{"id":26437,"date":"2019-03-28T20:19:15","date_gmt":"2019-03-28T20:19:15","guid":{"rendered":"http:\/\/02fef788-7cf5-4473-bdec-4873d7223c38"},"modified":"2019-03-28T20:19:15","modified_gmt":"2019-03-28T20:19:15","slug":"the-tao-of-zero-trust","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/the-tao-of-zero-trust\/","title":{"rendered":"The Tao of Zero Trust"},"content":{"rendered":"
<\/div>\n
\n

Must Read: <\/strong>Download Forrester’s complimentary guide<\/a> to learn how and why Zero Trust is the best way to defend your business. <\/em><\/p>\n<\/blockquote>\n

I get asked two\u202fquestions at least weekly, in some cases almost daily: <\/p>\n

    \n
  1. Where do we start for Zero Trust?<\/strong> \u202fFix your IAM and\u202fuser side of the equation. <\/li>\n
  2. What is the difference between\u202fother frameworks\u202fand Zero Trust?<\/strong> OK, now we can get down to the nuts and bolts on this one. <\/li>\n<\/ol>\n

    Zero Trust\u202fturned 10 years old this year. John\u202fKindervag’s\u202fresearch and analysis of enterprises\u202funcovered\u202fthat\u202fdangerous assumptions of\u202f”trust”\u202fhad become\u202fan essential part of the network.\u202fHe realized that the human emotion, trust, was\u202fmore than\u202fa\u202fsimple\u202fflaw;\u202fit represented a major\u202fliability for enterprises’\u202fnetworks that would lead to failure over and over again in the years to come. <\/p>\n

    Since 2010,\u202fattackers\u202fhave\u202fbreached\u202fthousands of companies,\u202fstealing\u202fbillions of\u202frecords.\u202fSome companies went out of business, some\u202fgovernments\u202fsuffered geopolitical setbacks that would take years to unravel,\u202fand\u202fmany citizens have lost faith in the\u202fintegrity of\u202ftheir countries’ electoral procedures.\u202fAnd none of those exploits or breaches\u202fever\u202frequired\u202fattackers to use their\u202fmost sophisticated skills or techniques. Most of them began\u202fwith\u202fthe\u202ffailure of\u202fa few\u202fbasic security controls\u202fand\u202fthe inevitable lateral movement\u202fof attackers. <\/p>\n

    Also: <\/strong>Mueller report confirms the worst: National sovereignty is at risk worldwide<\/strong><\/a><\/p>\n

    Zero Trust wasn’t born out of\u202fa\u202fneed to\u202fsell another security control or solution. It was born\u202ffrom a desire\u202fto solve a real enterprise issue.\u202fAnd just as the threat landscape and the challenges have evolved\u202fover the last 10 years,\u202fForrester has worked to build out\u202fthe original concept into a\u202fsimple\u202fframework we call ZTX, or Zero Trust\u202feXtended. <\/p>\n

    Our\u202fframework\u202fsolves the architectural and operational issues with Zero Trust\u202f– namely, how to get started and how to sustain a Zero Trust approach. \u202fZTX\u202fcovers how to\u202f”build”\u202fZero Trust\u202finto\u202fthe technology stack of your\u202fenterprise.\u202fIt helps\u202forganizations\u202funderstand how they can choose\u202fsolutions that deliver on\u202f Zero Trust\u202fprinciples\u202fthat enable their strategy over time. Forrester\u202falso\u202frolled out a series (two\u202fso far) of virtual infrastructures\u202fto\u202fshowcase what Zero Trust implementations look like –\u202fwe ate our own dog food. <\/p>\n

    Zero Trust\u202fworks, but that doesn’t make it easy.\u202fForrester\u202fhas clients\u202fengaged in\u202frolling out\u202fZTX\u202ftechnologies and approaches,\u202fand we continue to revise and update our research\u202fas we work with more enterprises.\u202fOur\u202fvirtual architectures\u202ffurther cement\u202fthe validity of our approach. <\/p>\n

    \n<\/section>\n

    You might have noticed an explosion of Zero Trust recently. We think\u202fthis\u202fadoption is based\u202fon two factors: <\/p>\n