NIST SP 800-207 - Zero Trust Architechture/Zero Trust View of a Network/9 of 29
2.2.2Allow enterprise subjects to use non-enterprise-owned device
Control family: Zero Trust View of a Network
Control description
Devices on the network may not be owned or configurable by the enterprise. Visitors and/or contracted services may include non-enterprise-owned assets that need network access to perform their role. This includes bring-your-own-device (BYOD) policies that allow enterprise subjects to use non-enterprise-owned devices to access enterprise resources.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.