Cybersecurity Leadership

Zero-trust security should be seen as a strategy to protect high-value assets and is not tied to a specific technology or product, says the model’s creator John Kindervag

Achieving a zero-trust framework is a multi-year maturity mindset, one that requires trust and cooperation to ensure that the framework is built on a solid foundation.

Adopting zero trust is no fail safe against cyberattacks. Attackers are constantly finding new ways to get around zero trust, and this often happens because not everything within the organization environment was considered when employing zero trust.

Putting technology first is the biggest mistake you can make with Zero Trust; working with stakeholders is key to success

Businesses that adopt zero trust cybersecurity measures must remember that technology is less important than meeting stakeholders' needs.

Zero Trust is a strategic approach to cybersecurity that secures an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.

In 2022, supply chain cyberattacks will continue to increase, and Zero Trust will gain adoption, among other security trends.

With the amount of damage an attack could cause to a company's reputation and bottom line, it makes sense to trust no one.

A new report from Microsoft suggests that cloud-based technologies and Zero Trust architecture will become mainstays of businesses' cybersecurity investments going forward.

The adoption of zero trust, digital empathy on end-service employees, and diverse datasets and cloud tools has increased drastically to tackle cybersecurity issues during the pandemic.

The zero trust security model is more than just products and network segmentation, it’s an architectural design principle with identity at its core that needs to be applied enterprise-wide

Dark Reading talks cloud security with John Kindervag, the godfather of zero trust.

Zero-trust network implementations can require an entire redefinition of your network architecture, the introduction of new technologies, and the training of both users and IT. Here’s what you need to know when you make your move to zero-trust.

Zero trust is not enough. CISOs should abandon trust and focus on verifying everything from third-party tools to their teams' abilities.

Old perimeter-based defenses can throw up roadblocks to implementing a zero-trust strategy, but a measured, phased approach will see you through.

Zero trust is not a product, but a security methodology based on defense-in-depth and least-privileged access concepts.

SaaS applications are, by definition, managed by a third-party and outside the organization’s control. How can organizations regulate access and ensure that applications and data are safe from attacks?

Unfortunately people remain the weakest link. Human error is the top reason for breaches, accounting for 70% of successful attacks.

Our digital world is under assault, and we need to urgently upgrade our defenses. Three significant risk management themes have been put forward to help ameliorate the digital risk ecosystem including: security by design, defense in depth, and zero trust. We need all three.

Businesses need to do more than implement a zero trust framework. They need to ensure that they are trustworthy to their employees in order to facilitate this new way of working.

You can use this opportunity to increase cybersecurity awareness across your organization.

Zero trust refers to the notion of evaluating  the security risk of devices and users within the context of any given moment, without automatically conferring access based on credentials.