methods
        
    * Least privileged access
        
2. **Endpoints**
    
    * List devices like IOT, cellphones and BYOD (Bring Your Own Device)
        
3. **Applications**
    
    * Shadow IT (Check if users are using forbidden apps)
        
    * App permissions
        
    * User actions (Monitor user actions)
        
4. **Network**
    
    * Traffic segmentation
        
    * Secure protocols
        
    * Inspection (Layer 3 to layer 7)
        
    * Monitoring
        
5. **Infrastructure**
    
    * Servers(e.g. VMs)
        
    * Containers
        
    * PaaS (e.g., App Services, SQL Databases)
        
    * Serverless (Azure Functions, Logic Apps)
        
6. **Data**(Most important assets\*\*)\*\*
    
    * First, discover and locate the data
        
    * Classify data
        
    * Data access control
        
    * DLP (Data Loss Prevention)
        

for more: [**https://learn.microsoft.com/en-us/security/zero-trust/deploy/overview**](https://learn.microsoft.com/en-us/security/zero-trust/deploy/overview)