NIST SP 800-207 - Zero Trust Architechture/Zero Trust View of a Network/8 of 29
2.2.1Authenticating all connections and encrypting all traffic
Control family: Zero Trust View of a Network
Control description
The entire enterprise private network is not considered an implicit trust zone. Assets should always act as if an attacker is present on the enterprise network, and communication should be done in the most secure manner available. This entails actions such as authenticating all connections and encrypting all traffic.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.