Zero Trust Rapid Modernization Plan

As an alternative to deployment guidance that provides detailed configuration steps for each of the technology pillars being protected by Zero Trust principles, Rapid Modernization Plan (RaMP) guidance is based on initiatives and gives you a set of deployment paths to more quickly implement key layers of protection.

RaMP guidance takes a project management and checklist approach:

• By providing a suggested mapping of key stakeholders, implementers, and their accountabilities, you can more quickly organize an internal project and define the tasks and owners to drive them to conclusion.
• By providing a checklist of deployment objectives and implementation steps, you can see the bigger picture of infrastructure requirements and track your progress.

RaMP initiatives for Zero Trust

To rapidly adopt Zero Trust in your organization, RaMP offers technical deployment guidance organized in these initiatives.

Initiative	Steps
Top priority	Critical security modernization initiatives:
User access and productivity	Explicitly validate trust for all access requests Identities Endpoints (devices) Apps Network
Data, compliance, and governance	Ransomware recovery readiness Data
Modernize security operations	Streamline response Unify visibility Reduce manual effort
As needed	Additional initiatives based on Operational Technology (OT) or IoT usage, on-premises and cloud adoption, and security for in-house app development:
OT and Industrial IoT	Discover Protect Monitor
Datacenter & DevOps Security	Security Hygiene Reduce Legacy Risk DevOps Integration Microsegmentation

Here is the overall architecture for Zero Trust.

The RaMP initiatives for Zero Trust address all of the elements of this architecture. As you step through the initiatives, we'll show which parts are being covered.

Next step

Begin your Zero Trust RaMP deployment journey with User access and productivity.

Additional Zero Trust documentation

Use additional Zero Trust content based on a documentation set or the roles in your organization.

Documentation set

Follow this table for the best Zero Trust documentation sets for your needs.

Documentation set	Helps you...	Roles
Adoption framework for phase and step guidance for key business solutions and outcomes	Apply Zero Trust protections from the C-suite to the IT implementation.	Security architects, IT teams, and project managers
Concepts and deployment objectives for general deployment guidance for technology areas	Apply Zero Trust protections aligned with technology areas.	IT teams and security staff
Zero Trust for small businesses	Apply Zero Trust principles to small business customers.	Customers and partners working with Microsoft 365 for business
Zero Trust deployment plan with Microsoft 365 for stepped and detailed design and deployment guidance	Apply Zero Trust protections to your Microsoft 365 tenant.	IT teams and security staff
Zero Trust for Microsoft Copilots for stepped and detailed design and deployment guidance	Apply Zero Trust protections to Microsoft Copilots.	IT teams and security staff
Zero Trust for Azure services for stepped and detailed design and deployment guidance	Apply Zero Trust protections to Azure workloads and services.	IT teams and security staff
Partner integration with Zero Trust for design guidance for technology areas and specializations	Apply Zero Trust protections to partner Microsoft cloud solutions.	Partner developers, IT teams, and security staff
Develop using Zero Trust principles for application development design guidance and best practices	Apply Zero Trust protections to your application.	Application developers

Your role

Follow this table for the best documentation sets for your role in your organization.

Role	Documentation set	Helps you...
Security architect IT project manager IT implementer	Adoption framework for phase and step guidance for key business solutions and outcomes	Apply Zero Trust protections from the C-suite to the IT implementation.
Member of an IT or security team	Concepts and deployment objectives for general deployment guidance for technology areas	Apply Zero Trust protections aligned with technology areas.
Customer or partner for Microsoft 365 for business	Zero Trust for small businesses	Apply Zero Trust principles to small business customers.
Member of an IT or security team for Microsoft 365	Zero Trust deployment plan with Microsoft 365 for stepped and detailed design and deployment guidance for Microsoft 365	Apply Zero Trust protections to your Microsoft 365 tenant.
Member of an IT or security team for Microsoft Copilots	Zero Trust for Microsoft Copilots for stepped and detailed design and deployment guidance	Apply Zero Trust protections to Microsoft Copilots.
Member of an IT or security team for Azure services	Zero Trust for Azure services for stepped and detailed design and deployment guidance	Apply Zero Trust protections to Azure workloads and services.
Partner developer or member of an IT or security team	Partner integration with Zero Trust for design guidance for technology areas and specializations	Apply Zero Trust protections to partner Microsoft cloud solutions.
Application developer	Develop using Zero Trust principles for application development design guidance and best practices	Apply Zero Trust protections to your application.