@D.Maas,
Honestly in my mind your company is looking at doing this improperly. While it might sound like a good idea in theory to have everything in place prior to migrating users to Prisma, you're introducing too much change at the same time. This not only creates a lot of various troubleshooting issues, but more importantly it damages the end-user reputation of the migration.
I would recommend that you migrate to Prisma Access and view that as one "project" in itself. Then you would have a zero-trust "strategy" that you would need to actually design.
Zero-Trust as @Brandon_Wertz mentioned isn't anything more than a strategy or policy; you won't really find any detailed information that someone can share because once you get to that level of planning information it becomes extremely centered to a particular organization. What I would recommend doing when looking at zero-trust is having an actual working group that contains individuals from each business unit that are well informed on everything that the business unit does. You need people that actually understand each of the individual business practices and what each role actually needs, otherwise you'll still be making things too generalized.
Then you go business process by business process and actually include all of the required changes to actually say that you have a zero-trust network. Keep in mind that this isn't solely about network access here, but also permission to things like file directories, applications, individual application access, the whole kit and caboodle. This will almost certainly break things as it is built out since most businesses will have exceptions for certain people performing work outside of their role that even people working with them aren't necessarily privy to.
If you haven't led a project like this before I actually work recommend working with someone that can help guide you through this process and ensure that you're actually accounting for everything. It isn't something that you can't do by yourself or in a small team, but generally smaller companies will have a harder time accepting that the journey to zero-trust won't be free of issues. They tend to start seeing issues and just thinking that you don't know what you're doing because you're actively breaking things, involving them as much as possible in identifying requirements will help lessen that impact.
... View more
