What does Zero Trust include in a Microsoft 365 environment?

In Microsoft’s model, Zero Trust spans six pillars: identities, devices, applications, data, infrastructure, and networks. In practice, that means controls such as Entra ID, Conditional Access, Multifactor Authentication, Intune device compliance, Privileged Identity Management, Microsoft Purview, data loss prevention, sensitivity labels, and broader monitoring and response capabilities. The key point is that Zero Trust is not only an identity project or only a device project; it is an operating model that connects access, protection, and visibility across the full Microsoft 365 environment.