[{"data":1,"prerenderedAt":479},["ShallowReactive",2],{"blog-\u002Fblog\u002Fapplication-complete-modele-zero-trust-microsoft365":3,"blog-\u002Fblog\u002Fapplication-complete-modele-zero-trust-microsoft365-surround":353,"blog-\u002Fblog\u002Fapplication-complete-modele-zero-trust-microsoft365-certifications":414},{"id":4,"title":5,"body":6,"categories":336,"cover":338,"cover_contain":339,"credly_badge_id":340,"date":341,"description":342,"extension":343,"meta":344,"navigation":345,"path":346,"related_certifications":347,"seo":349,"slug":350,"stem":351,"__hash__":352},"blog\u002Fblog\u002Fapplication-complete-modele-zero-trust-microsoft365.md","Application complète du modèle Zero Trust dans Microsoft 365",{"type":7,"value":8,"toc":324},"minimark",[9,14,18,34,47,53,56,63,98,101,107,114,129,140,169,175,184,190,224,229,238,246,252,256,263,269,273,279,284,287,293,300,303,320],[10,11,13],"h2",{"id":12},"cas-dusage-concret","Cas d'usage concret",[15,16,17],"p",{},"Votre direction vous demande de sécuriser Microsoft 365 selon les standards Zero Trust : je partage mon retour d'expérience complet, des recommandations à la mise en œuvre opérationnelle.",[15,19,20,21,25,26,33],{},"Face à l'évolution constante des cybermenaces, l'approche Zero Trust s'impose comme un pilier fondamental de la cybersécurité moderne. Le principe est simple mais radical : ",[22,23,24],"strong",{},"ne jamais faire confiance, toujours vérifier, supposer une violation",". Microsoft 365, avec sa suite d'outils intégrés, permet une mise en œuvre efficace et progressive de ce modèle. Un questionnaire de positionnement est disponible pour vous aider, voici le ",[27,28,32],"a",{"href":29,"rel":30},"https:\u002F\u002Fwww.microsoft.com\u002Ffr-fr\u002Fdownload\u002Fdetails.aspx?id=103935",[31],"nofollow","lien",".",[15,35,36,37,40,41,46],{},"J'ai initié cette démarche avec Microsoft Defender dans le module de gestion de l'exposition aux risques. L'outil Exposure Insights propose une initiative spécifique : ",[22,38,39],{},"Zero Trust (Foundational)"," ",[27,42,45],{"href":43,"rel":44},"https:\u002F\u002Fwww.kassianoff.fr\u002Fblog\u002Fobjectif-100-securite-exposition-microsoft365",[31],"qui m'indique actuellement un score de 82%",", bien que dans les faits, nous ayons atteint les 100%. Ce score reflète une mise en œuvre basique, mais encore perfectible, notamment sur certains points critiques liés aux identités privilégiées et à la configuration des politiques d’accès conditionnel.",[10,48,50],{"id":49},"au-delà-des-fondamentaux",[22,51,52],{},"Au-delà des fondamentaux",[15,54,55],{},"Une implémentation complète du modèle Zero Trust nécessite d'aller bien au-delà de ces critères de base. Microsoft fournit des ressources détaillées pour une application exhaustive du modèle.",[57,58,60],"h3",{"id":59},"ressources-officielles",[22,61,62],{},"Ressources officielles",[64,65,66,78,88],"ul",{},[67,68,69,72,73],"li",{},[22,70,71],{},"Guide d'implémentation Zero Trust pour Microsoft 365"," : ",[27,74,77],{"href":75,"rel":76},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsecurity\u002Fzero-trust\u002Fmicrosoft-365-zero-trust",[31],"Documentation technique complète",[67,79,80,72,83],{},[22,81,82],{},"Présentation business du Zero Trust Microsoft",[27,84,87],{"href":85,"rel":86},"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fzero-trust",[31],"Vue d'ensemble stratégique",[67,89,90,72,93],{},[22,91,92],{},"Outil d'évaluation Zero Trust",[27,94,97],{"href":95,"rel":96},"https:\u002F\u002Fmicrosoft.github.io\u002Fzerotrustassessment\u002F",[31],"Assessment interactif",[15,99,100],{},"L'objectif est bien d'implémenter les composants avancés du modèle Zero Trust pour atteindre une sécurité optimale dans notre environnement Microsoft 365.",[10,102,104],{"id":103},"démarrage-du-la-phase-dévaluation-microsoft-zero-trust-workshop",[22,105,106],{},"Démarrage du la phase d'évaluation - Microsoft Zero Trust Workshop",[15,108,109,110],{},"Les explications du guide sont très détaillées : ",[27,111,112],{"href":112,"rel":113},"https:\u002F\u002Fmicrosoft.github.io\u002Fzerotrustassessment\u002Fguide",[31],[15,115,116,40,119,126],{},[22,117,118],{},"Étant sous MacOS (avec",[27,120,123],{"href":121,"rel":122},"https:\u002F\u002Fbrew.sh\u002F",[31],[22,124,125],{},"Homebrew",[22,127,128],{},"), voici les étapes d'installation :",[130,131,132],"ol",{},[67,133,134,135,139],{},"Installer PowerShell (",[27,136,32],{"href":137,"rel":138},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fpowershell\u002Fscripting\u002Finstall\u002Finstalling-powershell-on-macos?view=powershell-7.5",[31],") :",[141,142,147],"pre",{"className":143,"code":144,"language":145,"meta":146,"style":146},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","brew install --cask powershell\n","bash","",[148,149,150],"code",{"__ignoreMap":146},[151,152,155,159,163,166],"span",{"class":153,"line":154},"line",1,[151,156,158],{"class":157},"sBMFI","brew",[151,160,162],{"class":161},"sfazB"," install",[151,164,165],{"class":161}," --cask",[151,167,168],{"class":161}," powershell\n",[130,170,172],{"start":171},2,[67,173,174],{},"Exécuter PowerShell :",[141,176,178],{"className":143,"code":177,"language":145,"meta":146,"style":146},"pwsh\n",[148,179,180],{"__ignoreMap":146},[151,181,182],{"class":153,"line":154},[151,183,177],{"class":157},[130,185,187],{"start":186},3,[67,188,189],{},"Installer le module \"ZeroTrystAssessment\" ;",[141,191,195],{"className":192,"code":193,"language":194,"meta":146,"style":146},"language-powershell shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","Install-Module ZeroTrustAssessment\nUntrusted repository\nYou are installing the modules from an untrusted repository. If you trust this repository, change its InstallationPolicy \nvalue by running the Set-PSRepository cmdlet. Are you sure you want to install the modules from 'PSGallery'?\n[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is \"N\"): Y\n","powershell",[148,196,197,202,207,212,218],{"__ignoreMap":146},[151,198,199],{"class":153,"line":154},[151,200,201],{},"Install-Module ZeroTrustAssessment\n",[151,203,204],{"class":153,"line":171},[151,205,206],{},"Untrusted repository\n",[151,208,209],{"class":153,"line":186},[151,210,211],{},"You are installing the modules from an untrusted repository. If you trust this repository, change its InstallationPolicy \n",[151,213,215],{"class":153,"line":214},4,[151,216,217],{},"value by running the Set-PSRepository cmdlet. Are you sure you want to install the modules from 'PSGallery'?\n",[151,219,221],{"class":153,"line":220},5,[151,222,223],{},"[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is \"N\"): Y\n",[130,225,226],{"start":214},[67,227,228],{},"Exécuter la commande pour la phase d'évaluation :",[141,230,232],{"className":192,"code":231,"language":194,"meta":146,"style":146},"Invoke-ZTAssessment\n",[148,233,234],{"__ignoreMap":146},[151,235,236],{"class":153,"line":154},[151,237,231],{},[130,239,240,243],{"start":220},[67,241,242],{},"Authentifier vous avec un compte admin général et accorder les permissions à l'outil.",[67,244,245],{},"Patientez quelques secondes avant de découvrir votre résultat d'évaluation : \"ZeroTrustAssessment-2025-08-10T125143.xslsx\".",[10,247,249],{"id":248},"résultat-de-lévaluation-du-modèle-zero-trust-dans-microsoft-365",[22,250,251],{},"Résultat de l'évaluation du modèle Zero Trust dans Microsoft 365",[57,253,255],{"id":254},"identité","Identité",[15,257,258,259,262],{},"Le score est de ",[22,260,261],{},"80%",", il nous manque la configuration JIT, l'usage de l'authentification forte pour tous les utilisateurs (tous n'ont pas la licence P2) et une règle d'accès conditionnel d'enregistrement des informations de sécurité. Nous allons fixer les anomalies P1 rapidement.",[15,264,265],{},[266,267],"img",{"alt":146,"src":268},"\u002Fimages\u002Fblog\u002Fapplication-complete-modele-zero-trust-microsoft365\u002F3f6d8aa9e4.png",[57,270,272],{"id":271},"appareil","Appareil",[15,274,258,275,278],{},[22,276,277],{},"91%",", il nous manque l'implémentation dans notre serveur AD, car Defender for Identity détecte le serveur mais celui-ci n'utilise pas Microsoft Defender (mais une autre solution tierce). Concernant Windows Bitlocker, nous ne comprenons pas, la stratégie est en place mais considérée comme non démarrée. Nous allons investiguer et contacter Microsoft si nécessaire.",[15,280,281],{},[266,282],{"alt":146,"src":283},"\u002Fimages\u002Fblog\u002Fapplication-complete-modele-zero-trust-microsoft365\u002F769ebad4e7.png",[15,285,286],{},"Vous retrouverez l'ensemble de votre configuration d'appareil sur la première feuille, elle affiche vos configurations Intune (non visible ici, pour des questions de confidentialité).",[10,288,290],{"id":289},"conclusion",[22,291,292],{},"Conclusion",[15,294,295,296,299],{},"La mise en œuvre du modèle Zero Trust avec Microsoft 365 est un ",[22,297,298],{},"projet stratégique"," qui nécessite une approche progressive, mais rigoureuse. Nos résultats montrent que nous avons franchit des étapes importantes, tout en identifiant des axes d’amélioration prioritaires.",[15,301,302],{},"Dès lors, la template \"ZeroTrustTemplate.xlsx\" (différent de l'assessment) est fortement appréciée. En tant qu'organisation nous allons continuer à :",[64,304,305,308,311,314,317],{},[67,306,307],{},"Évaluer régulièrement notre niveau de maturité Zero Trust.",[67,309,310],{},"Prioriser les identités et les accès conditionnels.",[67,312,313],{},"Automatiser l’enrôlement et la conformité des appareils.",[67,315,316],{},"Accompagner les utilisateurs aux bonnes pratiques de sécurité.",[67,318,319],{},"Compléter notre analyse des risques face aux menaces avancées",[321,322,323],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":146,"searchDepth":171,"depth":171,"links":325},[326,327,330,331,335],{"id":12,"depth":171,"text":13},{"id":49,"depth":171,"text":52,"children":328},[329],{"id":59,"depth":186,"text":62},{"id":103,"depth":171,"text":106},{"id":248,"depth":171,"text":251,"children":332},[333,334],{"id":254,"depth":186,"text":255},{"id":271,"depth":186,"text":272},{"id":289,"depth":171,"text":292},[337],"Sécurité","\u002Fimages\u002Fblog\u002Fapplication-complete-modele-zero-trust-microsoft365\u002Fcea858f515.png",false,null,"2025-08-10","Retour d'expérience sur la mise en place du modèle Zero Trust dans Microsoft 365 : évaluer sa posture, respecter les bonnes pratiques et gérer les risques.","md",{},true,"\u002Fblog\u002Fapplication-complete-modele-zero-trust-microsoft365",[348],"certificat-microsoft-security-compliance-and-identity-fundamentals",{"title":5,"description":342},"application-complete-modele-zero-trust-microsoft365","blog\u002Fapplication-complete-modele-zero-trust-microsoft365","GPuqYJFYAa2B9YqU0YOOgULEBotVd9GL8Omfhby2D-s",[354,363,371,378,385,392,399,406],{"title":355,"path":356,"stem":357,"date":358,"cover":359,"categories":360,"children":-1},"GitHub Copilot","\u002Fblog\u002Fcertificat-microsoft-github-copilot","blog\u002Fcertificat-microsoft-github-copilot","2025-08-28","\u002Fimages\u002Fblog\u002Fcertificat-microsoft-github-copilot\u002Fcf8333d63e.png",[361,362],"Certifications","Code",{"title":364,"path":365,"stem":366,"date":367,"cover":368,"categories":369,"children":-1},"Reprenez le contrôle de vos annuaires Microsoft avec l'approche Infrastructure as Code","\u002Fblog\u002Freprenez-controle-annuaires-microsoft-infrastructure-as-code","blog\u002Freprenez-controle-annuaires-microsoft-infrastructure-as-code","2025-08-25","\u002Fimages\u002Fblog\u002Freprenez-controle-annuaires-microsoft-infrastructure-as-code\u002F96c873f6c1.png",[370,337],"Microsoft",{"title":372,"path":373,"stem":374,"date":375,"cover":376,"categories":377,"children":-1},"Objectif 100%, sécurité Veeam Backup & Replication v12","\u002Fblog\u002Fobjectif-100-securite-veeam-backup-replication","blog\u002Fobjectif-100-securite-veeam-backup-replication","2025-08-18","\u002Fimages\u002Fblog\u002Fobjectif-100-securite-veeam-backup-replication\u002Ffd1cbd3a9e.png",[337],{"title":379,"path":380,"stem":381,"date":382,"cover":383,"categories":384,"children":-1},"Durcissement optimal de la sécurité Active Directory","\u002Fblog\u002Fdurcissement-optimal-securite-active-directory","blog\u002Fdurcissement-optimal-securite-active-directory","2025-08-13","\u002Fimages\u002Fblog\u002Fdurcissement-optimal-securite-active-directory\u002F9dc4acd9d6.png",[337],{"title":386,"path":387,"stem":388,"date":389,"cover":390,"categories":391,"children":-1},"Objectif 100%, gestion de l'exposition Microsoft 365","\u002Fblog\u002Fobjectif-100-securite-exposition-microsoft365","blog\u002Fobjectif-100-securite-exposition-microsoft365","2025-08-09","\u002Fimages\u002Fblog\u002Fobjectif-100-securite-exposition-microsoft365\u002Fe8a06eec09.png",[337],{"title":393,"path":394,"stem":395,"date":396,"cover":397,"categories":398,"children":-1},"Objectif 100 %, sécurité Microsoft 365 au maximum","\u002Fblog\u002Fobjectif-100-securite-microsoft365","blog\u002Fobjectif-100-securite-microsoft365","2025-08-01","\u002Fimages\u002Fblog\u002Fobjectif-100-securite-microsoft365\u002Fac33e55464.jpg",[337],{"title":400,"path":401,"stem":402,"date":403,"cover":404,"categories":405,"children":-1},"Garantir la sécurité de vos secrets dans votre gestionnaire de mots de passe avec Keeper Security","\u002Fblog\u002Fgarantir-securite-secrets-mots-de-passe-keeper-security","blog\u002Fgarantir-securite-secrets-mots-de-passe-keeper-security","2025-07-25","\u002Fimages\u002Fblog\u002Fgarantir-securite-secrets-mots-de-passe-keeper-security\u002F15b70398a5.png",[337],{"title":407,"path":408,"stem":409,"date":410,"cover":411,"categories":412,"children":-1},"Migration Postgresql avec Veeam Backup & Replication","\u002Fblog\u002Fmigration-postgresql-avec-veeam-backup-replication","blog\u002Fmigration-postgresql-avec-veeam-backup-replication","2025-04-17","\u002Fimages\u002Fblog\u002Fmigration-postgresql-avec-veeam-backup-replication\u002F175ec05d87.png",[413],"Linux",[415],{"id":416,"title":417,"body":418,"categories":469,"cover":470,"cover_contain":345,"credly_badge_id":471,"date":472,"description":473,"extension":343,"meta":474,"navigation":345,"path":475,"related_certifications":340,"seo":476,"slug":348,"stem":477,"__hash__":478},"blog\u002Fblog\u002Fcertificat-microsoft-security-compliance-and-identity-fundamentals.md","Microsoft : Security, Compliance, and Identity Fundamentals",{"type":7,"value":419,"toc":465},[420,422,425,432,454,460,462],[10,421,13],{"id":12},[15,423,424],{},"Pour conseiller mes clients sur la sécurité et la conformité Microsoft, j'ai passé cette certification Security, Compliance, and Identity Fundamentals.",[15,426,427,428,431],{},"Le parcours de formation \"Microsoft Security, Compliance, and Identity fundamentals\" est dédié aux professionnels IT en charge notamment des opérations de déploiement et de sécurisation des ressources dans le cloud.",[429,430],"br",{},"\nLe catalogue de cours aborde les modules suivants :",[64,433,434,439,444,449],{},[67,435,436],{},[22,437,438],{},"Décrire les concepts de sécurité, de conformité et d’identité",[67,440,441],{},[22,442,443],{},"Décrire les fonctionnalités de Microsoft Entra",[67,445,446],{},[22,447,448],{},"Décrire les fonctionnalités des solutions de sécurité Microsoft",[67,450,451],{},[22,452,453],{},"Décrire les fonctionnalités des solutions de conformité Microsoft",[15,455,456,457,459],{},"le temps à accorder à la formation est d'environ 3 jours.",[429,458],{},"\nIl faut ensuite prévoir environ 1h00 pour le passage de la certification : Microsoft Security, Compliance, and Identity fundamentals.",[10,461,292],{"id":289},[15,463,464],{},"Cette formation Microsoft couvre les concepts de sécurité, de conformité et de gestion des identités, ainsi que les principales solutions Microsoft associées (Entra, sécurité et conformité). Elle complète les fondamentaux Azure déjà acquis en apportant une vision plus large de la protection des environnements Microsoft. Une certification utile pour tout professionnel en charge de la sécurisation de ressources cloud.",{"title":146,"searchDepth":171,"depth":171,"links":466},[467,468],{"id":12,"depth":171,"text":13},{"id":289,"depth":171,"text":292},[361,370],"\u002Fimages\u002Fblog\u002Fcertificat-microsoft-security-compliance-and-identity-fundamentals\u002F70ef935f2a.png","82a09914-e95c-43b6-a371-f308b5ee8185","2022-10-17","Microsoft : Security, Compliance, and Identity Fundamentals : cursus suivi pour ma veille professionnelle en cybersécurité et informatique.",{},"\u002Fblog\u002Fcertificat-microsoft-security-compliance-and-identity-fundamentals",{"title":417,"description":473},"blog\u002Fcertificat-microsoft-security-compliance-and-identity-fundamentals","CikZ4Vmz7Il6I1G5G9upx_Ve7hSIhyq4Fl2su4RG8I4",1786644866417]