3 priorities for adopting proactive identity and access security in 2025

Microsoft sets three 2025 priorities for identity and access security—start secure by default and protect all human and non-human identities; extend Zero Trust across every user, app, endpoint, network, and internet destination (retiring legacy VPN, unifying policy engines, enforcing least privilege); and leverage generative AI (Security Copilot) to speed investigations and troubleshooting—supported by metrics (e.g., rising password attacks, improved outcomes with managed policies) and concrete actions such as MFA/passkeys, risk-based Conditional Access with continuous access evaluation, shadow IT governance, and managed identities.