What were the critical first steps in your Zero Trust implementation?

[Natalie.P]

My organization is beginning a multi-year migration to a Zero Trust Architecture, and as a network security lead, I'm tasked with developing the initial implementation roadmap. The sheer scope is daunting, from identity-aware proxies to micro-segmentation. For teams that have undertaken this transition, what were the most critical first phases or foundational components you focused on, and what were the biggest unforeseen challenges in user experience or legacy system integration that slowed your progress?

[VictoriaS]

You're not alone. My take after leading a similar shift: start with solid identity and device posture, then build from there. Do a small pilot—one business unit, a couple of apps—and measure friction and access outcomes before expanding.

[Jerry9]

Agree with focusing on discovery and governance first. Key phases I've used: 1) inventory people, devices, apps, data flows; 2) define who can access what with least privilege; 3) deploy identity-aware proxies and device posture checks; 4) begin micro-segmentation at the app level; 5) roll out telemetry and automated policy enforcement. Expect a slow burn but you’ll learn where it hurts most.

[Jack.T]

I hit a big wall with legacy apps that assume a fixed network perimeter. We solved it with an adapter layer—a gateway that enforces policies without rearchitecting every app. Still, it added latency and integration work; plan for performance testing and hybrid approaches.

[SofiaMM]

I'd push back on trying to 'do zero trust everywhere' on day one. A practical approach is 'zero trust for high-risk assets' and web-facing apps first, then expand to internal services as you normalize identity, enrollment, and admin tooling. Keeps complexity manageable and budget realistic.

[John57]

Quick check-in: what environment are you targeting—on-prem, cloud, or hybrid? Which IAM stack and MDM are in play? Do you have a data classification program? I can tailor a rough 12-month phased roadmap if you share a bit about your current setup.