Version 3.1

Author: tylchan

src/react/README.md

@@ -6,21 +6,20 @@ Follow the instructions below to run your own instance of the Zero Trust public
 
 # Installation
 
-There are two options here. You can use GitHub codespaces (simple) where everything runs on the browser or you can do local dev where you install node and run everything on your laptop locally.
+There are two options here. You can use GitHub Codespaces (simple) where everything runs in the browser or you can do local dev where you install Node.js and run everything on your laptop locally.
 
 ## Codespaces (recommended for language translations)
 
-- In GitHub select **Code** > **Codespaces** > Create a new one for the first time (or connect if you already created by clicking on the name).
+- In GitHub select **Code** > **Codespaces** > Create a new one for the first time (or connect to an existing codespace by clicking on its name).
 
 ## Local Dev
 - Install [node.js](https://nodejs.org/en/download/)
 
 # Running ZT website
 
 - In VS Code (Codespaces or local dev) open a new Terminal (Menu > Terminal > New Terminal)
-- Type this command and hit enter → `cd ./src/react'
+- Type this command and hit enter → `cd ./src/react`
 - ONE TIME SETUP: Run this command to install all dependencies → `npm install`
 - Type this command and hit enter to launch site in English → `npm run start`
    - If you want to run the site in a different language (e.g. Japanese) → `npm run start -- --locale ja`
    - Use the right code for the language that you are testing
-

src/react/docs/intro.md

@@ -7,22 +7,26 @@ sidebar_position: 1
 Implementing a Zero Trust strategy can pose many challenges, such as knowing where to start, what order to implement things in, and how to accurately measure success towards achieving a secure Zero Trust posture. The Microsoft Zero Trust Workshop aims to tackle these problems and simplify the Zero Trust journey via two tools: the Zero Trust Workshop and the Zero Trust Assessment.
 
 ## Microsoft Zero Trust Workshop
-The Zero Trust Workshop Tool is Single-Page Application (SPA) that enables customers to document their current Zero Trust progress and develop an actionable roadmap for moving forward. The Zero Trust Workshop Tool currently supports the following pillars:
+The Zero Trust Workshop Tool is a Single-Page Application (SPA) that enables customers to document their current Zero Trust progress and develop an actionable roadmap for moving forward. The Zero Trust Workshop Tool currently supports the following pillars:
 - Identity
 - Devices
 - Data
 - Network
 - Infrastructure
 - Security Operations
-- Artificial Intelligence (New)
+- Artificial Intelligence
+- DevSecOps (New)
 
 For more information, check out the [Introduction to the Zero Trust Workshop](./videos/IntroductionToZT.md) page.
 
 ## Microsoft Zero Trust Assessment
-The Zero Trust Assessment is a PowerShell module that can be run on your environment to confirm a strong security baseline. This is an automated tool, where running the PowerShell module on your tenant will provide you with a set of recommendations that are auto generated based on your tenant's current configuration and activity data. The Zero Trust Assessment currently supports the following pillars:
+The Zero Trust Assessment is a PowerShell module that can be run on your environment to confirm a strong security baseline. Running the PowerShell module on your tenant automatically provides you with a set of auto-generated recommendations based on your tenant's current configuration and activity data. The Zero Trust Assessment currently supports the following pillars:
 - Identity
 - Devices
-- Data (New)
-- Network (New)
+- Data
+- Network
+- Infrastructure (New)
+- Security Operations (New)
+- Artificial Intelligence (New)
 
 For more information, check out the [Zero Trust Assessment Tool](https://learn.microsoft.com/en-us/security/zero-trust/assessment/get-started) page and the [Zero Trust Assessment Video](./videos/Assessment.md) page.

src/react/docs/videos/AIPillar.md

@@ -0,0 +1,7 @@
+---
+sidebar_position: 8
+---
+
+# AI Pillar
+
+Video covering how to deliver the AI portion of the Microsoft Zero Trust Strategy Workshop is coming soon.

src/react/docs/videos/Assessment.md

@@ -1,9 +1,9 @@
 ---
-sidebar_position: 8
+sidebar_position: 10
 ---
 
 # Zero Trust Assessment
 
-Learn how to run the Zero Trust Assessment Powershell module.
+Learn how to run the Zero Trust Assessment PowerShell module.
 
-<iframe width="560" height="315" src="https://www.youtube.com/embed/bB2Heu7CCFg" title="Microsoft Zero Trust Assessment" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>
+<iframe width="560" height="315" src="https://www.youtube.com/embed/bB2Heu7CCFg" title="Microsoft Zero Trust Assessment" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>

src/react/docs/videos/DevSecOpsPillar.md

@@ -0,0 +1,7 @@
+---
+sidebar_position: 9
+---
+
+# DevSecOps Pillar
+
+Video covering how to deliver the DevSecOps portion of the Microsoft Zero Trust Strategy Workshop is coming soon.

src/react/docs/videos/index.mdx

@@ -7,17 +7,21 @@ import DocCardList from '@theme/DocCardList';
 We have produced the following videos to help you run your own workshops:
 
 - [Introduction to the Zero Trust Workshop](./videos/IntroductionToZT)
-  
+
 - [Identity Pillar](./videos/IdentityPillar)
-  
+
 - [Devices Pillar](./videos/DevicesPillar)
-  
+
 - [Data Pillar](./videos/DataPillar)
 
 - [Network Pillar](./videos/NetworkPillar)
 
 - [Infrastructure Pillar](./videos/InfrastructurePillar)
 
 - [Security Operations Pillar](./videos/SecurityOperationsPillar)
-  
+
+- [Artificial Intelligence Pillar](./videos/AIPillar)
+
+- [ DevSecOps Pillar](./videos/DevSecOpsPillar)
+
 - [Zero Trust Assessment Overview](./videos/Assessment)

src/react/docs/workshop-guidance/data/RMT_020.md

@@ -6,12 +6,12 @@
 
 ## Overview
 
-Review the Role-Based Access control options available for administrators of Data Loss Prevention, Microsoft Information Protection and Insider Risk Management, and make the configurations needed for your organization's needed. 
+Review the Role-Based Access control options available for administrators of Data Loss Prevention, Microsoft Information Protection and Insider Risk Management, and make the configurations necessary to meet your organization's needs.
 
 In particular, consider restricting the use of the following roles and privileges which offer company-wide access to content:
 * Content Explorer content viewer role group. This role group allows an administrator to view any content in the tenant, regardless of the content's access restrictions. This role is by default only assigned to global administrators and compliance administrators, and should be granted only to personnel involved in data investigations. 
 * Content Explorer list viewer role group. This role group allows an administrator to enumerate any content in the tenant, and view matches to sensitive information in it, regardless of the content's access restrictions. This role is by default only assigned to global administrators and compliance administrators, and should be granted only to personnel involved in data investigations and alert processing.
-* AIP SuperUser. This role (assigned via the Add-AIPServiceSuperUser and Set-AIPServiceSuperUserGroup PowerShell commandlets) allows a user to decrypt any MIP-encrypted content protected in the tenant (other than content protected with Dual Key Encryption) regardless of the policy on the label assigned to the content.
+* AIP SuperUser. This role (assigned via the Add-AIPServiceSuperUser and Set-AIPServiceSuperUserGroup PowerShell cmdlets) allows a user to decrypt any MIP-encrypted content protected in the tenant (other than content protected with Dual Key Encryption) regardless of the policy on the label assigned to the content.
 
 
 

src/react/docs/workshop-guidance/delivery-guide.md

@@ -13,7 +13,8 @@ Workshops are available for the following pillars:
 - Network
 - Infrastructure
 - Security Operations
-- Artificial Intelligence (New)
+- Artificial Intelligence
+- DevSecOps (New)
 
 Customers can choose to schedule all the workshops or just a subset of them depending on their priorities and resource availability. While the workshops are modular, customers are encouraged to start with Identity first, then Devices, followed by Data, Network, Infrastructure, Security Operations, and AI.
 
@@ -48,9 +49,9 @@ Recommendations for the customer stakeholders that should attend each of the pil
 |---|---|---|
 | • Identity and Access Management (IAM) team <br/> • Network Operations team <br/>  • Security Operations team <br/> • Devices/Endpoint team <br/> • Applications / workloads stakeholders <br/> • CISO (if possible) <br/> • IT Director (if possible)| • Infrastructure Security team <br/> • Security Operations team <br/> • Endpoint Security team <br/> • Compliance and Policy team <br/> • Application Development team <br/> • Network Administration team <br/> • CISO (if possible) <br/> • IT Director (if possible)| • Security Team Decision Makers (IT Manager, SecOps Manager, etc.) <br/> • Security Team Specialists (Security Architect, Security Analyst, IR Manager, Security Engineer IT Admin, etc.) <br/> • CISO (if possible) <br/> • IT Director (if possible)|
 
-|AI|
-|---|
-| • Identity Security Architect (Identity Architect, IAM Architect) <br/> • Security Administrator (Security Admin, IT Security Admin) <br/> • Data Governance / Compliance Officer (Compliance Officer, DGO) <br/> • SOC Lead / SecOps Manager (SOC Manager, SecOps Lead) <br/> • AI Platform / Development Lead (AI Platform Engineer, Agent Development Lead, ML Platform Lead) <br/> • CISO / Security Leadership (if possible)|
+|AI|DevSecOps|
+|---|---|
+| • Identity Security Architect (Identity Architect, IAM Architect) <br/> • Security Administrator (Security Admin, IT Security Admin) <br/> • Data Governance / Compliance Officer (Compliance Officer, DGO) <br/> • SOC Lead / SecOps Manager (SOC Manager, SecOps Lead) <br/> • AI Platform / Development Lead (AI Platform Engineer, Agent Development Lead, ML Platform Lead) <br/> • CISO / Security Leadership (if possible)| • DevSecOps/Platform Engineering team <br/> • Application or Product Security team <br/> • GitHub/Azure DevOps Administrators <br/> • CI/CD and Release Engineering team <br/> • Software Development Leadership <br/> • Cloud and Infrastructure Security team <br/> • IAM team <br/> • CISO / Security Leadership (if possible)|
 
 ## Engagement Model
 
@@ -65,12 +66,12 @@ Recommendations for the customer stakeholders that should attend each of the pil
 Below are the estimated delivery times for each section of the pillar workshops:
 |Identity|Devices|Data|
 |---|---|---|
-| • Application Access, AuthN, and AuthZ Controls: 1.5 hours <br/> • Users and Groups: 1 hour <br/> • Identity Governance: 1.5 hours <br/> • Operations: 1 hour <hr /> **• Total: 5 hours** | • Windows: 1-4 hours <br/> • Mobile Application Management (MAM): 15-45 minutes <br/> • iOS and Android MDM: 0.5-1 hour <br/> • Operations: 15 minutes <hr /> **• Total: 3-6 hours** | • Know and Protect You Data: 2 hours <br/> • Manage Data Access: 1 hour <br/> • Protect Critical Data Assets: 1 hour <hr /> **• Total: 4 hours**|
+| • Application Access, AuthN, and AuthZ Controls: 1.5 hours <br/> • Users and Groups: 1 hour <br/> • Identity Governance: 1.5 hours <br/> • Operations: 1 hour <hr /> **• Total: 5 hours** | • Windows: 1-4 hours <br/> • Mobile Application Management (MAM): 15-45 minutes <br/> • iOS and Android MDM: 0.5-1 hour <br/> • Operations: 15 minutes <hr /> **• Total: 3-6 hours** | • Know and Protect Your Data: 2 hours <br/> • Manage Data Access: 1 hour <br/> • Protect Critical Data Assets: 1 hour <hr /> **• Total: 4 hours**|
 
 |Network|Infrastructure|Security Operations|
 |---|---|---|
 | • Modernize VPN and protect legacy Apps: 1 hour <br/> • Secure Access to all internet resources: 1 hour <br/> • Network and Application Protection & Control: 2 hours <hr /> **• Total: 4 hours** | • Governance & Compliance: 0.5-1 hour <br/> • Servers: 1 hour <br/> • Containers: 1 hour <br/> • Storage: 0.5-1 hour <br/> • Databases: 0.5-1 hour <br/> • APIs: 0.5 hour <br/> • Infrastructure Services: 0.5 hour <hr /> **• Total: 4-6 hours** | • MDI: 0.5 hour <br/> • MDO: 0.5 hour <br/> • MDE: 1 hour <br/> • MDA: 0.5 hour <br/> • Sentinel & XDR: 1 hour <hr /> **• Total: 3.5 hours**|
 
-|AI|
-|---|
-| • Map and Assess AI Risk: 1 hour <br/> • Register all agents: 1 hour <br/> • Secure AI Authentication and Access: 0.5 hour <br/> • Secure AI Network Access: 1 hour <br/> • Secure AI Data Access: 1.5 hours <br/> • Build Agents Securely: 0.5 hour <br/> • Security Detection and Response for AI: 0.5 hour <hr /> **• Total: 6 hours** |
+|AI|DevSecOps|
+|---|---|
+| • Map and Assess AI Risk: 1 hour <br/> • Register all agents: 1 hour <br/> • Secure AI Authentication and Access: 0.5 hour <br/> • Secure AI Network Access: 1 hour <br/> • Secure AI Data Access: 1.5 hours <br/> • Build Agents Securely: 0.5 hour <br/> • Security Detection and Response for AI: 0.5 hour <hr /> **• Total: 6 hours** | • DevOps Identity and Access: 0.5 hour <br/> • Source Code Security: 1 hour <br/> • Supply Chain and Dependency Security: 1 hour <br/> • CI/CD Pipeline Security: 1 hour <br/> • Infrastructure as Code and Container Security: 1 hour <br/> • DevOps Posture and Governance: 1.5 hours <hr /> **• Total: 6 hours**|

src/react/docs/workshop-guidance/devices/RMD_040.mdx

@@ -9,7 +9,7 @@ Users who aren't using an approved keyboard receive a prompt to download and ins
 This option is available when you select Require for the previous option. Choose Select to manage the list of keyboards and input methods that can be used with apps protected by this policy. You can add additional keyboards to the list, and remove any of the default options. You must have at least one approved keyboard to save the setting. Over time, Microsoft may add additional keyboards to the list for new App Protection Policies, which will require administrators to review and update existing policies as needed.
 To add a keyboard, specify:
 
-**Name:** A friendly name that that identifies the keyboard, and is visible to the user.
+**Name:** A friendly name that identifies the keyboard, and is visible to the user.
 
 **Package ID:** The Package ID of the app in the Google Play store. For example, if the URL for the app in the Play store is https://play.google.com/store/details?id=com.contoskeyboard.android.prod, then the Package ID is com.contosokeyboard.android.prod. This package ID is presented to the user as a simple link to download the keyboard from Google Play.
 
@@ -22,4 +22,4 @@ To add a keyboard, specify:
 
 ## Reference
 
-* https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-android#data-transfer 
+* https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy-settings-android#data-transfer

src/react/docs/workshop-guidance/devices/RMD_169.md

@@ -2,7 +2,7 @@
 
 ## Overview
 
-**PowerShell scripts** allows administrators to upload and assing scripts to devices or user groups. Scripts can be used to configure devices, ensuring devices remain compliant with security standards.
+**PowerShell scripts** allow administrators to upload and assign scripts to devices or user groups. Scripts can be used to configure devices, ensuring devices remain compliant with security standards.
 
 ## Reference